This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft
File:                     pPwscnotINbRTRyACqzbLfEJPcQ.mft (raw, json)
Hash identifier:          CHAMcLXJ0UjYSehGlTtTJpyIo6549y6yMvQIyn4B7Rs=
Subject key identifier:   58:B0:11:4A:EF:62:98:B4:5D:B5:E7:4D:97:F1:8D:7A:5D:91:95:78
Authority key identifier: A4:FC:2C:72:7A:2D:20:D6:D1:4D:1C:80:0A:AC:DB:2D:F1:09:3D:C4
Certificate issuer:       /CN=a4fc2c727a2d20d6d14d1c800aacdb2df1093dc4
Certificate serial:       019C427E29F456AE6E76B3D3476A8AD95BDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPwscnotINbRTRyACqzbLfEJPcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft
Manifest number:          037B
Signing time:             Mon 09 Feb 2026 13:01:30 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:30 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:30 +0000
Files and hashes:         1: pPwscnotINbRTRyACqzbLfEJPcQ.crl (hash: h0idZ9uiEdLwLDegZqq0iA5QxnYyIyt6lXeAm7OMnZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPwscnotINbRTRyACqzbLfEJPcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:29:f4:56:ae:6e:76:b3:d3:47:6a:8a:d9:5b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4fc2c727a2d20d6d14d1c800aacdb2df1093dc4
        Validity
            Not Before: Feb  9 13:01:30 2026 GMT
            Not After : Feb 10 13:01:30 2026 GMT
        Subject: CN=58b0114aef6298b45db5e74d97f18d7a5d919578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:56:ea:50:3f:81:ef:8c:56:48:53:a9:12:4d:
                    9c:5b:c5:37:9c:fa:be:72:e0:54:a8:1d:a1:42:30:
                    40:50:b9:e6:28:0e:82:ca:b8:f2:fc:c6:77:64:d2:
                    1b:95:ad:3c:41:56:4f:65:5f:c2:bb:c5:b7:3f:c4:
                    22:b1:38:9a:a9:dd:11:33:20:bb:5e:5e:92:bb:3e:
                    47:c7:e5:1f:be:6b:a2:00:69:5f:af:71:b0:9f:2d:
                    2a:96:b7:41:66:fb:b0:f8:fa:e6:aa:55:e5:a4:8a:
                    87:c2:89:fa:38:c1:0a:5a:66:b7:bc:c7:ca:10:4a:
                    98:09:cb:55:02:3b:79:6c:f2:e8:80:bc:34:3d:8d:
                    69:d4:2d:78:85:f1:09:ef:93:78:9a:a4:15:05:ee:
                    76:b4:f7:71:d9:41:f1:e0:96:5e:4c:52:04:d8:02:
                    bb:57:8c:fd:14:d1:70:2d:d5:cb:df:e4:74:85:a2:
                    f6:fe:ca:54:60:3d:64:ea:79:3a:0f:7a:58:9b:2c:
                    78:eb:4c:8a:56:2c:85:9a:e0:a1:ae:3e:c7:0b:36:
                    79:c0:a8:f9:57:a8:ce:40:00:86:c3:ca:b2:60:bb:
                    2f:c1:64:31:6e:52:ba:ff:c1:65:50:7d:43:a1:7c:
                    61:06:8d:d8:d5:df:12:54:c4:16:dd:4a:df:ec:61:
                    b1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B0:11:4A:EF:62:98:B4:5D:B5:E7:4D:97:F1:8D:7A:5D:91:95:78
            X509v3 Authority Key Identifier:
                keyid:A4:FC:2C:72:7A:2D:20:D6:D1:4D:1C:80:0A:AC:DB:2D:F1:09:3D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPwscnotINbRTRyACqzbLfEJPcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:bd:91:e2:ff:0f:14:51:f3:9c:17:37:2d:71:78:75:60:ba:
         54:56:17:fb:e4:f9:aa:c2:bb:e8:a7:be:ba:cf:5b:62:a3:8d:
         3a:eb:89:cf:07:d7:f4:cc:38:fe:cc:41:75:91:1e:9d:57:43:
         20:99:ff:66:41:11:83:36:08:5d:fd:77:f0:ef:c3:d4:7b:d1:
         0a:9a:9d:54:97:01:75:8d:b7:bf:21:4f:ed:22:0a:88:93:ab:
         32:71:6e:26:c3:c2:b7:20:72:4c:42:fc:41:b6:a5:0c:d0:0d:
         66:6b:7d:59:9c:c1:f1:7f:5c:9a:6a:86:6e:fe:be:bf:3f:76:
         ae:4a:8e:17:2c:20:09:01:e6:4f:50:46:0f:dd:79:68:e3:23:
         06:bd:16:eb:d9:66:8d:08:7d:ec:ec:10:2a:f9:8a:ed:58:c7:
         ae:81:52:76:94:6e:95:ce:5e:e2:e6:94:81:27:ad:ab:b5:c6:
         89:7c:3b:d3:45:4e:f1:21:43:90:9b:7f:6f:07:7e:ae:00:66:
         cc:18:3e:74:f3:a8:cb:98:8f:44:c5:8d:c3:58:e9:07:5a:32:
         ed:a1:09:b8:af:89:32:94:5f:5b:d2:7a:f2:1c:64:69:72:71:
         34:72:c0:ba:77:3d:62:b4:da:5a:22:fb:d9:3a:28:0f:ba:b4:
         34:7a:8e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:03 2026 by rpki-client