This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
File:                     pTJy83vudp-iPqZUueOPsCNGjZI.mft (raw, json)
Hash identifier:          WZfDfQKCPVcvaBtJUwV+6gdzN9KCxn+4MqXELbXwza8=
Subject key identifier:   8B:96:F8:AA:F7:40:4E:A1:06:93:33:6D:EC:06:1E:2F:0B:7E:8C:8E
Authority key identifier: A5:32:72:F3:7B:EE:76:9F:A2:3E:A6:54:B9:E3:8F:B0:23:46:8D:92
Certificate issuer:       /CN=a53272f37bee769fa23ea654b9e38fb023468d92
Certificate serial:       019C42B4635363EE220881AE531A5337C7DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
Manifest number:          03C7
Signing time:             Mon 09 Feb 2026 14:00:43 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:43 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:43 +0000
Files and hashes:         1: DTley2nDPplvZNQopBTQO4n1Ceo.roa (hash: u9j+aNgInYMXRDSEIlTiThKlupffu4ylSrg+Bxy7vx4=)
                          2: pTJy83vudp-iPqZUueOPsCNGjZI.crl (hash: uYws2RTKr5fnnXLuhv2v1imS3MYw/jYIzAPY3KubBMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:63:53:63:ee:22:08:81:ae:53:1a:53:37:c7:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53272f37bee769fa23ea654b9e38fb023468d92
        Validity
            Not Before: Feb  9 14:00:43 2026 GMT
            Not After : Feb 10 14:00:43 2026 GMT
        Subject: CN=8b96f8aaf7404ea10693336dec061e2f0b7e8c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a3:5b:9c:9d:c6:1c:0c:30:2e:0d:ba:3c:dd:
                    d4:2b:b8:32:ea:f1:64:28:86:26:84:08:01:c9:ea:
                    8c:7a:23:ec:92:11:d2:6d:58:17:9a:ef:73:3d:a8:
                    b0:44:17:80:9f:be:5f:78:12:f2:82:ce:9a:20:c3:
                    1a:6e:4b:b1:b9:32:bf:b1:1c:fb:ad:ff:d0:f2:f6:
                    d3:aa:f8:11:c3:d4:dd:90:9d:f8:de:2f:d3:3d:c4:
                    57:c1:ff:12:3f:ee:2a:c2:18:32:7b:77:f5:49:e0:
                    bf:d9:5a:a1:37:fb:37:d4:3b:c4:a0:e3:62:74:f3:
                    1e:0e:25:2b:bd:10:f5:2d:c0:f7:69:fd:ed:cf:70:
                    5e:ba:18:04:d5:ce:11:7c:53:a5:24:7c:3c:de:01:
                    db:7b:87:22:00:3b:4a:d8:cf:e6:66:6b:62:e9:2d:
                    a2:a0:73:0d:b3:a1:ea:ba:54:b9:b2:36:84:9d:52:
                    67:72:6b:f7:f5:2b:8b:bc:58:19:1b:22:b6:d0:19:
                    a5:9c:b8:f3:c7:c5:99:b9:11:77:7e:45:02:ef:42:
                    79:b0:38:8f:0c:9a:93:eb:65:cf:32:1e:df:12:e5:
                    c0:1b:07:1b:50:c3:51:c8:21:2f:ec:66:25:d7:1e:
                    57:2c:f0:99:7e:55:2f:c7:71:f8:3e:5f:7c:57:9f:
                    33:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:96:F8:AA:F7:40:4E:A1:06:93:33:6D:EC:06:1E:2F:0B:7E:8C:8E
            X509v3 Authority Key Identifier:
                keyid:A5:32:72:F3:7B:EE:76:9F:A2:3E:A6:54:B9:E3:8F:B0:23:46:8D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:3d:bb:de:70:96:74:6d:0d:71:51:6b:98:fd:2c:8e:7f:d5:
         f9:75:0e:c9:1e:75:e8:58:25:15:25:6f:d9:65:ee:b8:de:81:
         a7:54:89:f5:d2:10:c4:2c:28:75:e7:79:81:f2:b5:6b:b4:7f:
         42:c6:57:a6:90:8c:e9:45:92:4b:4e:3d:2c:dd:ae:ef:a5:65:
         c2:57:3a:0b:a4:3d:50:76:88:fc:c8:13:ac:74:bb:b3:41:26:
         69:7a:0c:6a:c9:31:6f:9f:57:43:37:57:b6:b6:24:44:2c:60:
         ae:e8:34:0b:47:be:76:d2:27:39:67:48:92:d7:1a:3a:39:30:
         1a:ed:53:47:57:b8:bf:8e:a7:f3:f9:35:18:1b:7a:5e:be:50:
         8e:e9:ae:eb:10:03:9b:27:20:9a:4a:8f:9a:d0:7e:47:30:c4:
         2b:eb:96:71:d1:2b:dd:c3:1f:59:14:c8:fc:cf:f1:90:ea:dd:
         69:23:b4:41:4f:9d:60:77:15:00:9e:8f:00:b6:fb:64:6a:f7:
         2b:e7:54:c9:e9:84:f8:0c:4b:b6:78:01:ed:05:ba:a0:67:02:
         4b:b7:72:62:e1:a0:88:16:61:c6:47:e7:42:39:9b:bf:2d:46:
         17:22:a7:25:64:c6:aa:80:3e:e0:f4:5c:9f:72:13:f8:76:54:
         3c:ff:d9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:45:57 2026 by rpki-client