This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
File:                     psb8p1JpxrAQpvpxCeQxXgagg9w.mft (raw, json)
Hash identifier:          Dh2z2N63plUzhZ2UAunaDgiyeuxsuJANlZBAkdN3puM=
Subject key identifier:   E7:D5:F4:23:2A:F7:60:39:78:36:63:F2:92:E5:DA:A3:DC:59:23:40
Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
Certificate issuer:       /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Certificate serial:       019C4358D7D4E729A58EE272913EAC5518F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
Manifest number:          1814
Signing time:             Mon 09 Feb 2026 17:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:21 +0000
Files and hashes:         1: YB8uK3pVluHiYzZPZMIZIoTnMfI.roa (hash: 7tVqBE7ngonAMrRLqWAl1nUrhE0O3jGUi08m3ADIJNY=)
                          2: psb8p1JpxrAQpvpxCeQxXgagg9w.crl (hash: HbYkKLU9rSIKLGhzm819hC16gXcVKadLV4XAZPKSp6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:d7:d4:e7:29:a5:8e:e2:72:91:3e:ac:55:18:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
        Validity
            Not Before: Feb  9 17:00:21 2026 GMT
            Not After : Feb 10 17:00:21 2026 GMT
        Subject: CN=e7d5f4232af76039783663f292e5daa3dc592340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9c:16:f7:c1:23:5b:71:ed:f7:9f:53:a8:dd:
                    f8:fe:ef:5f:a4:74:03:2d:7b:68:79:5a:42:ca:ef:
                    0c:df:6f:84:d0:25:56:b7:9d:81:84:ce:7a:87:e1:
                    bc:1e:bc:9a:e1:83:cf:33:76:5d:c2:4b:db:01:af:
                    85:aa:ea:18:d5:93:9c:55:27:7b:14:66:9f:37:5b:
                    66:ee:32:2a:71:46:e4:05:fb:ed:8a:28:78:8d:9b:
                    6a:0f:3f:47:c8:cc:71:0c:e5:c8:a3:d6:ce:9a:77:
                    32:4f:dc:73:19:dd:30:22:ee:b5:e0:fd:e0:1e:45:
                    22:d0:0e:cc:39:f3:a3:78:6d:52:2a:75:ee:e5:f8:
                    9f:7c:60:d1:c1:71:0e:ad:dc:d1:13:8d:de:8a:63:
                    7a:da:0c:56:75:14:ff:e4:a9:b5:d5:ca:6c:1a:c3:
                    16:d9:18:57:5a:b2:48:9e:31:0a:68:e9:c8:e6:e0:
                    b5:fb:d9:a9:35:a5:36:0f:f6:d7:bb:22:ee:5b:87:
                    3c:2e:2d:c4:13:22:18:fe:a3:6f:e1:f0:8f:eb:20:
                    2f:e8:59:cd:07:d6:f8:8b:e5:69:23:b1:e5:ae:ef:
                    03:7e:98:3e:a4:2c:85:d1:86:92:57:82:e3:d6:3f:
                    cc:c5:94:e4:43:88:88:e4:07:86:f5:4e:8a:4d:d0:
                    80:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D5:F4:23:2A:F7:60:39:78:36:63:F2:92:E5:DA:A3:DC:59:23:40
            X509v3 Authority Key Identifier:
                keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ed:8e:d7:ac:ad:e5:b2:71:74:9b:b5:b1:2b:c5:e4:5a:1b:
         f6:18:a3:ad:8a:6e:64:83:b9:ff:a8:1a:71:b6:1d:64:2f:2a:
         3e:ef:58:02:ea:57:6d:e8:93:da:90:04:c5:b5:c2:8b:31:be:
         f9:f2:52:58:23:f4:9d:ca:49:e7:6a:42:2f:15:f9:6c:85:2b:
         a2:0c:a4:5d:0f:32:fc:ad:e5:05:4e:57:d1:ca:2a:f6:30:cb:
         ab:d7:b7:9e:35:c5:d1:1c:0d:8b:6a:55:04:c7:ae:23:e5:a5:
         62:bd:2d:5b:6a:42:c1:d0:c8:63:77:dc:c4:ad:f5:fa:c3:df:
         30:62:5e:45:91:72:d4:b3:16:fa:8e:d5:b9:c7:d0:85:3b:ee:
         42:ca:e8:2d:1e:67:5a:cb:47:33:8b:7d:6f:af:9f:59:aa:e1:
         2a:a4:7c:53:c3:44:e0:8c:e3:79:b7:d4:31:3d:68:fa:0e:15:
         05:00:82:08:10:8d:38:50:24:3d:e3:65:39:5e:44:cd:ce:c8:
         b9:8a:79:13:e9:d8:23:07:75:e0:8b:40:5c:01:8a:a0:2d:2e:
         6e:e2:c0:85:65:99:d6:59:09:2f:d7:8c:c2:45:50:5c:c4:b3:
         62:b3:09:c5:d7:81:14:20:29:d2:59:36:9f:9c:68:c8:63:dc:
         c4:d3:6f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:02 2026 by rpki-client