This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
File:                     pPLix3U2Usd9u3nL4GmyurA_YN0.mft (raw, json)
Hash identifier:          SS+zgDoHs2Cm61ZLrp8sqrAx+TYx2PT+lyweW7O/yII=
Subject key identifier:   53:23:08:AF:B4:7C:C2:14:E4:1C:1E:B8:2D:4C:45:13:E1:C5:34:11
Authority key identifier: A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD
Certificate issuer:       /CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd
Certificate serial:       019C42B42F2AB1B504C4A60439A98B083794
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 14:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:30 +0000
Files and hashes:         1: JkxzftXxBP-vXJDMHiEIGkiEedU.roa (hash: okOGWD6NJlFcOrkCnqjaP6NoTcyEZKu0Sq4XrnddyYw=)
                          2: pPLix3U2Usd9u3nL4GmyurA_YN0.crl (hash: NUU8vRvCCzauP3RdApoumVz8f1/8DOksbRv9xjoyeUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:2f:2a:b1:b5:04:c4:a6:04:39:a9:8b:08:37:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd
        Validity
            Not Before: Feb  9 14:00:30 2026 GMT
            Not After : Feb 10 14:00:30 2026 GMT
        Subject: CN=532308afb47cc214e41c1eb82d4c4513e1c53411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5e:45:0c:57:c4:16:a6:86:03:ae:11:f3:e0:
                    9b:23:eb:8f:b3:96:6a:b8:e7:e3:67:92:e7:ae:82:
                    cf:fd:3e:a0:8b:1b:4b:71:d2:f9:1f:af:00:a7:1f:
                    82:14:c4:ca:54:ca:e0:6a:77:78:3e:cc:1a:be:a4:
                    6a:30:e8:9f:ac:9d:58:22:c1:df:64:7a:3b:32:18:
                    4f:fe:9b:17:66:95:b8:58:d2:e7:69:f0:0d:94:c9:
                    48:96:a1:43:13:1e:e6:c1:ef:de:25:b6:cd:3c:6a:
                    a0:bf:75:d0:59:dc:c8:63:e8:e3:d8:18:00:71:86:
                    68:e0:4c:8d:2d:72:47:d9:23:14:56:66:40:35:d0:
                    50:72:89:97:0c:1e:33:42:39:b4:97:73:0b:6c:d8:
                    45:b2:66:70:8c:86:fc:b9:08:27:73:ec:fb:bd:ef:
                    9b:4a:f4:34:f6:57:f1:68:87:b4:3f:73:e4:ad:6b:
                    3a:7c:9d:32:0e:de:18:7d:41:93:d6:5b:c1:ec:ca:
                    97:84:fa:8b:55:c8:1c:05:18:5e:fd:6d:be:a3:53:
                    7d:18:98:47:a9:2a:b0:9d:73:b4:4c:26:8a:da:2b:
                    33:44:15:99:5f:3d:92:6a:41:6c:b1:a4:bb:87:04:
                    58:fd:d3:a7:f1:3f:50:99:a3:12:28:bd:9a:2e:f5:
                    9d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:23:08:AF:B4:7C:C2:14:E4:1C:1E:B8:2D:4C:45:13:E1:C5:34:11
            X509v3 Authority Key Identifier:
                keyid:A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:27:cf:1e:69:ef:5a:af:a4:f7:ac:3f:af:e0:8a:b0:e0:8e:
         88:e1:54:14:5c:8e:42:ea:89:2b:1e:20:94:2b:3f:9d:c5:43:
         05:c9:54:27:78:df:8f:48:66:1d:1a:58:86:18:63:94:01:e3:
         db:38:d5:a9:1d:1d:3e:57:0c:da:df:d5:7b:0a:d2:64:1e:7e:
         b9:82:d4:94:40:1a:b5:05:1f:ec:96:f7:49:67:4c:61:35:e9:
         92:6d:7a:b9:09:ec:4c:48:10:cf:30:f1:48:12:b9:53:23:88:
         ed:e0:49:e8:5c:b0:40:16:05:81:5d:7d:71:f7:ad:c2:13:26:
         00:e4:3e:e3:90:7d:df:9c:be:60:52:54:f4:fb:cd:ee:d1:08:
         ba:ac:52:bd:ef:c5:f8:19:6f:aa:d1:22:31:c5:70:82:65:a7:
         9b:cf:04:97:2d:15:26:67:04:17:37:3d:45:8b:32:a6:59:2a:
         b7:80:b2:51:7a:fb:bd:8c:b2:93:df:e8:9b:ff:b3:ff:d0:a5:
         fe:91:54:1d:53:4b:f1:52:01:35:e9:84:de:a0:a1:69:cb:d2:
         c6:a0:00:1a:2b:5e:ad:1b:81:1b:dc:25:2c:12:2a:48:20:23:
         9b:11:87:4b:2f:f9:4e:bf:41:0c:bd:9d:97:d6:6b:0b:2a:c2:
         05:d0:60:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:58 2026 by rpki-client