This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
File:                     PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft (raw, json)
Hash identifier:          0QXe0wVSjj8dHJmjWS1FUNqErTzPstwCVX21Viu+TdM=
Subject key identifier:   FE:68:A9:7B:B0:46:D8:C5:F5:3E:1F:CA:68:FF:EF:FD:16:AF:3B:80
Authority key identifier: 3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68
Certificate issuer:       /CN=3d639fa4eddc162df3659e721d247ff338962f68
Certificate serial:       019C40FDA5AE0C8C4A642C7D7DD89A9324DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
Manifest number:          E5
Signing time:             Mon 09 Feb 2026 06:01:30 +0000
Manifest this update:     Mon 09 Feb 2026 06:01:30 +0000
Manifest next update:     Tue 10 Feb 2026 06:01:30 +0000
Files and hashes:         1: PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl (hash: z3COJY68273QxJCEDy5KYqpFNtZBQEFlLTFp70MOz30=)
                          2: SSbCIFUzoJnAufFAmpn4-eL0evQ.roa (hash: xLYQWvxW9OI7//jHrJrCiY97JsgcAmDpELt0HCZDcTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:a5:ae:0c:8c:4a:64:2c:7d:7d:d8:9a:93:24:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d639fa4eddc162df3659e721d247ff338962f68
        Validity
            Not Before: Feb  9 06:01:30 2026 GMT
            Not After : Feb 10 06:01:30 2026 GMT
        Subject: CN=fe68a97bb046d8c5f53e1fca68ffeffd16af3b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ee:15:dd:e2:08:24:98:6e:c8:f0:34:07:77:
                    38:2f:04:45:90:1c:09:1f:c7:39:40:86:88:76:ff:
                    e7:e6:18:6e:9d:73:5f:e7:fb:6c:d1:73:52:d9:91:
                    c0:c5:0d:77:52:de:1f:ff:ac:4d:f1:54:83:20:12:
                    02:21:36:c0:53:c1:a3:7e:fe:2b:3d:27:c9:4f:03:
                    26:73:37:76:5b:fb:e2:76:d7:f8:b6:2c:7c:e5:ad:
                    f0:5c:f3:e9:f3:47:3f:18:bc:aa:7a:47:da:be:24:
                    e5:f9:4e:76:ce:c2:37:db:ee:c5:a5:82:77:2c:8a:
                    be:ba:d2:aa:cc:ff:0d:b9:39:44:43:c0:94:c9:42:
                    ab:88:c0:73:78:52:5a:50:fa:72:52:da:52:0d:ca:
                    89:24:78:52:fc:7b:e3:3f:52:65:0f:28:4f:38:d6:
                    45:64:16:00:41:08:c0:34:96:e5:f4:14:b9:dd:e9:
                    f3:58:f0:d1:48:c4:28:65:eb:fc:48:38:95:e9:5a:
                    1d:e6:31:d5:76:af:0b:c6:35:b2:01:30:eb:c6:ea:
                    01:f8:8a:ef:ed:19:9e:b1:79:99:03:4f:25:9d:6c:
                    1a:a3:e4:be:fc:d0:2e:e2:40:73:f7:ee:f6:c2:58:
                    da:65:eb:7e:e6:92:36:6c:97:58:b8:9e:0c:78:9b:
                    44:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:68:A9:7B:B0:46:D8:C5:F5:3E:1F:CA:68:FF:EF:FD:16:AF:3B:80
