This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
File:                     pPhiddwhxh2gzs0Sfpd0zKoysLs.mft (raw, json)
Hash identifier:          6YGjN0eVZeQBNAOuUGsQjv4JtvYQywLAiFkgnGnb0Mw=
Subject key identifier:   FF:15:4F:8A:94:24:C8:0E:8A:A7:6E:85:70:DE:EB:B8:C2:B5:C4:65
Authority key identifier: A4:F8:62:75:DC:21:C6:1D:A0:CE:CD:12:7E:97:74:CC:AA:32:B0:BB
Certificate issuer:       /CN=a4f86275dc21c61da0cecd127e9774ccaa32b0bb
Certificate serial:       019C42B422C60541EFB7A73F88FE1CFDBAE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 14:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:27 +0000
Files and hashes:         1: SiKhmBqx288_iA8YdORMHjIzhN8.roa (hash: lmaMDWK3PpIdhnJCYtTeNySaUk10VMAD50KNNgmgGiM=)
                          2: pPhiddwhxh2gzs0Sfpd0zKoysLs.crl (hash: eg3RmZb3Ori7zZ6vc8NjS0WiM1QHPaAScRggpj+4tyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:22:c6:05:41:ef:b7:a7:3f:88:fe:1c:fd:ba:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f86275dc21c61da0cecd127e9774ccaa32b0bb
        Validity
            Not Before: Feb  9 14:00:27 2026 GMT
            Not After : Feb 10 14:00:27 2026 GMT
        Subject: CN=ff154f8a9424c80e8aa76e8570deebb8c2b5c465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b0:c7:e7:a2:8c:ae:d6:c9:0f:ac:24:d2:09:
                    70:33:b3:48:d6:84:c8:39:e3:9b:f9:27:c6:b5:e5:
                    0f:10:89:fc:cf:a6:b5:49:9f:3c:3d:21:c8:b2:80:
                    68:3b:6f:56:d3:88:dc:25:27:d6:b6:cf:f1:4a:15:
                    48:ed:c6:cd:8f:70:ea:1f:ab:37:d8:db:18:2d:60:
                    06:6e:8b:12:5f:41:c3:88:c1:25:81:5d:6f:06:ab:
                    98:e4:d0:87:3c:a1:17:3c:cb:b7:db:be:5c:97:13:
                    fd:19:2a:69:43:29:a8:6c:c6:bf:1d:79:56:ba:a4:
                    a3:0a:14:8c:73:d0:df:7a:0d:68:f8:1f:aa:e9:6a:
                    05:04:25:c5:ed:c5:72:3d:50:2a:69:8c:72:77:53:
                    17:8b:8f:f5:34:c5:b8:c0:1c:8e:71:2d:04:63:9c:
                    a1:c9:88:6c:41:66:9a:98:79:a4:ca:35:fc:0c:43:
                    ea:c7:3b:00:9e:1c:a9:75:87:3e:fe:60:18:b0:5d:
                    ed:87:1d:b2:6d:5a:db:8d:14:16:45:73:bc:56:bc:
                    60:75:f3:e2:00:11:fb:e7:75:6e:f8:7e:57:0b:1c:
                    ab:5a:d0:9b:37:9e:f1:fe:a5:59:33:3d:0c:ea:68:
                    2f:43:18:c2:72:4b:4b:3d:14:34:99:e7:d3:ac:20:
                    99:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:15:4F:8A:94:24:C8:0E:8A:A7:6E:85:70:DE:EB:B8:C2:B5:C4:65
            X509v3 Authority Key Identifier:
                keyid:A4:F8:62:75:DC:21:C6:1D:A0:CE:CD:12:7E:97:74:CC:AA:32:B0:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:81:56:39:11:cb:a2:f3:9e:d0:b5:a5:b3:12:93:11:e1:07:
         e5:d3:40:97:b7:bc:73:d4:76:6d:c2:f9:7c:b1:1d:d3:36:bb:
         4d:81:bc:68:af:8b:d2:44:9f:00:7c:fc:c4:fd:d7:df:9b:80:
         31:08:9e:be:76:62:64:63:28:0b:7c:0c:62:2d:19:e8:f5:64:
         91:78:d2:25:b9:24:71:63:7c:56:6c:42:51:f1:b9:18:43:46:
         f2:99:f9:21:75:de:eb:97:6a:11:86:2b:1d:16:75:7c:ec:c9:
         8e:22:0c:59:55:b3:89:90:31:88:8d:34:07:9e:bf:72:a5:40:
         42:61:7d:e5:63:ff:04:4f:d7:3a:6b:3d:ab:f1:d2:db:7f:3c:
         d6:61:30:6f:a1:9f:95:d4:0c:0d:31:9a:36:e7:fb:49:e3:6e:
         cc:1a:ec:d5:7a:4a:e8:92:75:9a:53:68:d0:93:43:6b:e3:41:
         6d:fc:d8:e9:d0:51:e7:d9:3d:a4:d9:14:14:1a:74:f0:49:c9:
         b0:99:fd:3a:d3:a7:cf:53:7b:ec:45:61:7f:03:21:78:bb:09:
         67:19:92:14:a2:7b:0c:bc:a1:74:ba:1d:24:ee:75:1d:7f:0e:
         e4:b8:bd:f6:0b:3b:31:05:da:7c:a3:c1:de:b3:20:ee:4a:50:
         22:fa:88:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:03 2026 by rpki-client