This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
File:                     PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft (raw, json)
Hash identifier:          aHHhGxvO8dyZZoYGjptVDrq8E5hGySG4NwyvcF48l+E=
Subject key identifier:   4D:5E:DF:71:10:7F:AC:2F:CA:BD:CD:D8:1F:B7:6A:CE:33:BD:28:CE
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Certificate issuer:       /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial:       019C40FCE59E91EF848DC1B9F88A36907353
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
Manifest number:          0A29
Signing time:             Mon 09 Feb 2026 06:00:41 +0000
Manifest this update:     Mon 09 Feb 2026 06:00:41 +0000
Manifest next update:     Tue 10 Feb 2026 06:00:41 +0000
Files and hashes:         1: PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl (hash: 6JfZupuXK8huyRNaVPRS+JzZ0k2LS43LUvbqERVQAvM=)
                          2: gvs0UvHWJjRzgW_Syd97phf7MKo.roa (hash: fexk3vqFl5jqXokxQAei7fGYBfpuoLUr1xwGug2Wu34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fc:e5:9e:91:ef:84:8d:c1:b9:f8:8a:36:90:73:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
        Validity
            Not Before: Feb  9 06:00:41 2026 GMT
            Not After : Feb 10 06:00:41 2026 GMT
        Subject: CN=4d5edf71107fac2fcabdcdd81fb76ace33bd28ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b9:33:6e:b2:58:64:69:bd:85:ca:a6:c9:c4:
                    35:ac:61:9e:a8:75:ef:22:5a:30:7c:df:c1:5a:10:
                    6d:a4:98:c8:37:04:65:42:e1:45:c3:e2:89:8b:06:
                    28:b3:fe:ef:85:c6:b0:61:e7:91:96:a8:11:8f:33:
                    03:cf:91:dd:cb:93:8d:23:aa:c1:3d:63:0d:e7:b4:
                    ff:84:89:4e:b0:76:50:1c:82:64:ed:18:c5:3e:d1:
                    62:f8:5d:e5:6b:ed:be:be:65:be:2c:5b:9c:6c:8d:
                    6b:20:e1:48:34:00:59:aa:37:e2:53:ef:68:e4:43:
                    ad:e7:e8:ca:1c:45:a8:75:5b:d7:c7:14:f6:0f:96:
                    87:84:3d:93:cc:96:51:93:3c:39:a6:1f:db:66:2f:
                    7b:dd:55:de:78:c7:3f:57:70:ff:91:ea:58:43:26:
                    1d:0b:f0:d2:2d:fe:32:e8:57:af:04:20:aa:cb:8d:
                    36:69:c7:91:8f:27:e5:34:76:e4:22:5e:bd:30:2c:
                    db:48:aa:2b:b7:24:db:25:bd:b2:10:19:ef:d6:78:
                    2f:93:73:78:75:24:44:22:99:a6:18:19:90:ce:71:
                    ac:77:62:ba:c4:aa:1c:1f:a2:f3:aa:45:94:ab:f9:
                    58:75:46:57:23:aa:8c:91:f3:00:02:85:cd:01:c5:
                    5f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5E:DF:71:10:7F:AC:2F:CA:BD:CD:D8:1F:B7:6A:CE:33:BD:28:CE
            X509v3 Authority Key Identifier:
                keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:88:72:66:d9:2a:82:31:3e:00:7f:88:0e:0d:0e:c9:dc:25:
         6b:56:c0:7a:5e:1f:88:2c:3b:78:78:be:65:6b:f8:eb:22:29:
         be:06:d6:bf:65:a1:3a:27:c7:bc:84:77:9c:e4:b9:6e:4b:50:
         64:fd:a8:5e:f8:8f:fe:8a:c2:1f:6d:1f:d8:d0:be:87:3f:5a:
         cb:68:1a:06:ec:28:0c:6f:1d:4f:d0:9d:3d:65:03:2b:53:83:
         de:cd:17:ea:fe:f1:ee:e4:1c:5f:c0:be:d3:36:99:73:45:ba:
         4c:19:f0:cc:a8:c5:f2:bf:69:2c:e0:06:ac:8b:cf:1d:b1:fa:
         78:90:23:cc:34:75:55:2d:4a:be:1d:47:1f:5c:24:02:10:63:
         c7:5e:6b:9f:6c:64:7b:00:1c:d4:8c:8c:76:33:f7:64:53:e4:
         de:6d:75:83:5b:bb:c6:5c:05:f9:f7:45:a4:c2:f9:87:02:17:
         18:de:fb:1e:bf:20:21:5e:0e:f5:14:55:65:96:78:75:61:31:
         16:1c:62:08:77:d4:14:1c:e4:e7:20:96:00:75:c7:b0:73:45:
         45:e5:6b:9d:8d:51:d1:fc:02:a7:15:f8:27:e6:c2:6d:e5:d5:
         13:e8:42:f0:71:94:6e:41:16:bb:cb:a2:08:b3:35:b9:ca:4d:
         0b:10:04:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:53 2026 by rpki-client