This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
File:                     3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft (raw, json)
Hash identifier:          fwRLRWoDB7MjBqghoM+GGgdVcFZ6Qph+gsHrw2HiwU0=
Subject key identifier:   B5:EE:69:E7:39:B5:16:CA:C2:8A:50:88:D4:CA:10:FD:95:3F:8A:90
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Certificate issuer:       /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial:       019C435904F06CC1A4AEFCCF114F875C95B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
Manifest number:          15DE
Signing time:             Mon 09 Feb 2026 17:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:33 +0000
Files and hashes:         1: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl (hash: 6SZKA/p2aUImOHjiPtazyYA7nW4flh6ueV19SDwKkps=)
                          2: A9X4cShQaD_mK0qE56RcWv1n6WM.roa (hash: 9IXqUIjUTj9O7jC2WLB7h7sR0zwiNThCiC66By6Zpvg=)
                          3: E-8LwQ3nkmMPj6iBH79pH_Ioo7Q.roa (hash: H+Jw3qwj6HENxblKk3mtHeFWeilk4ouDaO2sDtbof3Y=)
                          4: jkwVz1Hw91BkLL_xI1MZzZX_rL0.roa (hash: YC9Zk7AeEy/U3DouNdWT44SnwPIkBw05lQ2yggZvMZA=)
                          5: kbTz7ppbQ7oPVGXlVGsMEuIRKgQ.roa (hash: RN50qd/QjamGrCWyNEXJiSMZd1C/NPpkaF05FYlWOGk=)
                          6: t6DzHC5ObGj73UBZaITEwpeCUM8.roa (hash: 5ZqcYp/UH/RCnCIGSUqXeJuIlZCE+amVIkJSZa+FRKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:04:f0:6c:c1:a4:ae:fc:cf:11:4f:87:5c:95:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
        Validity
            Not Before: Feb  9 17:00:33 2026 GMT
            Not After : Feb 10 17:00:33 2026 GMT
        Subject: CN=b5ee69e739b516cac28a5088d4ca10fd953f8a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:52:d1:1e:1f:e3:c5:3a:db:e4:b8:7e:75:eb:
                    1e:41:2e:f0:08:dc:66:7b:d9:a3:50:8e:03:d0:b7:
                    f5:4f:80:d8:61:c1:c4:af:52:8c:c8:31:2d:33:8e:
                    2c:62:d0:93:0d:1b:e3:19:c4:4b:1f:8e:9e:5e:fb:
                    3d:5b:13:52:53:c9:5f:d4:6d:0e:5d:ed:e2:f0:a8:
                    a2:e2:c7:db:60:63:1c:e0:34:cf:84:36:08:12:a4:
                    06:64:ab:96:40:02:18:b2:76:24:8d:65:99:6c:35:
                    73:75:b4:fd:71:d8:46:2b:2b:e1:d4:5f:53:18:aa:
                    c1:de:66:1e:37:73:6f:ab:ef:5e:51:46:78:93:de:
                    27:14:76:12:17:c5:f4:65:17:98:13:d8:20:6d:51:
                    ad:35:44:14:a5:ad:33:c7:14:19:01:59:39:9f:c9:
                    5a:90:c5:3a:38:0e:53:c3:ea:55:16:c3:e7:7f:8c:
                    8d:c2:bd:38:82:1f:92:03:f2:dc:1b:b1:77:38:fd:
                    50:28:b6:fc:15:22:82:ec:e7:ea:64:37:74:0e:f1:
                    63:9d:5b:8c:4c:6b:4f:6e:12:29:70:65:f2:5e:1e:
                    45:76:f4:22:2f:10:67:20:bf:57:b9:7d:77:3f:2d:
                    64:59:08:74:f8:94:e9:7b:df:e3:7e:ba:f7:26:9f:
                    06:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EE:69:E7:39:B5:16:CA:C2:8A:50:88:D4:CA:10:FD:95:3F:8A:90
            X509v3 Authority Key Identifier:
                keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:6b:0a:de:45:5e:7f:b7:1d:50:10:ea:07:aa:08:e8:5b:25:
         d7:95:ce:c6:9a:e1:5a:81:45:5a:d1:80:7c:d2:08:57:50:19:
         e7:4c:56:7b:6c:28:da:fe:38:c4:c9:ec:c4:fe:d9:76:07:5c:
         e7:97:b8:b0:76:e3:29:f8:e8:5b:7b:ff:cc:9a:bc:bd:f6:c8:
         1c:05:fb:f2:31:21:86:d2:4f:c6:41:52:b9:5a:10:65:43:55:
         4a:fb:dc:dc:5c:91:b9:4b:a4:2a:7d:27:fb:49:f9:f5:30:ec:
         f5:40:7f:d2:95:1f:79:b1:bf:4f:e0:fe:7e:3e:41:c3:e4:d0:
         6f:0e:0b:13:f8:9c:d0:9d:a9:ac:b3:6b:86:24:2d:22:12:e7:
         76:12:62:6d:37:be:b5:f8:df:94:24:7f:99:2b:46:6d:78:13:
         dd:2e:db:de:97:0e:9d:aa:54:21:29:72:08:58:80:ea:3c:87:
         fe:ce:4e:7a:82:de:1c:90:0b:a7:91:29:12:b8:62:43:40:97:
         69:1f:f3:be:70:d8:41:58:52:7b:14:59:75:e7:d9:bd:6f:11:
         79:1b:18:fb:62:fc:7d:30:16:fb:cb:45:f0:af:f3:6a:fc:28:
         e3:b1:c2:84:b1:17:99:69:fa:0c:25:73:93:d6:ce:f4:c8:44:
         32:62:a7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:44:26 2026 by rpki-client