            X509v3 Authority Key Identifier:
                keyid:3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:7a:7d:68:3e:45:53:2a:47:4f:70:35:83:02:55:eb:54:9d:
         d3:10:c0:56:50:80:b5:29:3a:0f:d9:5c:a0:89:00:1e:b0:f8:
         82:f7:f9:03:c5:23:63:f6:b1:03:df:97:36:50:cc:ea:04:b2:
         b4:25:2f:c3:de:ce:20:c2:5f:fc:9d:ce:d7:90:3c:a0:ca:63:
         26:97:45:99:b0:6d:aa:72:79:39:49:19:ad:4a:13:4f:40:5f:
         40:49:21:21:70:bb:07:8b:a3:3a:77:e3:97:08:50:f4:d5:aa:
         7d:26:95:16:b1:75:b5:81:9a:59:ce:e9:e5:9e:7a:95:64:02:
         d4:a4:be:bf:40:e3:50:9f:36:be:1f:d5:b5:ad:a6:c7:22:ab:
         03:c6:7b:3b:8b:27:2f:75:19:a3:66:8c:be:c9:a7:1a:a1:6c:
         1e:9d:c4:20:28:2a:6c:38:80:48:e5:28:35:d1:be:8e:91:2b:
         d5:17:ba:a1:65:3d:9a:53:a5:ea:91:64:22:75:25:77:2f:ec:
         c7:e3:33:71:cc:8e:2a:d5:eb:5b:84:67:f6:0c:a2:38:70:cb:
         68:fc:48:b8:50:17:25:7f:5d:ce:4f:04:f5:ed:f8:58:0e:48:
         fc:a5:27:2a:ba:12:e1:23:68:fe:53:4c:d7:e3:4d:3a:2a:b8:
         15:de:6e:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxA/aWuDIxKZCx9fdiakyTbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNjM5ZmE0ZWRkYzE2MmRmMzY1OWU3MjFkMjQ3ZmYzMzg5
NjJmNjgwHhcNMjYwMjA5MDYwMTMwWhcNMjYwMjEwMDYwMTMwWjAzMTEwLwYDVQQD
EyhmZTY4YTk3YmIwNDZkOGM1ZjUzZTFmY2E2OGZmZWZmZDE2YWYzYjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO4V3eIIJJhuyPA0B3c4LwRFkBwJ
H8c5QIaIdv/n5hhunXNf5/ts0XNS2ZHAxQ13Ut4f/6xN8VSDIBICITbAU8Gjfv4r
PSfJTwMmczd2W/vidtf4tix85a3wXPPp80c/GLyqekfaviTl+U52zsI32+7FpYJ3
LIq+utKqzP8NuTlEQ8CUyUKriMBzeFJaUPpyUtpSDcqJJHhS/HvjP1JlDyhPONZF
ZBYAQQjANJbl9BS53enzWPDRSMQoZev8SDiV6Vod5jHVdq8LxjWyATDrxuoB+Irv
7RmesXmZA08lnWwao+S+/NAu4kBz9+72wljaZet+5pI2bJdYuJ4MeJtENQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5oqXuwRtjF9T4fymj/7/0WrzuAMB8GA1UdIwQY
MBaAFD1jn6Tt3BYt82Wech0kf/M4li9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFdPZnBPM2NGaTN6Wlo1eUhTUl84emlXTDJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jNzc5ODMtYmUzYS00OGUzLWI1ZDAt
YWQyODRkMjgyNGE0LzEvUFdPZnBPM2NGaTN6Wlo1eUhTUl84emlXTDJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9jNzc5ODMtYmUzYS00OGUzLWI1ZDAtYWQyODRkMjgyNGE0
LzEvUFdPZnBPM2NGaTN6Wlo1eUhTUl84emlXTDJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXp9aD5F
UypHT3A1gwJV61Sd0xDAVlCAtSk6D9lcoIkAHrD4gvf5A8UjY/axA9+XNlDM6gSy
tCUvw97OIMJf/J3O15A8oMpjJpdFmbBtqnJ5OUkZrUoTT0BfQEkhIXC7B4ujOnfj
lwhQ9NWqfSaVFrF1tYGaWc7p5Z56lWQC1KS+v0DjUJ82vh/Vta2mxyKrA8Z7O4sn
L3UZo2aMvsmnGqFsHp3EICgqbDiASOUoNdG+jpEr1Re6oWU9mlOl6pFkInUldy/s
x+MzccyOKtXrW4Rn9gyiOHDLaPxIuFAXJX9dzk8E9e34WA5I/KUnKroS4SNo/lNM
1+NNOiq4Fd5uRA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:45 2026 by rpki-client