This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
File:                     pPTBZVXW8DttbI0KjMvhrx6uxDo.mft (raw, json)
Hash identifier:          pswssF3E0ZtNecv+gcqp7nsys9x8ArJsrAbIcyfBdN8=
Subject key identifier:   1E:D8:84:E1:73:94:DE:C2:02:94:C6:19:7E:56:1E:6F:84:25:E2:D0
Authority key identifier: A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A
Certificate issuer:       /CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
Certificate serial:       019C424675B9BF2FB8000BD7476191512CD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
Manifest number:          01F6
Signing time:             Mon 09 Feb 2026 12:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:39 +0000
Files and hashes:         1: lha0ZmedDVL5ojeX6XufkbgdzDc.roa (hash: aql9eZoUUBsK6RGXxorryRAzls71w3x+Yu3C3M/JeMA=)
                          2: pPTBZVXW8DttbI0KjMvhrx6uxDo.crl (hash: eYLESuPC8jPaPzzcwTVuXpVh1CIY+xukUP+rpFIre0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:75:b9:bf:2f:b8:00:0b:d7:47:61:91:51:2c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
        Validity
            Not Before: Feb  9 12:00:39 2026 GMT
            Not After : Feb 10 12:00:39 2026 GMT
        Subject: CN=1ed884e17394dec20294c6197e561e6f8425e2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c7:9f:d8:ef:34:6d:d0:7b:89:06:04:9e:bc:
                    74:ee:7a:c1:e1:2a:66:09:e2:51:a4:64:27:bd:49:
                    82:98:6e:45:7d:3f:c2:20:bd:7e:56:5b:ed:2c:83:
                    50:0b:5a:83:96:e6:ab:99:aa:fb:81:22:3d:23:fa:
                    85:d6:00:60:47:bc:7c:e8:ff:ff:8b:cf:cf:36:27:
                    ec:0c:cb:42:c9:bd:00:b6:77:b6:9a:99:4e:dc:7e:
                    25:7d:45:23:c4:2e:84:2d:ba:4d:d1:a5:34:c9:df:
                    de:70:aa:48:17:a3:68:f5:9c:35:69:43:3e:3c:94:
                    bc:28:bc:ce:bc:d0:e9:e8:e4:2b:6f:96:eb:b7:4d:
                    43:73:24:55:63:da:7c:80:50:1f:68:93:b6:b8:3d:
                    d1:d5:f6:2f:cf:41:f6:bf:37:7b:9b:5d:c6:35:a4:
                    d0:c3:d1:e1:30:5a:c6:13:60:3a:60:91:3d:e3:03:
                    89:79:92:06:44:d3:52:78:c1:3d:eb:81:e7:74:60:
                    ba:38:0d:bc:17:25:95:de:ec:51:3f:a0:6a:29:4b:
                    2c:91:f8:f0:11:f4:f3:e1:8a:02:cf:00:aa:65:85:
                    f3:32:2d:23:67:15:d0:e7:10:5b:d2:29:e4:34:2b:
                    b1:de:94:52:80:bd:5d:d5:23:be:3d:78:17:c7:a8:
                    9f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D8:84:E1:73:94:DE:C2:02:94:C6:19:7E:56:1E:6F:84:25:E2:D0
            X509v3 Authority Key Identifier:
                keyid:A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:96:46:8e:50:25:28:c0:3d:0c:0a:2c:d5:10:e2:c9:3f:ab:
         69:40:f7:45:c6:87:12:ab:6b:40:90:52:d8:4e:3e:7e:9e:31:
         e4:82:9c:65:9a:4a:49:ae:a7:ff:f6:64:99:35:83:e3:b6:4e:
         e5:76:56:84:e2:c5:23:f1:ef:54:f1:10:14:eb:26:03:ae:ba:
         53:e6:12:b2:4e:be:04:c8:d5:d1:9c:aa:3b:07:6b:c2:90:91:
         a5:35:54:9f:b9:0d:bd:72:43:7e:ff:66:9e:8a:80:34:ff:cd:
         02:f6:37:3c:42:d0:48:69:23:73:5f:6c:08:a1:65:b2:62:24:
         a4:8a:aa:8f:ab:42:19:2e:3b:cf:9d:59:a4:7b:7e:a7:d7:e8:
         50:90:db:f7:a8:95:19:14:ce:a6:c6:58:0a:3d:92:37:ee:a0:
         b3:8c:0d:65:66:a6:fc:b6:a0:9a:f8:9e:b7:20:23:a2:5e:a7:
         c3:5d:4e:cf:95:92:21:8f:bf:2d:67:5e:91:95:7e:97:5d:f6:
         01:d5:27:b3:91:0b:33:35:99:0d:89:24:dd:e4:06:70:6b:77:
         c8:a1:88:c5:36:be:97:2c:08:c3:a2:06:92:0f:75:93:41:46:
         22:15:90:c0:f8:da:3c:83:2a:57:81:19:88:0c:68:f1:cb:ac:
         b4:83:59:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:41 2026 by rpki-client