This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
File:                     PUJ2NzsED6msd-VmxbbN81tTuTc.mft (raw, json)
Hash identifier:          NWvskLDY8LVVW2PJiGHabqMvGlrPDr6q3r6kLyMRlgg=
Subject key identifier:   6C:71:06:08:56:9B:31:CA:71:6D:0D:4A:19:29:52:E4:24:8D:DF:7E
Authority key identifier: 3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37
Certificate issuer:       /CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
Certificate serial:       019C360B90E426A9CCD40B3D9EF9EAD23946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
Manifest number:          06EB
Signing time:             Sat 07 Feb 2026 03:00:53 +0000
Manifest this update:     Sat 07 Feb 2026 03:00:53 +0000
Manifest next update:     Sun 08 Feb 2026 03:00:53 +0000
Files and hashes:         1: 7bvtPGLStjnkciwxFvPTYgFWfQk.roa (hash: vjeKrroXH7m1N2sP7ErrsCURI+wiwxbcMJEOYB8cjgg=)
                          2: PUJ2NzsED6msd-VmxbbN81tTuTc.crl (hash: GmVzeItqtn6tIgX4y9sy3OS3sl4YOga7ryX1lvakMGc=)
                          3: ci6tN1QYoZrZv06rGimHLD0X5JE.roa (hash: WnzalM5cF/dIA1v+fSMQnZMN9WMkUhH0XGHms4w38Jc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Feb 2026 02:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:36:0b:90:e4:26:a9:cc:d4:0b:3d:9e:f9:ea:d2:39:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
        Validity
            Not Before: Feb  7 03:00:53 2026 GMT
            Not After : Feb  8 03:00:53 2026 GMT
        Subject: CN=6c710608569b31ca716d0d4a192952e4248ddf7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:61:4c:2c:6b:41:aa:c2:d3:7d:40:b4:e6:eb:
                    44:ed:0b:0b:3f:51:68:45:f7:87:88:12:b3:4e:a4:
                    59:79:ad:e1:18:2d:3b:6e:cc:14:44:d0:f3:a4:57:
                    fa:26:1b:de:a4:84:38:7b:3c:22:0c:cb:05:9b:a5:
                    36:0b:c7:ce:62:ff:86:0c:f4:3e:a6:1f:ea:5d:66:
                    78:a8:94:61:59:65:8e:17:45:1f:91:d4:6d:6e:c2:
                    73:87:c0:e9:69:9a:d3:60:2e:8a:ba:3b:84:c4:62:
                    7d:a4:30:20:54:ed:cf:98:8d:de:54:f5:1f:b8:03:
                    11:58:b6:b0:80:b2:02:0b:22:3c:1b:f5:53:0a:2e:
                    f7:4f:7f:a0:6b:f1:8e:c3:f4:22:25:d5:6e:58:b8:
                    7b:87:8d:f6:57:81:51:22:5c:e5:02:f7:d9:67:5b:
                    16:d2:0b:ba:3d:ce:71:f6:6c:a7:a5:57:c7:1c:ea:
                    71:29:8e:f6:db:93:54:cb:3b:b9:fe:30:d6:ab:cc:
                    02:fe:07:d3:35:78:e1:59:69:b4:09:c6:70:41:13:
                    95:fe:10:7b:c4:6a:d3:59:90:90:ad:ff:ec:bf:32:
                    19:3f:01:2b:3d:b8:32:a8:7f:96:ca:c1:05:4c:fc:
                    94:ba:04:0c:01:de:af:0d:16:de:f5:44:be:88:ec:
                    f2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:71:06:08:56:9B:31:CA:71:6D:0D:4A:19:29:52:E4:24:8D:DF:7E
            X509v3 Authority Key Identifier:
                keyid:3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:c8:7a:ef:0e:63:c6:80:2c:c4:c5:9c:3f:47:7f:16:54:ce:
         9d:7e:5f:23:1f:d2:8f:f1:77:68:40:b7:f4:36:0e:1f:d2:8b:
         a2:fc:e8:9b:47:06:6e:80:75:67:ad:fb:1a:cf:08:ad:ac:3c:
         43:58:63:0f:91:01:46:7a:8c:21:96:a4:c8:7e:2a:fb:fb:80:
         04:6d:81:d6:b6:bd:64:e6:58:8f:ef:2a:7e:b3:7f:99:80:5e:
         a9:aa:f4:2a:e9:a6:ce:48:a0:f6:64:63:9f:9e:38:73:8a:ae:
         97:cf:2a:fc:50:c5:e4:b9:c5:b9:83:9c:e4:b2:23:7b:b6:ac:
         c4:02:6a:d1:7a:84:24:d4:c6:36:93:53:75:b6:33:77:ad:f6:
         3a:78:23:b4:34:74:d7:ea:84:b0:92:09:f7:15:bc:7c:1b:1c:
         15:de:04:aa:33:d2:22:6b:f1:ee:b5:2b:a4:53:cd:b1:d8:76:
         76:57:e0:2e:6f:28:3d:78:90:e0:ae:30:86:d0:85:8f:b0:e7:
         cd:f8:52:e5:3c:9e:b5:00:17:ed:22:a8:2a:85:d4:2f:b9:14:
         9b:2f:b3:7c:b4:d6:23:be:34:f9:d8:ac:4b:52:45:c9:69:fb:
         cd:52:b7:3b:85:5d:83:3d:e3:ab:3f:c8:89:f1:31:a8:fc:4f:
         e3:46:f9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 11:38:20 2026 by rpki-client