This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft
File:                     Pl96BiMXb2x_xmVMATvzmcqQxXg.mft (raw, json)
Hash identifier:          MhvC43PSUByiPrm8v2W4gRIhgr61g9zSglqUcD1xrrE=
Subject key identifier:   58:02:21:11:15:6B:52:36:BC:9C:1C:87:D4:EC:7A:BB:E9:77:CD:3E
Authority key identifier: 3E:5F:7A:06:23:17:6F:6C:7F:C6:65:4C:01:3B:F3:99:CA:90:C5:78
Certificate issuer:       /CN=3e5f7a0623176f6c7fc6654c013bf399ca90c578
Certificate serial:       019C42EAD84186D7A2BE54AD2A841904E285
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pl96BiMXb2x_xmVMATvzmcqQxXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft
Manifest number:          01B7
Signing time:             Mon 09 Feb 2026 15:00:12 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:12 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:12 +0000
Files and hashes:         1: Pl96BiMXb2x_xmVMATvzmcqQxXg.crl (hash: 0svxJGShrNWL7JAtRSApU/B16K88wX6hcjXfVBdn4Tc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pl96BiMXb2x_xmVMATvzmcqQxXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:ea:d8:41:86:d7:a2:be:54:ad:2a:84:19:04:e2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e5f7a0623176f6c7fc6654c013bf399ca90c578
        Validity
            Not Before: Feb  9 15:00:12 2026 GMT
            Not After : Feb 10 15:00:12 2026 GMT
        Subject: CN=58022111156b5236bc9c1c87d4ec7abbe977cd3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:17:04:06:8f:39:9f:34:75:1c:68:08:5a:64:
                    c3:b2:fe:8e:4b:9f:31:6b:4b:ac:a0:45:d0:6c:b9:
                    0c:a8:01:f6:51:b1:d8:20:7d:10:86:64:71:19:ce:
                    c8:e0:96:ef:ac:2e:0c:d9:38:37:f5:2e:c9:30:ae:
                    17:6f:1d:db:80:19:33:13:7a:08:98:d6:24:33:b7:
                    20:89:50:be:bb:28:81:4b:c3:31:af:c6:6e:4a:5d:
                    75:0f:a8:da:b9:5b:d7:0a:92:a9:32:2b:14:d2:6e:
                    6a:7d:22:8b:08:fd:b9:09:9d:61:b7:4a:77:ac:4b:
                    7d:ad:90:4f:51:5f:33:a5:3a:0c:c5:ca:83:c1:75:
                    29:31:43:e6:e7:41:c4:c7:f9:c9:65:ad:68:26:2a:
                    0a:32:9e:fd:cd:76:72:aa:90:fd:4a:90:6b:8d:c5:
                    4b:99:73:f3:ba:44:c8:8c:24:bb:da:53:c2:c8:70:
                    85:52:79:02:d5:6f:f5:db:ee:f8:96:1e:33:4a:2a:
                    2f:ab:50:84:19:00:0a:a7:a0:ad:22:52:ad:6e:49:
                    75:6c:f7:0f:3e:7d:94:57:c0:f4:3a:5b:ea:6b:2f:
                    78:1e:e6:0d:bc:db:07:df:51:b8:9a:46:97:b0:ef:
                    5f:59:8f:39:f1:8c:1b:4b:d0:2f:b6:03:75:db:b9:
                    c7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:02:21:11:15:6B:52:36:BC:9C:1C:87:D4:EC:7A:BB:E9:77:CD:3E
            X509v3 Authority Key Identifier:
                keyid:3E:5F:7A:06:23:17:6F:6C:7F:C6:65:4C:01:3B:F3:99:CA:90:C5:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pl96BiMXb2x_xmVMATvzmcqQxXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ae:4c:1e:74:47:19:3a:71:66:76:f0:25:e1:71:5b:c6:7b:
         2e:8b:82:99:6d:1e:c6:f9:fe:49:44:c9:21:d8:bb:ba:6f:12:
         79:0f:69:30:cf:af:91:94:54:13:f0:21:d2:6a:f0:52:45:61:
         30:c5:e2:90:a5:a8:80:5e:58:c6:4f:21:1e:ac:52:60:55:de:
         b3:1b:98:c0:91:d3:f8:e7:a4:27:ea:30:1a:34:ab:a4:75:75:
         1a:88:c7:f7:2d:56:ed:a8:59:c0:51:b0:b3:5b:ea:a0:0a:85:
         4e:5d:73:c7:92:d8:55:b3:c3:aa:9b:4f:55:c1:ae:ee:1a:b8:
         54:5e:ce:f8:a3:df:d6:44:9c:dc:32:38:0d:d1:3d:54:d4:29:
         d7:d5:60:69:71:3a:41:9e:34:c2:85:7d:44:a5:ea:7b:70:52:
         a6:d5:68:d2:fc:46:a9:39:51:09:f6:c4:72:de:24:b2:16:94:
         1e:8e:a8:ab:7d:cc:9c:6f:f6:5c:17:fb:24:34:96:a3:f1:d3:
         1b:47:e0:24:16:f6:e6:9c:f6:24:f4:9d:09:dc:e5:06:60:09:
         a3:9b:38:89:68:aa:e2:22:d9:cc:4a:92:05:ea:58:36:36:d9:
         9e:18:e9:81:7c:20:7b:fd:96:b6:c8:03:62:a0:d5:4e:26:d6:
         db:9d:2e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:15 2026 by rpki-client