This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
File:                     pu1EK5HU6Dpt45-2eXGh55xrHtU.mft (raw, json)
Hash identifier:          YykFs7OxoXcP3QKhKbRd/Jp9Hf6wNyTJ3sqTmdU25q8=
Subject key identifier:   39:5D:65:DE:BC:D1:51:8C:C8:17:8C:A3:1D:8B:3E:09:07:DF:30:4E
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Certificate issuer:       /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial:       019C435941F5B4FCA94B6D3C8486C947C657
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
Manifest number:          1815
Signing time:             Mon 09 Feb 2026 17:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:48 +0000
Files and hashes:         1: hdnWz3HdQxPoPCQp2KpJgiW0GYk.roa (hash: iMGwa4BAxWRevm4MAo9XcPLpOn3GuQnZbwXs5mOFnXs=)
                          2: mQL1nW7K7ybu0TZ9G8v3WzDDFmg.roa (hash: O084txLhwyZ8zQFJ9DRJsh8HYo5IGT97mu78wCO555Y=)
                          3: pu1EK5HU6Dpt45-2eXGh55xrHtU.crl (hash: HCCB7KNm70pcuTDJmZbMRg6LKxOmsrd0zKTxXB/bnlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:41:f5:b4:fc:a9:4b:6d:3c:84:86:c9:47:c6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
        Validity
            Not Before: Feb  9 17:00:48 2026 GMT
            Not After : Feb 10 17:00:48 2026 GMT
        Subject: CN=395d65debcd1518cc8178ca31d8b3e0907df304e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:15:5a:9b:c5:17:09:a2:ba:be:ce:05:33:16:
                    72:0a:be:4a:6c:9c:7d:03:fb:4a:00:43:de:4d:11:
                    0d:16:a1:c3:86:82:83:25:04:dc:be:22:a8:3b:dc:
                    1c:55:fe:3a:74:f6:cb:96:79:1e:b7:64:47:d8:38:
                    22:ad:a9:82:81:8c:7e:e1:1f:83:72:c9:c9:32:30:
                    00:19:c8:36:56:63:8b:e7:38:04:86:e3:38:98:37:
                    91:df:2f:c6:52:bb:d4:cd:61:d3:1f:42:e4:e6:12:
                    13:18:40:ed:ea:79:50:92:c4:40:b2:85:bb:cd:6a:
                    64:1e:0b:b8:02:0d:e2:10:17:e0:4c:ef:05:63:49:
                    aa:9e:7f:86:ed:3e:4d:57:9c:d9:75:8c:d0:27:43:
                    e6:3c:3f:da:52:ce:31:35:aa:22:bf:10:57:45:1d:
                    5c:79:08:0e:8c:b1:ac:0c:d3:76:ae:38:39:99:1e:
                    e7:53:c3:75:5e:4b:d2:60:aa:44:42:86:2d:01:39:
                    6b:96:b2:95:0f:b5:e3:a8:dd:7d:5d:65:97:fd:8f:
                    3e:62:8e:b1:46:96:b6:0a:b1:29:08:27:45:04:52:
                    4c:de:d9:06:b4:02:66:fd:53:90:4e:bd:8b:c0:56:
                    7b:e8:f2:9e:8e:9a:fd:17:16:c0:94:b0:be:02:77:
                    8a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5D:65:DE:BC:D1:51:8C:C8:17:8C:A3:1D:8B:3E:09:07:DF:30:4E
            X509v3 Authority Key Identifier:
                keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:63:5e:a4:01:95:f2:89:fb:da:d3:45:4e:d7:5e:79:85:b8:
         d0:c0:9f:ab:62:8f:74:05:ef:a5:46:84:a3:66:79:f2:ab:89:
         10:d8:aa:26:44:e7:5a:ec:60:5f:c2:27:2e:35:34:33:5d:51:
         c2:e0:5d:31:04:d7:8a:6d:d8:19:af:70:93:35:47:38:2a:bf:
         1c:5d:22:5f:05:64:9e:df:e0:76:98:fd:73:a3:68:d3:bc:cb:
         fe:c7:a2:fd:de:d8:fa:39:88:60:77:04:63:44:33:fb:c0:f5:
         2c:8b:74:f6:48:62:f1:04:76:03:c3:03:4c:56:4e:c1:0e:54:
         96:4a:0c:3c:e6:7a:35:2b:16:7e:b4:90:f2:2a:bf:a3:aa:4e:
         3b:36:b7:d8:cd:15:d8:81:ba:c5:c7:2d:bd:8c:5a:dd:2f:66:
         bc:5b:da:16:f4:7a:c6:cf:97:f7:17:96:5f:6c:ef:65:82:a0:
         80:8b:94:54:61:c6:dc:43:53:b2:fb:9c:2b:da:0a:ec:e9:67:
         89:62:d3:7f:9a:8f:9b:60:c5:0d:6c:08:b9:4e:00:75:28:6a:
         38:04:5e:8f:9e:5e:13:bb:c6:6f:bc:2c:96:d7:c1:c8:ad:d6:
         b9:83:1b:79:69:81:4d:63:de:5e:d0:fb:d5:be:1a:9c:51:13:
         f2:bd:fa:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:13 2026 by rpki-client