This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
File:                     PWVWSolU1q6VL4ofevbBz7p4CUo.mft (raw, json)
Hash identifier:          N5cYdqtqAlScMS0YVOebfl9FQ5KpLMMm1bNjzMs9UDI=
Subject key identifier:   82:CB:1D:53:91:9E:21:C5:7F:B4:E2:C8:A3:F3:31:8F:90:B5:8C:D1
Authority key identifier: 3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
Certificate issuer:       /CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Certificate serial:       019C43907C3467214ADD19F8B2EB4AAC91F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
Manifest number:          170D
Signing time:             Mon 09 Feb 2026 18:01:08 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:08 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:08 +0000
Files and hashes:         1: 1-8iAqzCb-dnqpC0mG9QcHFT-BiU.roa (hash: GLfzuz24dtgGsbzbzf51Mgi7uiLzVKCscSDvx4Q43oY=)
                          2: PWVWSolU1q6VL4ofevbBz7p4CUo.crl (hash: +9jH+ti97D6wfJl5Yzk1mcBVsZq3hZ2FuaA1offymRg=)
                          3: eahgufCfOHHAIx8MFOHNTLtP6M4.roa (hash: kkQvc1W1aYM6K9ernxdLo8LTVXVyQLjFAFQYaCBKHkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:7c:34:67:21:4a:dd:19:f8:b2:eb:4a:ac:91:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
        Validity
            Not Before: Feb  9 18:01:08 2026 GMT
            Not After : Feb 10 18:01:08 2026 GMT
        Subject: CN=82cb1d53919e21c57fb4e2c8a3f3318f90b58cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d2:ac:41:fe:4f:28:22:6e:c1:96:4d:69:6f:
                    3f:75:b7:4f:a1:cd:13:cf:dd:66:ff:45:27:40:03:
                    7b:b2:af:f5:f7:2a:3e:89:16:40:f7:d1:6f:d2:a8:
                    55:d6:5c:e8:67:22:d6:2c:4d:c6:a4:7a:9e:6f:9d:
                    2b:b8:f3:5c:90:98:d5:04:93:7f:ce:b4:57:d4:b9:
                    95:ed:99:28:c2:31:a0:7b:38:37:91:b2:a2:94:ff:
                    22:9d:27:e0:f1:db:8d:62:83:49:3a:8f:9f:db:69:
                    52:d3:57:80:09:d2:b0:53:f8:ab:96:81:60:ad:97:
                    a4:c5:b9:7f:d0:d2:da:fd:8d:23:a8:a0:85:a1:7a:
                    2d:45:ed:0b:ad:9d:c9:c8:02:95:32:93:f9:1b:79:
                    b3:66:83:fb:d2:0e:6c:8c:b5:a2:c3:0a:a0:b6:3a:
                    22:82:f6:18:7e:d1:52:e1:bd:47:65:c4:18:b2:f0:
                    f8:b4:32:d0:bf:1c:ef:9f:5f:ff:94:29:3e:99:af:
                    f1:6a:13:67:9c:f3:7a:ec:8b:0d:c8:2c:a0:83:57:
                    cb:c8:0d:23:20:18:57:ba:a5:6b:f3:ea:a4:7d:59:
                    64:ca:94:31:57:a0:69:42:7f:b9:7e:d0:c7:0c:dd:
                    a9:4e:3f:87:85:28:be:f1:f0:e0:26:43:93:31:02:
                    dd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CB:1D:53:91:9E:21:C5:7F:B4:E2:C8:A3:F3:31:8F:90:B5:8C:D1
            X509v3 Authority Key Identifier:
                keyid:3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:bf:95:ab:97:dc:90:54:d6:84:8b:30:e0:b1:4d:18:70:50:
         19:fe:0e:a1:e2:11:7f:b3:5b:f1:52:01:98:3c:b6:27:fa:46:
         c4:a3:47:96:17:d3:71:8a:6d:ce:ac:0a:b1:06:11:0f:2b:51:
         6f:3e:44:c2:eb:cd:5e:bd:41:65:6b:1d:e6:f3:62:a0:3c:d8:
         35:bd:0e:06:63:75:a5:f9:b8:6f:8d:cb:24:b9:07:f9:f7:ab:
         27:6f:99:ec:95:73:61:6f:cd:52:7e:54:64:a0:5b:e4:3a:49:
         5c:7b:56:a4:c7:a7:ef:d4:a0:de:0a:89:73:eb:d1:50:5f:7f:
         44:e3:92:a8:a9:9a:d3:a8:c4:63:1f:0d:c0:24:9a:d0:32:8c:
         a7:6f:42:cb:61:83:32:e9:52:33:de:03:45:c5:44:0c:d5:be:
         da:b1:1b:77:30:0f:47:b1:b1:83:21:af:ef:4a:dd:c1:d3:5f:
         e1:1b:7e:f9:25:3f:6b:1c:33:74:99:8c:fb:55:c9:ff:a3:e8:
         4b:8c:d2:75:f8:ed:4e:76:d5:08:e4:89:aa:6b:c9:9c:83:6b:
         48:a7:e2:90:bd:b4:c0:dd:1c:94:6f:8d:bc:6c:1e:94:7a:43:
         80:aa:d7:65:48:be:a1:62:9c:f1:91:be:dd:82:af:46:02:dc:
         5b:85:5c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:02:24 2026 by rpki-client