This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
File:                     pPP3bj7O8kl-ET6ju664U_YvWP4.mft (raw, json)
Hash identifier:          RmkHhSH78SzXmfknvVBbPnLP0f9jqc9rUAljEMXMWUg=
Subject key identifier:   66:7E:F2:8D:A6:0F:8B:F6:1D:1A:79:79:B8:43:FC:4C:2B:7E:3A:D2
Authority key identifier: A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE
Certificate issuer:       /CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
Certificate serial:       019C42463CD492EB7089E7D20B0FDAADDAF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
Manifest number:          0EA5
Signing time:             Mon 09 Feb 2026 12:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:25 +0000
Files and hashes:         1: O4sAh3xkbKW8_1R4ygmeymIKXCo.roa (hash: 3590EWq8UBW+NRuB0qqAJxA1WOGNS1btb/g2MoAacyw=)
                          2: pPP3bj7O8kl-ET6ju664U_YvWP4.crl (hash: h+P/qmCAf6I/zOQXQw0XS9F97kzoQv35kOR3/S2LqAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:3c:d4:92:eb:70:89:e7:d2:0b:0f:da:ad:da:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
        Validity
            Not Before: Feb  9 12:00:25 2026 GMT
            Not After : Feb 10 12:00:25 2026 GMT
        Subject: CN=667ef28da60f8bf61d1a7979b843fc4c2b7e3ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:48:34:a6:38:63:09:eb:14:12:94:2f:84:31:
                    f4:6e:1c:7c:c4:9c:68:64:24:85:44:b3:31:22:a4:
                    41:ff:e0:30:f3:7f:08:46:06:5a:62:12:05:d7:be:
                    a2:87:87:40:50:a5:e9:6d:47:ea:ee:48:42:ae:28:
                    e8:d6:de:4d:89:19:1b:3b:ec:82:8d:6a:90:9e:73:
                    3d:ae:37:b6:61:6e:b2:a5:17:8b:2d:6a:e2:84:8b:
                    7e:ad:c1:a7:4d:00:6a:8b:43:4e:29:bc:d8:f2:7a:
                    c4:6c:00:1c:ae:f2:d4:23:ff:b1:76:fb:74:1f:fa:
                    a8:a4:7c:9b:f6:38:2d:47:76:79:f4:f6:53:a8:b0:
                    11:ae:a8:34:a9:f2:8a:6e:0e:54:d2:b8:a6:87:c9:
                    c6:a1:4a:48:34:1a:c9:05:d5:01:f3:3f:a9:c7:52:
                    42:5c:c0:90:d5:9f:96:2d:e1:86:31:30:37:5a:c0:
                    f0:8b:bb:97:ee:9a:15:cc:03:0a:d4:7a:56:27:84:
                    e0:84:a3:16:5b:33:52:c9:5a:39:88:92:d9:82:4d:
                    43:96:70:d5:a2:d0:bd:53:07:72:98:5e:56:22:15:
                    2e:fe:b0:04:c6:f7:73:c3:1a:3a:ed:1b:d8:13:49:
                    f7:22:13:43:37:c3:f4:9e:c8:93:d6:0b:25:22:5c:
                    79:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7E:F2:8D:A6:0F:8B:F6:1D:1A:79:79:B8:43:FC:4C:2B:7E:3A:D2
            X509v3 Authority Key Identifier:
                keyid:A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:08:a9:bf:a2:d7:c9:f6:56:1e:e8:76:ec:16:4a:85:1b:82:
         cb:e0:ac:ea:c7:c9:5b:cc:a9:2d:80:c2:e2:33:8d:13:ee:c8:
         f8:7c:29:9b:3b:56:bf:e5:c7:d8:d6:1a:db:ed:69:23:9c:06:
         56:ae:d7:dd:16:14:ac:93:bc:ce:e2:bf:c6:3e:f7:36:d5:16:
         07:57:15:b4:e5:d6:e1:0c:66:e1:6a:b9:b1:9a:58:00:11:4b:
         c8:e2:0f:e4:50:5f:2a:e4:4b:e7:b3:37:5c:3d:92:f3:86:a4:
         12:c1:41:41:43:de:52:17:7b:94:a0:11:18:d9:70:56:69:77:
         42:97:73:b6:df:2f:90:13:88:2b:61:42:49:e0:0a:1c:b8:40:
         61:00:59:a5:cd:8a:74:60:15:ce:f7:76:d0:71:6c:85:3b:a2:
         66:b9:25:99:38:20:87:67:21:53:06:13:07:3d:2f:73:27:72:
         32:a5:f0:23:d2:68:fa:a1:32:b9:62:77:fb:03:33:4f:17:42:
         4d:b4:2c:43:0c:32:aa:3e:6a:ec:48:02:6d:d2:e3:83:46:3e:
         4e:6d:f9:51:42:ad:1b:72:15:47:55:06:3f:d9:e9:a1:b7:47:
         28:ca:a3:e4:db:89:74:bd:f5:2e:bb:eb:50:e3:5b:83:f5:c4:
         4e:8f:54:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:28 2026 by rpki-client