This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
File:                     3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft (raw, json)
Hash identifier:          N6nXj3vrlgBkMF5U/YoI6mTfg2ckdsBrSLETYqvwEcs=
Subject key identifier:   F2:D9:50:AE:1C:3B:66:01:F4:7C:72:A4:7A:85:BB:07:A3:64:AF:86
Authority key identifier: DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3
Certificate issuer:       /CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
Certificate serial:       019C43C6F6085354FA3064E32D865DA71677
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 19:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:38 +0000
Files and hashes:         1: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl (hash: h1XEjKTt602K5mBTdZ/WIM4EMc09s0L8uaCU/oaLmU8=)
                          2: O3DthDNJHTkW6CaCtq4iGTN0kKk.roa (hash: fTCVbDqUmnvXfBttOJTrF2Z8Jv/5afPtRQV2ebBHPFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:f6:08:53:54:fa:30:64:e3:2d:86:5d:a7:16:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
        Validity
            Not Before: Feb  9 19:00:38 2026 GMT
            Not After : Feb 10 19:00:38 2026 GMT
        Subject: CN=f2d950ae1c3b6601f47c72a47a85bb07a364af86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0c:0a:21:63:32:b6:59:a2:da:e4:9e:1f:69:
                    67:79:c6:0e:ef:72:d6:8d:bf:39:58:a3:3b:e5:a7:
                    69:9f:01:f5:b3:96:78:e3:7e:3b:0a:12:70:bb:c2:
                    a9:8d:d5:18:d6:2d:49:c0:ab:6b:08:d7:13:31:16:
                    1c:d7:7c:9a:0f:8b:30:1c:89:88:5b:65:a5:65:e4:
                    c1:b0:42:c8:c2:98:14:ff:95:2a:ab:81:90:34:55:
                    f2:76:5e:39:4e:c4:4c:2f:dd:4b:b1:6a:e9:ac:28:
                    d1:11:92:73:45:9e:08:bd:53:62:1d:21:75:d0:08:
                    50:c6:96:23:59:3f:32:18:c0:60:4c:89:e5:09:43:
                    83:02:9f:96:96:6d:f3:3c:84:33:a8:79:ec:8a:20:
                    d1:13:2c:33:ea:46:95:83:a6:64:01:73:14:0d:bc:
                    a3:21:a7:bc:36:0b:de:81:78:0e:2b:f7:cb:d1:ac:
                    7e:2b:77:1b:3e:7a:ee:52:0a:8f:65:04:b0:ae:7c:
                    14:ce:95:0b:31:40:b1:12:0a:a0:f3:15:59:17:d8:
                    4f:41:55:48:2c:18:f4:0a:f9:16:69:6d:9c:4c:09:
                    01:f3:5d:38:d5:39:1d:80:62:36:a7:4d:46:c7:e7:
                    20:d6:56:0b:8d:a2:76:63:b0:44:67:9b:9e:e2:fc:
                    dc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D9:50:AE:1C:3B:66:01:F4:7C:72:A4:7A:85:BB:07:A3:64:AF:86
            X509v3 Authority Key Identifier:
                keyid:DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:78:23:44:df:aa:ae:70:99:9c:d8:9b:86:13:61:de:04:38:
         70:3f:24:52:5d:40:63:f5:06:5a:8e:28:53:11:3c:16:81:8c:
         f0:2b:44:5f:59:68:3a:18:53:57:05:f4:c3:ff:a1:8d:bd:ce:
         af:3e:a2:be:c6:e0:99:1c:72:04:70:d3:92:0a:9f:6e:43:79:
         eb:33:70:96:6e:0f:6a:62:b5:46:ee:c4:40:b2:d5:e6:9d:f8:
         c0:15:0a:e5:0b:6e:3c:e4:86:a8:35:0e:57:ff:cf:43:6a:8d:
         cb:68:b3:d9:5c:69:cd:e1:ac:49:58:2d:a2:37:c1:29:b9:77:
         6e:ea:0e:35:be:15:e8:bc:46:59:6b:8c:84:9f:89:bc:0d:b5:
         1a:b2:e8:af:0f:4c:f9:da:69:71:43:d7:28:a6:44:60:ef:ba:
         95:1f:d3:51:83:1d:d4:3b:6c:32:ac:10:77:32:10:c0:80:3f:
         1b:36:da:33:79:7c:18:86:9f:37:df:61:23:e4:2b:87:bd:99:
         ba:4a:e7:f6:dd:4d:d0:29:12:ce:34:45:df:b7:82:9f:9e:cb:
         a9:3b:30:5e:0c:6e:d8:ea:a5:97:81:cd:59:4e:2b:0c:bc:2c:
         6f:a5:d4:67:3a:66:f3:d3:ba:1b:da:00:96:d8:15:67:46:e4:
         ee:b4:04:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:15 2026 by rpki-client