This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
File:                     3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json)
Hash identifier:          ae8bUzGIXEkV6wW0SLIyr07GPcRKmykfLzhX7FhT2Xo=
Subject key identifier:   F2:5C:62:7F:B1:F2:EE:9C:90:69:19:90:A2:62:13:60:AA:F2:7F:DF
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Certificate issuer:       /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial:       019C45479A3F2F0299BEC7FD02583D69A5BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
Manifest number:          07FF
Signing time:             Tue 10 Feb 2026 02:00:46 +0000
Manifest this update:     Tue 10 Feb 2026 02:00:46 +0000
Manifest next update:     Wed 11 Feb 2026 02:00:46 +0000
Files and hashes:         1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: n99TcMFq9gHrYIBYX+Wt3eM5wzGrhRRVZ5g94dyYuxY=)
                          2: MX6IKcbu6nbrcpKUTFeckfpRtKY.roa (hash: Nhzod3LsBM1lbTTIfaXha3ceYkrv/UztfLRskLbxjnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:47:9a:3f:2f:02:99:be:c7:fd:02:58:3d:69:a5:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
        Validity
            Not Before: Feb 10 02:00:46 2026 GMT
            Not After : Feb 11 02:00:46 2026 GMT
        Subject: CN=f25c627fb1f2ee9c90691990a2621360aaf27fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:84:0b:05:a1:63:ac:f2:d7:af:66:07:05:86:
                    2a:da:e7:fa:fd:8a:93:80:55:be:cf:03:e5:08:ee:
                    72:67:16:47:5f:ea:e0:f4:5c:4a:8d:f2:c3:41:54:
                    69:02:a2:79:a3:2a:06:98:59:c9:1d:06:97:fc:bf:
                    6c:10:9d:7e:45:27:8a:4b:96:bf:65:d8:7a:16:6d:
                    12:65:22:00:8e:58:c0:c1:ce:c5:9a:d2:1b:77:16:
                    93:80:10:2a:bc:0b:79:b3:2b:94:83:c8:7a:eb:d5:
                    dd:60:88:ff:2c:a9:2a:90:d2:a6:90:9a:fa:12:78:
                    a0:c2:df:1e:90:db:88:05:4a:2e:da:5d:7d:13:d1:
                    a8:10:38:5b:0f:10:74:e5:de:7a:9c:ed:b8:ac:e4:
                    57:69:91:d9:77:1a:43:ee:22:ca:9f:35:c3:0e:c8:
                    d7:15:94:0f:86:6a:d8:72:22:83:ca:48:9a:27:d1:
                    71:2c:53:c7:de:e5:39:15:6e:4d:95:c6:e9:06:bc:
                    5d:1b:f1:74:45:a7:61:c7:b2:d9:30:37:2b:41:13:
                    83:89:11:94:08:59:33:f2:51:c5:98:30:1f:21:a3:
                    53:e8:22:9d:cc:12:78:0f:34:a3:24:d5:e4:24:19:
                    20:ec:40:ea:58:5d:44:86:bc:97:0f:45:6b:e2:b1:
                    80:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5C:62:7F:B1:F2:EE:9C:90:69:19:90:A2:62:13:60:AA:F2:7F:DF
            X509v3 Authority Key Identifier:
                keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:90:c2:05:92:83:8a:b8:9b:e2:7f:d2:1f:6e:cf:5a:f1:5e:
         09:af:db:ed:07:fd:f6:95:91:7b:a2:be:93:26:c4:05:ed:4d:
         d2:60:61:b0:78:01:77:d6:b1:fb:d9:34:b4:25:63:7c:3b:b3:
         c6:b3:61:21:e9:e5:9b:6c:54:96:2b:11:98:af:21:88:a4:f1:
         9e:a6:23:ef:72:47:8a:37:de:b4:89:6a:f3:36:79:72:2a:fe:
         27:49:66:07:8a:ff:30:4d:0b:71:8d:15:19:5f:79:16:82:0e:
         0d:34:5c:12:ab:23:57:54:e3:5d:13:f5:62:b7:51:11:6c:d0:
         5c:a0:f8:e3:97:fd:e3:75:aa:49:50:75:df:e0:7a:83:f0:95:
         fc:92:92:dc:ff:7d:3f:b6:6d:b7:03:97:77:17:f4:36:71:ad:
         54:31:98:2d:37:64:64:5e:41:82:02:7c:7d:fe:c9:c3:e3:47:
         23:c3:eb:13:75:d5:80:a2:bc:91:09:67:42:d4:38:8a:09:91:
         8a:7c:72:f5:b6:21:4a:0b:ea:90:96:7c:5b:cc:bf:8e:c8:ce:
         06:c5:1f:21:b1:1d:3f:6d:9f:d6:de:bb:e7:f1:07:20:8f:37:
         ec:fa:96:0e:82:7a:52:b7:d4:ec:a7:d0:7f:f6:ba:cc:c8:eb:
         e2:9f:2a:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxFR5o/LwKZvsf9Alg9aaW/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjN2ZiZDY3NzQ0MWNiYjVjMGJkNDdiY2QyZjM4YmExOTJh
MzM2YTYwHhcNMjYwMjEwMDIwMDQ2WhcNMjYwMjExMDIwMDQ2WjAzMTEwLwYDVQQD
EyhmMjVjNjI3ZmIxZjJlZTljOTA2OTE5OTBhMjYyMTM2MGFhZjI3ZmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYQLBaFjrPLXr2YHBYYq2uf6/YqT
gFW+zwPlCO5yZxZHX+rg9FxKjfLDQVRpAqJ5oyoGmFnJHQaX/L9sEJ1+RSeKS5a/
Zdh6Fm0SZSIAjljAwc7FmtIbdxaTgBAqvAt5syuUg8h669XdYIj/LKkqkNKmkJr6
Enigwt8ekNuIBUou2l19E9GoEDhbDxB05d56nO24rORXaZHZdxpD7iLKnzXDDsjX
FZQPhmrYciKDykiaJ9FxLFPH3uU5FW5NlcbpBrxdG/F0Radhx7LZMDcrQRODiRGU
CFkz8lHFmDAfIaNT6CKdzBJ4DzSjJNXkJBkg7EDqWF1EhryXD0Vr4rGAawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJcYn+x8u6ckGkZkKJiE2Cq8n/fMB8GA1UdIwQY
MBaAFNx/vWd0Qcu1wL1HvNLzi6GSozamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iMjVjM2EtMGMwYi00ZDRlLTk4MTMt
NzZkM2Q0ODBmYTY4LzEvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iMjVjM2EtMGMwYi00ZDRlLTk4MTMtNzZkM2Q0ODBmYTY4
LzEvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpDCBZKD
irib4n/SH27PWvFeCa/b7Qf99pWRe6K+kybEBe1N0mBhsHgBd9ax+9k0tCVjfDuz
xrNhIenlm2xUlisRmK8hiKTxnqYj73JHijfetIlq8zZ5cir+J0lmB4r/ME0LcY0V
GV95FoIODTRcEqsjV1TjXRP1YrdREWzQXKD445f943WqSVB13+B6g/CV/JKS3P99
P7ZttwOXdxf0NnGtVDGYLTdkZF5BggJ8ff7Jw+NHI8PrE3XVgKK8kQlnQtQ4igmR
inxy9bYhSgvqkJZ8W8y/jsjOBsUfIbEdP22f1t675/EHII837PqWDoJ6UrfU7KfQ
f/a6zMjr4p8qHw==
-----END CERTIFICATE-----
Generated at Tue Feb 10 05:54:25 2026 by rpki-client