This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
File:                     PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft (raw, json)
Hash identifier:          Ed9TAerjhfBQYfxhUc4i/mpJyvvZRGkFDrJFe8xYDW8=
Subject key identifier:   1A:0F:05:5B:DA:73:78:1E:4B:08:1B:5D:2F:1E:24:01:E1:28:00:41
Authority key identifier: 3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA
Certificate issuer:       /CN=3cfee2ea3cde0873a191bdd795227399b56a43ba
Certificate serial:       019C42EB2953CC822CB2E708D78ED6CE8E1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
Manifest number:          0135
Signing time:             Mon 09 Feb 2026 15:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:33 +0000
Files and hashes:         1: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl (hash: B5Q6HS+Tc8F3TFbSUT0Dwx6A2EHvFxR+LSWzR8ePtIk=)
                          2: U1VjosqpBiqy2ZFxYLqdYxKnum4.roa (hash: AvN5YNAvDxw0bLWGw+RbIchpQR/eRlfnMr+l8l+QHy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:29:53:cc:82:2c:b2:e7:08:d7:8e:d6:ce:8e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cfee2ea3cde0873a191bdd795227399b56a43ba
        Validity
            Not Before: Feb  9 15:00:33 2026 GMT
            Not After : Feb 10 15:00:33 2026 GMT
        Subject: CN=1a0f055bda73781e4b081b5d2f1e2401e1280041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e4:85:91:e5:ea:4f:be:2d:3d:2c:d4:56:08:
                    86:3c:ee:0b:f6:d4:56:07:03:e9:4d:2c:2d:ac:47:
                    eb:e1:70:7c:b3:11:d5:21:68:5f:1c:87:4d:8e:99:
                    94:2e:43:38:09:ea:5d:58:a2:20:be:c0:ed:bc:a9:
                    2a:54:d6:a4:5d:2e:2e:5a:44:fb:a5:6d:c3:41:15:
                    71:20:85:e8:ff:a9:a0:c2:4d:3a:2d:dd:40:a1:a9:
                    f8:f2:b6:00:85:b9:f6:2c:42:a4:73:57:3f:34:7e:
                    39:1b:c2:26:24:fa:3f:1a:07:cf:bd:fa:de:7a:8f:
                    35:ad:fb:c4:3d:24:ad:64:8b:96:06:e6:6b:13:d7:
                    38:c7:27:b1:0a:75:28:9d:9b:61:7e:cd:88:17:64:
                    61:85:da:8f:cb:63:6d:79:f4:f4:90:e5:12:d8:83:
                    e3:7c:74:2a:05:44:0a:98:5f:ad:d9:c3:43:eb:50:
                    ae:7c:9e:4a:10:8b:11:84:1e:2b:01:8e:54:54:6f:
                    c1:3a:01:74:18:c4:f6:57:2c:64:86:53:ad:04:d5:
                    d5:ed:07:aa:96:17:77:bd:30:20:5c:46:f3:3d:58:
                    6e:89:de:4f:84:00:04:31:27:84:4e:4e:f7:41:c3:
                    76:77:05:e9:e3:0a:f6:af:b7:92:27:12:5e:e4:e9:
                    bf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0F:05:5B:DA:73:78:1E:4B:08:1B:5D:2F:1E:24:01:E1:28:00:41
            X509v3 Authority Key Identifier:
                keyid:3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:27:24:18:04:08:72:d2:5d:38:e9:d4:69:34:fe:1a:a0:9e:
         73:4c:9e:7e:1e:c2:f9:5f:55:59:74:d6:0c:e5:e6:ec:0c:5a:
         fd:fa:f5:60:6f:ff:df:d3:bd:52:e0:70:25:2f:bd:46:34:0d:
         c1:30:3a:e6:a0:68:b3:5f:30:dc:0c:71:a8:c7:b8:1d:ea:ca:
         72:0f:4c:18:a6:30:a2:99:14:ae:88:51:04:b0:75:d9:d7:23:
         ca:e5:b0:ee:cc:b5:77:4f:98:6c:58:7b:41:5e:e3:09:b8:42:
         50:f3:e1:f3:d4:d3:e9:23:74:e3:fe:dc:04:9f:9b:cc:fe:ce:
         53:b1:90:f7:f5:37:32:50:d2:64:fc:b6:d8:1f:b3:cc:7b:b0:
         2d:25:c9:40:aa:2f:69:d2:a2:f3:69:0f:fc:4a:99:54:e9:09:
         25:45:a9:c8:cf:ef:1d:62:c2:2e:43:d4:ac:ad:36:78:24:4a:
         79:ca:96:71:62:fb:cf:22:0f:2d:b6:27:5d:b6:d2:16:e8:6d:
         15:7f:87:c2:76:fc:de:1d:2a:df:61:11:8c:8b:49:49:23:2d:
         2f:d5:84:35:de:23:f0:25:9a:86:72:b4:49:5b:14:28:99:56:
         27:fa:b3:b8:9c:5c:2e:1f:31:d9:f2:9d:92:57:8f:7c:d7:23:
         ae:5a:62:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:12 2026 by rpki-client