This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
File:                     pLm08Dm8goYBw44OrUwZWrvf_mM.mft (raw, json)
Hash identifier:          vXc0vEQHAAbs1BiV/MtIaJ6lB1eAnkZpd21KoR0ZSLg=
Subject key identifier:   85:39:EA:B7:11:31:33:36:D0:82:CB:5C:60:1B:B4:F6:60:D6:BE:C9
Authority key identifier: A4:B9:B4:F0:39:BC:82:86:01:C3:8E:0E:AD:4C:19:5A:BB:DF:FE:63
Certificate issuer:       /CN=a4b9b4f039bc828601c38e0ead4c195abbdffe63
Certificate serial:       019C4321E2D23B8534B950CD243A6CBABDD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
Manifest number:          027B
Signing time:             Mon 09 Feb 2026 16:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:20 +0000
Files and hashes:         1: JdkIQygmhQqcLnZC2_hEonjSX5Q.roa (hash: S2ckYV6ssSGLHtxoF3cPRRAOhiSavGP1nolNPr7KzVg=)
                          2: pLm08Dm8goYBw44OrUwZWrvf_mM.crl (hash: iAsgUr2lENZ67gqp6lMX/LZRoecrRhQgsiNLDe+oxTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:21:e2:d2:3b:85:34:b9:50:cd:24:3a:6c:ba:bd:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b9b4f039bc828601c38e0ead4c195abbdffe63
        Validity
            Not Before: Feb  9 16:00:20 2026 GMT
            Not After : Feb 10 16:00:20 2026 GMT
        Subject: CN=8539eab711313336d082cb5c601bb4f660d6bec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:89:bc:86:cb:b7:fe:14:4f:67:59:0a:9b:07:
                    5a:b8:88:4e:f3:ae:d6:02:54:8b:f0:a4:29:27:be:
                    44:42:f8:05:cf:d6:38:46:da:cb:e2:23:6f:6e:90:
                    b2:91:8d:bd:f8:bd:2d:01:39:34:3b:ca:3c:31:2f:
                    a2:63:1b:e4:42:a1:93:c5:81:2e:6a:07:8f:c3:a6:
                    0e:61:3a:f4:fb:5e:47:77:95:05:e1:71:84:0d:d0:
                    35:59:01:33:eb:dc:80:54:d5:03:e0:94:0d:52:04:
                    3d:46:f1:62:c4:a9:3e:7a:72:84:c9:3c:f2:6d:54:
                    ed:46:d9:3f:17:e2:80:26:93:12:93:d9:6d:89:4d:
                    df:cf:58:75:d7:30:0d:51:a2:af:ae:e4:e4:28:a6:
                    0d:37:ab:5f:0a:d3:83:66:84:61:a7:a0:e2:c4:2e:
                    1b:9b:b8:af:ab:26:a3:99:5e:e4:0a:16:21:37:1f:
                    cc:cd:d4:93:78:40:46:e0:f7:4b:8f:8a:c9:6d:7e:
                    dd:c4:2c:41:b5:79:e5:9f:0d:18:e4:9d:2d:ca:dd:
                    46:13:d8:fb:e9:93:b9:00:63:d5:3c:31:20:51:22:
                    a9:3b:a2:33:dd:a7:07:d7:12:7d:1c:33:02:19:38:
                    c4:6c:26:0d:34:b5:4d:6b:f3:42:ce:29:6c:46:0f:
                    53:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:39:EA:B7:11:31:33:36:D0:82:CB:5C:60:1B:B4:F6:60:D6:BE:C9
            X509v3 Authority Key Identifier:
                keyid:A4:B9:B4:F0:39:BC:82:86:01:C3:8E:0E:AD:4C:19:5A:BB:DF:FE:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ab:a4:aa:a8:db:24:62:e9:df:7a:26:a9:68:85:d8:ab:df:
         be:39:d4:c1:ce:d3:6f:46:2d:8f:ed:9d:3f:30:09:58:72:58:
         35:ad:7b:10:84:ab:71:0b:bd:9b:d6:96:23:a8:39:86:0e:cb:
         10:92:1e:54:51:89:36:fa:30:58:19:90:ca:21:9b:20:8a:93:
         86:0a:d0:48:ed:dc:85:f6:14:c7:e1:78:e0:62:c8:4d:26:49:
         39:6c:40:a3:4f:8e:27:f8:d3:2c:95:4f:91:ff:c3:f9:d8:78:
         02:92:d6:9b:7f:f3:56:f9:45:a2:d4:1b:75:ee:3a:74:0d:41:
         69:de:bb:cb:dd:bc:f5:4b:d0:7d:09:30:44:b2:26:0e:4d:6f:
         70:3e:d3:54:5e:88:2e:bb:c2:70:cb:6e:e0:ee:47:98:ad:19:
         5f:65:c4:06:21:59:23:f8:41:21:9a:be:b0:56:0e:03:4f:38:
         de:a3:8e:69:fb:1f:82:56:76:e7:b8:4d:0e:a1:ec:76:fb:bc:
         7a:a4:65:ee:95:9c:83:78:43:ce:de:b3:30:e2:63:29:da:d8:
         6e:b1:e9:b6:73:e8:ec:83:13:77:58:40:68:1d:0a:3d:51:b5:
         bd:a7:8e:96:26:05:15:53:3f:9d:1f:e8:24:0e:3a:1c:9f:60:
         f8:e6:1f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:31 2026 by rpki-client