This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
File:                     PLxNr2DH1E6V1suSB6nd7FmkS_c.mft (raw, json)
Hash identifier:          cI5oOVbcSbJc5IrLeabMBuaPkDLf5z7uvZtgai3XTdY=
Subject key identifier:   DC:46:0D:62:43:F8:BB:DD:F5:15:BC:56:FD:47:C3:9C:F4:F3:FC:E0
Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
Certificate issuer:       /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Certificate serial:       019C420F88256FF0DAAE84C5AE2E65E32A3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
Manifest number:          0759
Signing time:             Mon 09 Feb 2026 11:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:39 +0000
Files and hashes:         1: PLxNr2DH1E6V1suSB6nd7FmkS_c.crl (hash: uwD6u5wcwV1F2Wjx0JBMHz7Jt9YhylKcrHCnpnmzLKo=)
                          2: qPYgVakLNDaEGc5ONkGmhqVYYy0.asa (hash: Q6ggqq2IBO+TwQuRQrQoJwyiBwBG7kWAAk+owOZubuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:88:25:6f:f0:da:ae:84:c5:ae:2e:65:e3:2a:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
        Validity
            Not Before: Feb  9 11:00:39 2026 GMT
            Not After : Feb 10 11:00:39 2026 GMT
        Subject: CN=dc460d6243f8bbddf515bc56fd47c39cf4f3fce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:fe:a1:a9:a3:2e:f6:4f:bc:a4:e4:d6:5c:
                    32:8d:28:61:1b:6b:f2:e4:52:de:df:b0:de:84:38:
                    f9:37:d2:36:34:25:96:c1:3d:32:ab:d5:be:31:6b:
                    7a:d8:78:7a:de:44:b3:01:91:e6:0e:21:49:d5:78:
                    f7:81:6a:6f:86:ff:2a:da:f7:05:b8:bd:df:ee:d9:
                    8b:6f:36:7f:4f:bb:62:25:19:8c:8e:8f:c1:cc:12:
                    89:29:7e:87:df:f1:2e:f6:8c:c0:cb:d0:83:c2:ca:
                    00:36:12:26:22:05:35:33:4c:64:dd:41:ac:ed:df:
                    5d:5e:82:6c:b1:25:87:bb:78:9e:01:ae:d1:41:5c:
                    1b:58:b1:76:eb:cf:07:ba:42:92:c0:1a:b2:b2:ef:
                    c6:09:c9:c6:f2:ae:59:ee:97:14:9e:b7:6e:fd:4d:
                    ce:a9:c0:d9:0b:ae:fd:b8:f2:e1:d3:58:74:21:07:
                    28:f3:89:2b:20:ce:8a:63:66:12:76:c0:f5:e6:9e:
                    b0:df:0d:45:cd:82:e4:1d:cf:b2:fb:ca:71:13:bc:
                    1d:c2:9d:22:02:09:88:57:1c:27:4f:74:39:dd:90:
                    a3:18:10:8a:04:8d:2e:31:6b:b4:7e:33:7c:5d:74:
                    63:92:15:f5:1e:b8:9e:54:d0:53:bc:e4:a0:cd:28:
                    24:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:46:0D:62:43:F8:BB:DD:F5:15:BC:56:FD:47:C3:9C:F4:F3:FC:E0
            X509v3 Authority Key Identifier:
                keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:bb:d8:d2:32:e4:05:56:2c:eb:d0:f8:94:6f:89:88:5e:d5:
         34:18:ab:d1:c8:a6:0a:e3:61:7f:12:9f:9f:57:43:35:0e:29:
         65:01:18:91:b3:4e:c1:f7:6f:63:39:ee:f0:32:91:7e:0b:cd:
         bb:a7:a9:fb:ee:61:45:8d:8a:1c:b2:49:53:ed:ed:1d:6c:0a:
         7f:37:02:47:17:a4:69:ce:71:be:cd:80:76:96:20:89:02:fd:
         58:22:e7:b2:e5:fe:6c:1a:c7:60:5f:74:a5:d9:2c:e6:d1:81:
         c9:82:9d:19:2b:58:60:b4:24:57:66:60:78:64:6a:9e:8a:36:
         d9:92:82:39:d7:d4:11:fe:b1:05:bc:52:72:5d:16:72:96:b2:
         d8:0a:40:8f:8c:ab:29:8b:8b:7c:97:7e:ea:cb:a9:44:a9:e3:
         2a:f7:5d:0c:6b:ee:f2:43:dd:19:8a:1e:cd:19:10:eb:50:1d:
         e4:96:98:d6:af:14:4f:a4:85:86:47:0b:0e:a9:bd:a5:c9:26:
         6d:75:ce:dc:71:17:40:e3:e9:3f:47:b4:dd:bf:95:3e:15:e3:
         ad:ae:ab:4a:2b:39:f0:70:33:b9:a3:ca:a9:9d:d9:84:1c:1e:
         27:0d:78:4a:60:5b:dc:77:2a:f1:69:82:c0:eb:f5:6d:46:df:
         fe:23:54:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD4glb/DaroTFri5l4yo9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYmM0ZGFmNjBjN2Q0NGU5NWQ2Y2I5MjA3YTlkZGVjNTlh
NDRiZjcwHhcNMjYwMjA5MTEwMDM5WhcNMjYwMjEwMTEwMDM5WjAzMTEwLwYDVQQD
EyhkYzQ2MGQ2MjQzZjhiYmRkZjUxNWJjNTZmZDQ3YzM5Y2Y0ZjNmY2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/3+oamjLvZPvKTk1lwyjShhG2vy
5FLe37DehDj5N9I2NCWWwT0yq9W+MWt62Hh63kSzAZHmDiFJ1Xj3gWpvhv8q2vcF
uL3f7tmLbzZ/T7tiJRmMjo/BzBKJKX6H3/Eu9ozAy9CDwsoANhImIgU1M0xk3UGs
7d9dXoJssSWHu3ieAa7RQVwbWLF2688HukKSwBqysu/GCcnG8q5Z7pcUnrdu/U3O
qcDZC679uPLh01h0IQco84krIM6KY2YSdsD15p6w3w1FzYLkHc+y+8pxE7wdwp0i
AgmIVxwnT3Q53ZCjGBCKBI0uMWu0fjN8XXRjkhX1HrieVNBTvOSgzSgkWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxGDWJD+Lvd9RW8Vv1Hw5z08/zgMB8GA1UdIwQY
MBaAFDy8Ta9gx9ROldbLkgep3exZpEv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEx4TnIyREgxRTZWMXN1U0I2bmQ3Rm1rU19jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS84YWZkNGItZGY2Mi00YmE0LWFkNzYt
YmY0OWE2ZDdiZTdjLzEvUEx4TnIyREgxRTZWMXN1U0I2bmQ3Rm1rU19jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS84YWZkNGItZGY2Mi00YmE0LWFkNzYtYmY0OWE2ZDdiZTdj
LzEvUEx4TnIyREgxRTZWMXN1U0I2bmQ3Rm1rU19jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrvY0jLk
BVYs69D4lG+JiF7VNBir0cimCuNhfxKfn1dDNQ4pZQEYkbNOwfdvYznu8DKRfgvN
u6ep++5hRY2KHLJJU+3tHWwKfzcCRxekac5xvs2AdpYgiQL9WCLnsuX+bBrHYF90
pdks5tGByYKdGStYYLQkV2ZgeGRqnoo22ZKCOdfUEf6xBbxScl0Wcpay2ApAj4yr
KYuLfJd+6supRKnjKvddDGvu8kPdGYoezRkQ61Ad5JaY1q8UT6SFhkcLDqm9pckm
bXXO3HEXQOPpP0e03b+VPhXjra6rSis58HAzuaPKqZ3ZhBweJw14SmBb3Hcq8WmC
wOv1bUbf/iNU1A==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:31 2026 by rpki-client