This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
File:                     PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft (raw, json)
Hash identifier:          CTWpqQYgaSbl24kiibNRwpk1I5NDCKUZh35I8qWqqQg=
Subject key identifier:   3E:FC:44:21:22:25:69:14:D7:40:99:9D:DD:06:E0:50:7A:34:41:EF
Authority key identifier: 3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
Certificate issuer:       /CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Certificate serial:       019C41337D01D80B4E6B13EEEABF64762D6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
Manifest number:          0262
Signing time:             Mon 09 Feb 2026 07:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 07:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 07:00:18 +0000
Files and hashes:         1: PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl (hash: ppzP6CGDeHKOll63FiqcSkh+Pbnnh1nI2/lD8ywfqAE=)
                          2: j0XYpT3fQfPhqOVaGf1qoZYJiUY.roa (hash: p96sB0NTL/aNTTxP4wqEBEwGR5tjmR72wLuv/hfrJqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:33:7d:01:d8:0b:4e:6b:13:ee:ea:bf:64:76:2d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d82f1fce008bcc725ddbbe7067451dd82059307
        Validity
            Not Before: Feb  9 07:00:18 2026 GMT
            Not After : Feb 10 07:00:18 2026 GMT
        Subject: CN=3efc442122256914d740999ddd06e0507a3441ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:27:04:30:01:8a:06:d1:74:61:f1:c1:87:3f:
                    ce:8b:1f:a2:0f:fe:86:30:58:e9:85:e7:7e:c7:68:
                    7c:d0:83:40:ab:d8:e2:75:6d:28:8f:53:5a:ed:09:
                    9c:5a:6c:39:9b:02:6c:f7:de:4c:75:13:0d:2e:19:
                    82:c5:88:78:0a:68:62:9d:d1:b0:04:fb:a3:e4:8c:
                    ac:9c:1d:be:2b:18:94:73:f9:4d:1f:b2:a1:ec:2e:
                    94:34:e5:fb:b6:41:34:5c:be:f4:5f:35:69:8d:78:
                    55:2e:8c:97:4c:96:81:ce:c2:13:05:ee:25:d4:2d:
                    77:08:b4:e7:cd:b2:3a:79:9c:e4:c6:03:7d:f3:a0:
                    0e:7e:d6:08:c4:02:1f:8a:04:79:9a:e6:34:6b:52:
                    58:57:58:2d:e7:39:9d:63:5d:9f:a8:d2:12:4f:83:
                    32:be:90:ef:6b:a8:04:83:30:27:47:4f:9c:50:e3:
                    18:3c:b9:d5:b6:22:d3:45:9d:03:bb:fa:5e:52:08:
                    1c:5f:05:4f:1e:fe:3b:b4:ed:0b:26:56:eb:45:0a:
                    50:ef:ce:59:b3:40:f0:6a:d7:91:7f:29:3b:16:59:
                    20:0b:f2:1a:a1:86:c3:80:75:bc:ac:71:65:25:4e:
                    1d:b8:23:23:6b:95:6c:d5:3e:e7:42:dd:16:64:06:
                    2e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FC:44:21:22:25:69:14:D7:40:99:9D:DD:06:E0:50:7A:34:41:EF
            X509v3 Authority Key Identifier:
                keyid:3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:40:b8:37:a6:f7:37:ad:33:ba:a8:d1:65:2c:e7:0c:7c:86:
         fd:de:ba:40:e0:75:c8:e8:ce:8c:3f:30:c6:80:e8:2c:f8:5a:
         46:b5:4d:8f:bc:7c:9a:26:d2:89:f4:e7:66:ed:d1:07:b5:3e:
         51:9b:4e:46:3f:ee:1f:31:bc:b5:14:1e:88:53:e9:74:df:3f:
         f2:ec:f6:35:1f:8b:d6:78:fd:a2:2c:1c:38:98:e9:50:fd:fd:
         ce:6c:3b:04:c2:fc:fa:30:6c:f8:13:9a:a1:6b:38:06:0d:b7:
         7b:9a:98:3d:e6:5d:fd:a7:22:96:18:10:76:1d:79:cb:b0:62:
         72:dd:73:84:55:45:7f:bd:d7:0a:22:7f:36:4d:13:aa:04:bb:
         84:5f:37:f4:18:98:21:72:eb:aa:1e:21:7b:89:c2:9f:c2:69:
         ae:3f:97:e1:dd:96:4f:9b:cc:db:3c:43:63:3a:14:19:52:21:
         ad:35:85:fd:62:f1:93:bb:65:ca:85:5c:b1:1d:3a:0c:e3:1b:
         c7:34:25:1a:84:4c:0c:10:6d:e9:2b:7d:b3:e9:37:aa:22:8d:
         5a:23:75:1f:89:a9:f6:4b:c6:af:0b:76:f3:f3:7d:b4:c5:58:
         ac:03:f0:8e:76:d8:eb:77:34:81:1e:28:48:30:5b:b9:ce:ab:
         79:8d:e7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:44 2026 by rpki-client