This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.mft
File:                     CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.mft (raw, json)
Hash identifier:          CQLP0bTpnyw0vVn9B7y8OWOTG8W9eUVnXiR+nzC1ZKc=
Subject key identifier:   BB:35:D3:3C:12:EF:70:39:9F:60:6E:17:3E:48:ED:17:EA:F4:8A:20
Authority key identifier: CF:7D:C5:A4:F7:02:D3:DC:9D:56:EA:35:B9:EE:20:2E:C5:49:64:7E
Certificate issuer:       /CN=cf7dc5a4f702d3dc9d56ea35b9ee202ec549647e
Certificate serial:       26EADF8EF9733A58FE75C2DE26BBE5EAE4AC85D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z33FpPcC09ydVuo1ue4gLsVJZH4.cer
Subject info access:      rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.mft
Manifest number:          03DF
Signing time:             Mon 09 Feb 2026 20:37:32 +0000
Manifest this update:     Mon 09 Feb 2026 20:32:32 +0000
Manifest next update:     Wed 11 Feb 2026 00:20:32 +0000
Files and hashes:         1: 323030313a3637633a6239303a3a2f34382d3438203d3e203437363839.roa (hash: rmFr1hAbwp39CaAvWfjI/9YJfehtGtyr7FIprJIz55E=)
                          2: 323030313a3637633a6238383a3a2f34382d3438203d3e20323130373631.roa (hash: gCkKOnxFjxxQuyxsmkIuFDYUOSkhKIumzrDy3kvYaVo=)
                          3: AS56762.asa (hash: WmRRzlNJ90g6dNVVxEyUbBfbgxTGcH/JWVC9rCgurlg=)
                          4: 323030313a3637633a6238383a3a2f34382d3438203d3e203536373632.roa (hash: YWJxHIHWRUFPkTTQOOQtlfptKffGhKBP38j4lAddJyo=)
                          5: CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.crl (hash: Yjd2G/m/0EIfuA3HXSjyn28Umf8PpkGHTCfQE4CE/9M=)
                          6: 323030313a3637633a3831633a3a2f34382d3438203d3e203437363839.roa (hash: nCM80PGcTZ8NfHgTx4k0jvV9j2He3nniamGJvbamKBc=)
                          7: 323030313a3637633a6238633a3a2f34382d3438203d3e203536373632.roa (hash: hpNbvieiBxQCZ+RF4CfbUfbEcDLWbpQFtRZ8j1V9k6g=)
Validation:               OK
Signature path:           rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.crl
                          rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z33FpPcC09ydVuo1ue4gLsVJZH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ea:df:8e:f9:73:3a:58:fe:75:c2:de:26:bb:e5:ea:e4:ac:85:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf7dc5a4f702d3dc9d56ea35b9ee202ec549647e
        Validity
            Not Before: Feb  9 20:32:32 2026 GMT
            Not After : Feb 11 00:20:32 2026 GMT
        Subject: CN=BB35D33C12EF70399F606E173E48ED17EAF48A20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2b:bb:42:83:c3:6a:16:15:ac:c2:3e:23:7a:
                    10:cc:6f:88:62:8c:b1:a9:66:3f:8c:36:15:09:6e:
                    24:4f:03:89:20:9a:6a:16:09:f6:b9:87:a1:da:c4:
                    e4:11:e3:66:4e:68:fd:e9:aa:02:96:3f:98:aa:de:
                    3f:88:94:d7:20:ae:d5:33:46:ea:2f:7c:b8:95:e6:
                    4a:fc:c4:98:73:92:b1:c8:d5:76:2b:35:fc:c7:c8:
                    ac:cb:5e:e5:2c:a9:bb:4c:e3:66:80:74:04:53:5e:
                    c1:db:6f:fd:00:0c:ca:84:b9:41:cc:e3:f6:9e:10:
                    95:85:18:f9:f2:80:dc:77:9a:1a:76:ed:1d:3f:36:
                    fe:33:24:6a:26:85:a1:aa:13:71:59:a6:b2:40:e9:
                    ca:f9:5b:b3:9c:44:28:30:2d:4c:0b:45:2c:af:94:
                    de:3d:2d:4d:73:a0:8f:d8:d3:2d:eb:a6:75:be:df:
                    07:1f:14:d7:d1:56:05:e1:33:d8:59:a4:32:a6:2d:
                    d3:15:3b:e7:b1:ff:fc:f2:47:18:46:6c:bc:b9:79:
                    a8:07:60:9c:87:c0:6d:56:15:c8:45:14:88:38:3e:
                    16:4b:9c:dc:0a:1d:e1:06:1c:93:c6:a7:ef:85:d9:
                    c0:21:30:88:62:2d:9c:22:76:e0:01:22:40:b7:5d:
                    96:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:35:D3:3C:12:EF:70:39:9F:60:6E:17:3E:48:ED:17:EA:F4:8A:20
            X509v3 Authority Key Identifier:
                keyid:CF:7D:C5:A4:F7:02:D3:DC:9D:56:EA:35:B9:EE:20:2E:C5:49:64:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z33FpPcC09ydVuo1ue4gLsVJZH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:28:b3:9a:f1:f3:9d:5c:7b:7c:8e:4b:30:38:d9:2d:5b:2e:
         2b:a1:50:af:1e:e9:39:3f:0d:14:c3:94:76:7f:0b:ed:6a:2b:
         ad:1c:96:5e:5c:d1:4c:c4:2a:4a:1a:6c:8f:8a:ae:f2:9a:8b:
         a1:53:47:c2:38:af:b2:b1:61:fd:4e:bd:5b:7a:ea:f6:ce:a2:
         92:e8:77:94:3d:51:e1:53:ee:e6:45:a6:f2:f0:4e:be:af:af:
         c2:10:91:3c:a2:ea:fc:f3:25:cb:a3:01:d1:44:23:75:98:b6:
         f8:8c:4c:51:fa:78:f1:08:a2:76:a1:36:2b:b0:6e:e8:ca:3f:
         b2:9c:3e:8a:6e:62:e9:4f:b3:f9:ae:3d:e1:0c:59:ec:85:8f:
         48:6d:e0:67:ce:5e:3d:25:e3:30:2c:9e:25:4b:9e:7a:5b:e5:
         df:db:50:fa:f0:c0:fc:f6:8c:b0:2b:95:49:9e:61:4d:ee:63:
         29:f7:90:4e:87:23:33:96:d1:72:10:b6:a1:18:a7:6c:78:a4:
         25:ab:c8:7f:84:cd:64:05:ce:9e:0d:07:35:bc:e9:9c:4d:41:
         85:77:70:6e:bc:4c:63:36:9c:84:aa:a7:5a:90:42:72:1d:83:
         bf:39:fb:04:74:a2:dd:2f:66:c9:f9:88:55:81:35:31:72:24:
         b6:6f:97:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:57:38 2026 by rpki-client