This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
File:                     P9WU69efjdhbR5LpUzvkaBaohgY.mft (raw, json)
Hash identifier:          JwitoC88EouRthtYIhJXkyJy33Au0yxEgz3keWJE2tM=
Subject key identifier:   C2:41:C7:35:75:B5:4B:0A:62:2C:EC:50:3B:C8:87:5E:DB:16:E0:1D
Authority key identifier: 3F:D5:94:EB:D7:9F:8D:D8:5B:47:92:E9:53:3B:E4:68:16:A8:86:06
Certificate issuer:       /CN=3fd594ebd79f8dd85b4792e9533be46816a88606
Certificate serial:       019C427DD081E6CAA3BF3971BAE3CD2398BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
Manifest number:          138E
Signing time:             Mon 09 Feb 2026 13:01:07 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:07 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:07 +0000
Files and hashes:         1: P9WU69efjdhbR5LpUzvkaBaohgY.crl (hash: zC0ueN1fz+9oo42tGrkL6goQDUsRnnfk77eF0NXTmPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:d0:81:e6:ca:a3:bf:39:71:ba:e3:cd:23:98:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd594ebd79f8dd85b4792e9533be46816a88606
        Validity
            Not Before: Feb  9 13:01:07 2026 GMT
            Not After : Feb 10 13:01:07 2026 GMT
        Subject: CN=c241c73575b54b0a622cec503bc8875edb16e01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:52:59:92:03:da:74:e0:44:73:0b:70:42:ca:
                    7e:db:d0:86:e6:10:fa:7b:fb:f1:3e:4f:2f:dc:57:
                    8a:0b:b8:99:4b:66:a0:8a:53:af:db:56:14:cb:88:
                    47:8c:5f:f6:f2:e4:49:f7:89:38:bf:03:95:da:31:
                    30:7b:cf:f3:46:bf:06:11:2c:e1:6a:e0:42:83:60:
                    0c:0d:72:bb:bd:f2:6e:45:06:4a:c5:f4:04:b6:af:
                    ab:4f:4e:d3:fe:58:e0:6e:28:c2:11:80:72:72:6b:
                    67:94:0b:2f:59:98:9b:38:8c:a3:43:4a:d3:9f:9c:
                    d3:15:b3:a1:52:be:33:4e:52:8d:90:af:d0:4d:6b:
                    5d:d6:eb:ff:4a:35:1a:18:5b:3f:07:e0:08:8c:46:
                    66:a6:bd:d6:c2:38:c6:bc:ec:53:20:67:0e:d8:cc:
                    98:8a:e5:ca:25:e8:84:3e:cb:36:d2:c4:86:61:1a:
                    c2:da:d2:08:84:d5:ef:c4:30:b6:0d:9e:32:be:66:
                    1d:5c:a9:59:3e:04:dc:40:bb:57:ff:70:f2:79:d3:
                    cd:f2:de:04:14:8d:6f:34:3b:86:8c:06:b2:6c:e3:
                    87:8c:3b:fe:0d:40:2f:d2:4f:07:c8:09:d7:61:07:
                    fa:63:1b:bd:5f:8f:44:81:7a:0e:03:6d:3d:ce:37:
                    bf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:41:C7:35:75:B5:4B:0A:62:2C:EC:50:3B:C8:87:5E:DB:16:E0:1D
            X509v3 Authority Key Identifier:
                keyid:3F:D5:94:EB:D7:9F:8D:D8:5B:47:92:E9:53:3B:E4:68:16:A8:86:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:75:61:09:25:b5:0e:56:e6:40:17:0f:f9:e8:e6:6e:c3:6d:
         6a:25:d9:1b:d3:eb:0d:6c:48:0b:44:f4:cf:45:68:83:8f:0a:
         59:6e:80:97:e5:3f:ec:64:7b:44:57:0d:de:3e:59:07:39:63:
         ad:0e:f2:69:3e:4a:71:a4:f0:b2:56:09:e8:fd:a7:eb:e3:17:
         1e:1d:32:1a:de:9b:12:7c:fe:44:25:13:e1:aa:2c:d1:c6:bb:
         25:76:40:ef:a0:8a:f2:6d:aa:42:8b:b7:32:8b:52:72:d2:d6:
         b1:3a:5f:cf:83:12:db:22:73:c3:37:51:ae:7f:89:b7:91:ee:
         28:c9:cf:f4:91:fd:46:43:24:3b:88:8f:72:40:e8:9c:ba:27:
         c8:de:0d:80:2e:5f:3f:74:1c:c2:d5:a4:ac:b5:8f:40:2c:17:
         be:c7:d1:25:79:87:d0:e7:74:bc:28:f5:d0:f6:f6:59:e4:55:
         23:ec:ac:4f:22:cc:d6:09:45:12:59:fe:5a:5a:0b:2c:20:99:
         a6:d6:3a:4f:58:58:79:6c:11:1c:bf:4a:74:9c:f2:44:ae:44:
         5d:d8:11:81:ad:8c:2c:65:e6:59:a8:5f:59:4a:6f:f5:45:46:
         1f:50:6e:e9:f0:fc:1b:1e:8f:e4:b1:0a:b9:b6:f3:04:51:7c:
         fa:ca:26:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:38 2026 by rpki-client