This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
File:                     Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json)
Hash identifier:          bLVeSShS1RU3LIWe1TInzXKU4XQTy+3r8rNTciQNrDo=
Subject key identifier:   3C:79:89:41:3B:14:3F:7C:A0:A1:C7:02:72:1C:FA:B2:F6:10:3E:85
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Certificate issuer:       /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial:       019C273D0AF8684D2DEEDC269C977E2ADC76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
Manifest number:          11CA
Signing time:             Wed 04 Feb 2026 06:00:37 +0000
Manifest this update:     Wed 04 Feb 2026 06:00:37 +0000
Manifest next update:     Thu 05 Feb 2026 06:00:37 +0000
Files and hashes:         1: LDms8nxe60K6COjjp_csNfhmghs.roa (hash: Q5tvWtDVNBkz/BRp4dl8220S6HSORZZf3f/jyOpji8U=)
                          2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: BcNfxYo3qNme5w2Y0efMZXiAmT4qLuTLpSbtaQRyZh8=)
                          3: T6VYQnhnQYETwVj8BZYLRwwLS3U.roa (hash: C4QUjsV9O/nqAXRjoFy9pa8X3S9h9F1PXPJew5ITvec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 06:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:27:3d:0a:f8:68:4d:2d:ee:dc:26:9c:97:7e:2a:dc:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
        Validity
            Not Before: Feb  4 06:00:37 2026 GMT
            Not After : Feb  5 06:00:37 2026 GMT
        Subject: CN=3c7989413b143f7ca0a1c702721cfab2f6103e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1f:ca:b1:e0:74:89:f1:46:45:b0:2e:7c:d2:
                    9a:2a:78:90:16:b3:2f:a4:3a:df:4b:35:d0:f7:27:
                    e0:1d:56:89:9f:4b:70:cf:33:e5:80:47:40:0d:e0:
                    bb:62:14:bd:7c:37:c3:0d:11:a4:5b:91:4f:7e:ed:
                    2e:97:ff:ff:13:74:1a:86:98:5c:94:14:3b:49:7c:
                    8d:b2:b6:74:88:91:e5:85:01:e0:90:a7:e2:dc:dc:
                    5a:80:90:58:0f:52:d5:e8:92:8b:3a:53:a9:d6:9b:
                    ec:30:2b:b9:d6:aa:0d:06:8e:80:3b:0b:ca:8f:a0:
                    66:6b:8d:b3:72:05:fa:f7:7c:80:43:7b:37:23:93:
                    6b:60:f4:0a:2a:d6:76:f4:11:05:47:73:23:be:63:
                    95:25:ee:83:ad:fd:5d:db:71:88:e5:89:69:2a:8a:
                    e0:68:ae:0d:b6:48:a1:62:ba:fd:e0:4d:1e:f1:ca:
                    92:4a:64:9c:42:21:8a:55:bc:3f:2e:e6:e8:9a:2f:
                    9b:aa:5b:d7:f4:23:60:f8:b9:a8:e0:eb:a3:fc:06:
                    28:4c:f9:6d:9b:91:62:4b:62:e2:43:97:93:03:5b:
                    c7:07:b3:b9:50:0a:ab:a4:83:53:bf:06:bc:d3:56:
                    92:72:e4:58:5a:c1:f7:b2:c5:0b:82:76:b9:ba:34:
                    82:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:79:89:41:3B:14:3F:7C:A0:A1:C7:02:72:1C:FA:B2:F6:10:3E:85
            X509v3 Authority Key Identifier:
                keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:c7:6b:cf:89:ee:70:99:f1:b2:a6:97:96:c3:25:ef:c5:f5:
         71:ef:6b:d1:e8:9e:0b:23:9c:ef:09:87:a9:a5:cb:63:2b:ef:
         86:05:bb:98:51:e3:c9:82:57:90:ae:fb:21:57:f7:48:63:54:
         73:54:a7:c7:f1:2c:20:99:19:a1:c8:6c:79:e4:07:55:35:24:
         44:27:cc:61:38:63:25:6a:fe:cc:cb:71:02:3c:d7:96:96:ea:
         76:86:67:11:49:3e:c9:76:9c:0f:6a:c8:5e:c0:9d:4a:f4:76:
         bc:7d:66:6b:4b:ab:33:36:01:54:00:f5:55:e3:32:d5:4e:17:
         ef:20:76:cf:b9:37:bc:df:62:6d:c5:cc:0b:5b:2d:00:dc:97:
         57:e3:b6:4f:11:09:86:a6:6f:f3:0b:b5:34:22:d8:6e:ee:2a:
         4a:9d:75:76:15:71:44:fa:34:d8:9a:44:b7:98:9b:50:8b:cc:
         96:d0:26:5a:a6:99:a2:bc:7b:f6:52:50:a0:f7:72:de:76:b0:
         7d:49:1f:63:66:8f:e3:eb:14:9b:19:d5:32:2a:df:12:89:d0:
         51:70:f4:e6:74:5b:13:8a:20:2b:26:b8:02:1a:d4:e2:07:25:
         3c:ed:f5:bf:d5:b6:25:b1:02:9e:91:ac:56:d7:4d:ad:27:78:
         6e:c3:cc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 15:11:08 2026 by rpki-client