This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
File:                     36vRQuiUFoiDzkUicxf5-lAiGU8.mft (raw, json)
Hash identifier:          Ow9Mq7zfAdchSP4f5D+1dAvUaMLIRoIuf9hdNUe/0NU=
Subject key identifier:   1C:11:52:2D:20:2C:01:59:E8:12:04:16:30:0D:EA:A3:01:27:E5:18
Authority key identifier: DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F
Certificate issuer:       /CN=dfabd142e894168883ce45227317f9fa5022194f
Certificate serial:       019C41D89DC08AA19943A56F32F2FBEC8F39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
Manifest number:          0E0B
Signing time:             Mon 09 Feb 2026 10:00:41 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:41 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:41 +0000
Files and hashes:         1: 36vRQuiUFoiDzkUicxf5-lAiGU8.crl (hash: ivxrrqPUemS5WIt+1+BB3idKxkrsPcPqhlQowH+CPnk=)
                          2: uI-quQ5_A0kZBp2yrmzexnFbllM.roa (hash: rDYsx8yebGIjiP0Kf0GxRBRYizjVck1GA16b9PLZbjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:9d:c0:8a:a1:99:43:a5:6f:32:f2:fb:ec:8f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfabd142e894168883ce45227317f9fa5022194f
        Validity
            Not Before: Feb  9 10:00:41 2026 GMT
            Not After : Feb 10 10:00:41 2026 GMT
        Subject: CN=1c11522d202c0159e8120416300deaa30127e518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8e:04:e2:76:57:fb:6d:67:f7:4f:0d:8c:db:
                    06:a0:0d:f2:1a:cf:82:48:75:4e:4d:76:8e:b1:4f:
                    b9:e1:11:97:ec:be:cb:22:00:ca:bf:14:a5:2c:66:
                    41:fd:6a:0b:0e:11:ae:ee:01:d3:21:6e:6a:c2:e3:
                    90:21:2e:a4:18:db:cb:ed:ff:59:e3:15:ce:a5:d5:
                    cb:70:4e:d3:0a:50:4f:45:b5:74:6a:c6:bf:c8:bc:
                    61:08:05:05:cc:49:3f:3c:0f:80:ab:2d:a8:c5:03:
                    82:d6:32:80:26:61:e5:bf:36:fb:37:6f:42:8b:79:
                    94:8d:da:83:b8:79:86:83:50:1f:4b:99:e3:fd:60:
                    b9:46:d0:0c:c9:90:c3:ee:1b:12:b2:c3:ec:41:4c:
                    13:77:12:fe:9d:5d:c0:eb:18:d8:ef:07:31:cb:b4:
                    61:e9:23:e7:ab:1f:fc:46:1f:f0:fe:fc:61:ad:fc:
                    8b:72:9d:94:51:48:37:f3:db:95:d3:a0:a2:2d:01:
                    b9:53:6d:0b:0d:e8:06:c7:26:f7:49:88:bb:d9:aa:
                    a6:ba:90:2c:4a:d1:51:13:4c:0d:d7:3e:dc:3c:c7:
                    d1:3c:2d:3e:d0:c3:d1:ef:86:ad:1d:eb:97:b0:b5:
                    1d:47:fb:6e:8f:50:dc:f6:17:5d:79:fa:1c:94:9a:
                    71:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:11:52:2D:20:2C:01:59:E8:12:04:16:30:0D:EA:A3:01:27:E5:18
            X509v3 Authority Key Identifier:
                keyid:DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:32:0b:2d:09:68:9e:a5:ea:87:14:59:21:43:85:75:94:c0:
         af:37:d8:15:36:8a:49:35:8a:a8:4f:d7:46:e6:c6:ec:d1:60:
         d1:55:f8:e3:64:f2:d3:22:3c:d9:93:fa:70:3a:63:56:89:8b:
         ca:80:8f:9c:60:a0:78:c3:ed:f3:76:cd:6a:ca:cd:85:4b:ce:
         99:7b:ab:3f:14:db:5a:0a:50:db:41:1a:6a:9d:2b:72:25:13:
         e3:dd:23:af:ec:78:b4:a6:90:e1:93:2e:84:91:49:89:6b:4e:
         85:04:51:f1:76:86:28:ef:76:70:a4:1e:07:60:27:df:62:bb:
         39:4d:cc:83:85:fd:09:d3:8a:15:01:77:78:dc:72:7c:79:c6:
         76:d8:b3:5a:26:85:d6:1d:cf:b3:90:dc:2d:af:66:58:28:a6:
         b0:aa:07:b1:d1:55:4a:35:a7:28:a9:6c:34:7a:d9:61:a1:f3:
         c2:3c:59:f7:dc:24:5b:e4:09:f0:87:95:cf:18:c4:d0:25:64:
         a2:dd:30:3c:65:43:c6:97:56:09:a4:18:88:d3:77:75:07:88:
         bd:46:7a:25:6a:f3:fd:24:56:6c:bc:16:ce:fa:e9:42:bb:f3:
         d0:30:2a:15:4e:9e:6c:81:24:de:e8:90:fa:9a:de:ad:7e:dd:
         81:a9:b1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:33 2026 by rpki-client