This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
File:                     s-3xF3T0QHrdvfPPukweeqAkIiM.mft (raw, json)
Hash identifier:          jwax0uWPxmefHG00jd9BQWM5vnPIfHcHXg8n0SQU+lo=
Subject key identifier:   07:34:55:7E:7D:7A:05:0B:D1:6C:21:25:1C:81:DE:37:4B:4C:11:52
Authority key identifier: B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23
Certificate issuer:       /CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223
Certificate serial:       019C443517CB503AF022FCE97D3C87DF1F32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
Manifest number:          059F
Signing time:             Mon 09 Feb 2026 21:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:56 +0000
Files and hashes:         1: dTnyHu7c5lmZ5YWNquE3Gp7QhhU.roa (hash: dYbqxC2rCCWq/yRZ4yUkpOLINJDRJe/smtZyFeEbLZs=)
                          2: s-3xF3T0QHrdvfPPukweeqAkIiM.crl (hash: PGK5dq1qRtSKXIDKg8PSvApSwTfL1c7CU7QaQEnS9sk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:35:17:cb:50:3a:f0:22:fc:e9:7d:3c:87:df:1f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223
        Validity
            Not Before: Feb  9 21:00:56 2026 GMT
            Not After : Feb 10 21:00:56 2026 GMT
        Subject: CN=0734557e7d7a050bd16c21251c81de374b4c1152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2a:0a:42:6a:e8:63:2a:16:09:7e:6b:87:96:
                    6a:3a:3c:74:be:e8:41:1d:5f:2c:31:ec:e4:a3:39:
                    8e:e6:1a:32:88:f9:5c:37:d1:7f:c6:95:8f:1c:b5:
                    50:62:ad:58:af:9f:f6:86:13:f5:44:20:91:01:32:
                    96:3f:d1:8d:83:40:54:f4:5b:55:83:ab:22:85:01:
                    e0:02:44:bc:a8:ea:61:a9:f8:44:56:99:b1:10:cc:
                    fb:1f:34:cb:74:3c:85:f9:22:2b:32:e0:0d:63:57:
                    c9:1c:b1:96:3f:de:7e:c3:5d:03:d1:00:50:a9:d7:
                    34:f1:c6:cc:e6:08:44:1e:a3:e3:eb:b3:0c:e1:d4:
                    e1:02:4b:f1:c0:9b:bc:20:23:d7:9b:dd:90:24:f8:
                    a5:bd:85:fc:89:97:df:3e:f4:b4:6e:e0:a3:a2:ed:
                    e9:b6:95:35:01:cc:c5:7b:28:33:59:21:3b:4f:8d:
                    87:f5:c9:78:d5:f1:40:db:bf:8f:cf:a6:f2:78:f4:
                    19:e4:c2:c8:6b:6e:83:3f:61:d5:ce:ec:ac:a5:6e:
                    62:ad:32:1b:b2:47:d3:73:bc:06:30:14:cf:09:3f:
                    b7:17:df:51:10:b6:e1:c8:1f:45:c2:5d:58:23:f5:
                    bd:3e:06:13:f8:45:16:76:2d:da:b7:ee:eb:8d:94:
                    81:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:34:55:7E:7D:7A:05:0B:D1:6C:21:25:1C:81:DE:37:4B:4C:11:52
            X509v3 Authority Key Identifier:
                keyid:B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:61:ed:d7:a8:2c:98:45:1e:79:4d:1d:ba:81:56:d4:26:fa:
         a2:ad:fb:5a:60:66:1e:2c:d9:60:f0:58:e8:c9:3e:4a:53:37:
         bd:ee:c1:1c:78:77:77:36:26:dd:3c:8f:30:c8:c1:61:2e:20:
         e0:d6:19:74:6d:1f:ae:b7:42:c6:87:2b:31:c6:13:13:8d:92:
         4e:14:4d:06:04:70:b3:3e:48:9d:05:1c:a4:4c:ce:86:64:c7:
         b6:ed:27:d2:66:83:18:81:c0:4a:64:2f:7f:f5:00:27:e6:27:
         08:90:a7:02:ba:51:20:c5:a9:92:59:af:d6:dc:08:7c:5e:9e:
         9e:e2:31:eb:54:cc:c3:a1:c5:1f:e1:f4:77:15:32:e7:bf:4f:
         d0:fb:bc:e2:ad:ae:8b:64:68:56:0b:61:e2:4e:f9:62:a5:12:
         ba:a1:a9:94:d0:b3:5f:de:02:ca:f1:ad:4a:ad:fa:c5:e4:fd:
         3b:e4:22:6c:c1:99:4d:be:1f:75:39:c0:c5:39:80:e0:f2:64:
         6e:67:95:34:cd:75:fe:53:90:f2:6a:c1:a7:2a:a5:51:c6:34:
         3a:54:47:fb:aa:3d:21:d0:cf:26:7c:d8:bb:45:19:b0:f0:93:
         0d:8c:0b:c3:c1:2c:0f:fc:2e:5b:50:c2:18:0b:6b:5b:ab:6d:
         e5:30:a6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:15:54 2026 by rpki-client