This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
File:                     S3CjpsSoVyUDdZizkT4hhp29040.mft (raw, json)
Hash identifier:          R6bxeG+8xt0TQYz1AwjRt/L67MahMjTKFRPmymnsYqQ=
Subject key identifier:   BC:F3:F1:E0:BA:EE:0B:0D:15:F5:AD:50:8D:D9:50:76:3E:E3:B4:C7
Authority key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
Certificate issuer:       /CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Certificate serial:       019C42EB1C446CB2B954A91BE2237C0B8EFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
Manifest number:          0C6E
Signing time:             Mon 09 Feb 2026 15:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:30 +0000
Files and hashes:         1: S3CjpsSoVyUDdZizkT4hhp29040.crl (hash: R9Ks9LCI1x5IzozIxvDU7UD7HrpQ9Tk0fjpxlOsk6YY=)
                          2: xLJtQXm9P6maxGC-hxArjHM1WvQ.roa (hash: fh/uCHUwOCAmoBiX5Ih0Qna/9cR2PxvxnSe6Xn99zr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:1c:44:6c:b2:b9:54:a9:1b:e2:23:7c:0b:8e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
        Validity
            Not Before: Feb  9 15:00:30 2026 GMT
            Not After : Feb 10 15:00:30 2026 GMT
        Subject: CN=bcf3f1e0baee0b0d15f5ad508dd950763ee3b4c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:eb:b1:35:ad:8a:a8:95:1f:0f:b5:89:a0:17:
                    5d:34:56:1d:75:f8:56:f3:c2:e4:0a:9c:96:ac:b2:
                    e0:74:ef:ef:5a:ea:65:f3:ff:ec:1c:69:57:b1:6e:
                    a9:53:a5:9b:ef:5b:1d:15:66:09:9f:54:08:e0:2b:
                    d0:73:13:2e:d1:2b:f1:c7:2d:55:70:52:a6:2a:4c:
                    32:7b:a3:76:59:cb:c8:38:26:32:38:d3:ef:a1:0c:
                    af:f1:e9:31:91:5c:b1:c0:2c:98:0e:90:eb:a1:15:
                    b6:69:5c:b7:04:d3:17:3f:68:d5:76:7f:a9:3e:57:
                    45:a4:15:56:70:24:a6:00:79:43:b7:5d:b0:25:66:
                    e7:1f:d8:89:87:7c:6f:8f:c7:13:3b:4d:41:6a:60:
                    4e:af:73:6b:19:54:e4:5e:d7:3b:e1:bd:70:19:6c:
                    fe:ba:7f:43:2b:36:e4:62:16:16:66:f8:39:16:c7:
                    d6:fd:e7:58:bf:19:02:bb:5a:9e:68:03:42:81:6d:
                    0d:be:f9:c6:e8:90:a8:73:77:02:89:b5:62:09:16:
                    68:42:c0:46:92:d9:7c:ae:ae:8b:05:2f:ab:8b:4f:
                    16:d2:31:08:b4:40:03:e2:ee:b3:0c:7e:f0:5b:0a:
                    2e:f3:80:4e:d6:33:ba:16:09:6a:72:cc:16:c4:1c:
                    18:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F3:F1:E0:BA:EE:0B:0D:15:F5:AD:50:8D:D9:50:76:3E:E3:B4:C7
            X509v3 Authority Key Identifier:
                keyid:4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:f9:00:55:f7:2f:3d:01:db:4e:10:8d:f7:4d:1f:b4:32:5a:
         72:75:96:db:5d:66:ba:64:22:10:eb:e2:82:54:44:a6:8b:97:
         9c:8e:a7:31:4d:7f:32:8f:5e:a0:e7:e0:fb:b5:43:74:2a:17:
         f7:60:9e:a8:1a:9b:76:9a:07:ea:e0:44:50:84:b9:95:04:54:
         2f:4a:2a:fa:a3:18:08:66:b1:41:1a:60:fc:12:3a:ea:47:bc:
         6c:10:b5:21:b2:9d:54:2f:2b:05:16:f4:fb:da:40:78:ef:78:
         df:04:ca:ce:42:9d:78:25:58:8f:cd:04:90:33:4a:80:f9:32:
         a3:0e:fc:65:c4:91:59:16:44:e2:63:a9:a6:6e:13:cd:aa:03:
         79:bd:67:d8:a6:98:46:11:df:ec:63:f8:94:c4:8b:90:2a:2e:
         54:41:f9:45:8b:96:64:fe:c4:71:51:0a:80:df:48:50:3f:88:
         98:d6:cd:54:81:c9:ba:80:3f:29:6e:46:c1:f6:9c:bf:cc:2b:
         57:62:1f:f7:ce:ad:25:24:9d:18:f8:77:40:ba:ec:7e:54:f2:
         0f:18:c6:ce:0f:2c:0d:28:c6:a8:1d:b9:b8:0c:cc:cf:1b:b7:
         29:b6:5c:d1:d9:9d:b4:7c:3f:7f:49:1b:49:c2:5b:a4:01:f3:
         a1:89:db:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:13 2026 by rpki-client