This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
File:                     t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft (raw, json)
Hash identifier:          A3LxJqypmfSr8xNAr9O2A3rpCTFKFZ+ckS39YQMkQFY=
Subject key identifier:   A2:34:60:48:38:BD:8D:B1:53:E4:9A:FE:73:70:C8:3D:DE:CE:0E:9B
Authority key identifier: B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
Certificate issuer:       /CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Certificate serial:       019C40FD7E2D6F99FE25B40F03EF3A3720A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 06:01:20 +0000
Manifest this update:     Mon 09 Feb 2026 06:01:20 +0000
Manifest next update:     Tue 10 Feb 2026 06:01:20 +0000
Files and hashes:         1: MwSiI9GchKzKf7qBJz16eEvXh-o.roa (hash: Ya5VgXFHK7dGaRYg+cDCB5cxS5nYPyBDhXocUh/n9cI=)
                          2: fjMubu-qV26IszBH3XWThUEp1jQ.roa (hash: nM6/+tL+EeUavkkSwnU8Z5g0dAyeEyJMz2lMeFc9xyg=)
                          3: t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl (hash: HPZjVlwqA9gXOuTWnp7RkFnH2AMLX5cHFBzihE9hAJI=)
                          4: zXLnfUczUBBQtu-uo6mCxhK1HNI.roa (hash: 5SgEpDYdRUOD9p+rClAHWfynMXe8ZAzFE3cf1BLha3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:7e:2d:6f:99:fe:25:b4:0f:03:ef:3a:37:20:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
        Validity
            Not Before: Feb  9 06:01:20 2026 GMT
            Not After : Feb 10 06:01:20 2026 GMT
        Subject: CN=a234604838bd8db153e49afe7370c83ddece0e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7e:37:77:ba:bd:fe:13:5f:81:1e:54:39:f2:
                    a8:bd:b9:3e:35:a6:d4:77:4f:49:dc:ee:5a:cb:4a:
                    0e:62:ef:bf:6a:0e:89:bf:bf:43:11:1c:1f:e3:ac:
                    42:52:e3:87:a8:36:1e:b5:2d:23:40:53:3c:d2:4c:
                    4e:76:7e:eb:21:dd:c5:da:72:1f:36:44:bf:68:c0:
                    c1:e4:e5:e9:91:d0:60:fe:27:5d:f3:ee:a4:1a:67:
                    7a:c6:61:bf:5b:a9:b1:5b:a3:38:5a:17:af:3a:ee:
                    a9:61:99:eb:f8:dd:62:bd:bd:03:a4:bc:aa:db:16:
                    65:3f:bb:eb:53:e5:dc:28:01:bf:6f:03:1b:e0:7e:
                    96:b6:2b:33:00:8f:6d:ae:0d:b2:c6:ae:71:ea:19:
                    a5:df:30:9f:35:fc:5c:f1:e2:58:13:b4:50:1b:fc:
                    c7:82:91:5e:39:a0:99:99:6f:60:34:17:3c:14:82:
                    df:87:e9:a1:12:64:7f:38:2d:48:83:54:d4:82:a6:
                    7d:59:91:57:dd:46:38:7f:3e:9b:8d:b5:d9:3f:8b:
                    f7:f3:4d:cd:62:ad:17:40:0e:b0:17:83:2c:75:82:
                    ed:0a:7c:64:a7:48:26:21:92:ad:8b:21:dd:50:e2:
                    87:7d:ed:b8:d0:69:58:38:5e:c0:b8:2e:a5:31:5c:
                    18:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:34:60:48:38:BD:8D:B1:53:E4:9A:FE:73:70:C8:3D:DE:CE:0E:9B
            X509v3 Authority Key Identifier:
                keyid:B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:21:50:24:d7:4c:cb:70:36:48:d9:66:07:b7:cc:f9:8b:7f:
         36:d5:7c:05:21:b0:61:a6:29:76:8d:50:3b:85:cb:f6:7e:24:
         79:ac:59:63:8b:48:0a:5e:6a:e6:2d:db:bf:b5:c2:fc:5b:8d:
         f4:ed:26:81:8e:c9:92:a2:8b:10:7e:1c:b8:c2:c9:1c:99:c2:
         87:2a:e0:2a:2b:9f:11:09:cd:c5:12:eb:b1:6d:28:99:b7:05:
         3f:33:d0:d3:e9:5b:05:16:f4:98:3f:13:20:83:2d:59:b1:9f:
         4d:d6:da:18:80:7f:e8:a0:11:63:fe:b7:40:fb:01:18:2f:b6:
         d0:72:5f:23:d0:85:7c:23:b0:98:49:a7:99:46:f0:63:1a:d9:
         47:4f:ee:94:a4:50:33:5c:b4:83:db:63:c2:1a:55:2d:9f:9d:
         64:32:aa:b1:1f:60:81:78:ad:9b:2a:9a:7d:22:de:0b:ac:dd:
         4d:0c:6d:99:f9:7a:22:f6:6c:61:83:49:fd:29:aa:25:13:f9:
         4e:a9:8e:c3:74:39:a9:68:d2:5a:d6:94:8d:60:1f:97:be:b6:
         cc:68:d6:1a:d0:e6:82:4a:27:24:c7:16:93:4c:81:52:56:52:
         1c:1a:49:04:2d:09:d3:00:ec:e6:88:18:9b:d5:d3:53:34:a0:
         16:76:a1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:02 2026 by rpki-client