This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
File:                     PLeBKLecqRq2JLqDJd_O2U9kRpo.mft (raw, json)
Hash identifier:          KROHNfkYdYwl4YJtRcP96Tc+Ao+laXTCeMhqrKuDVS4=
Subject key identifier:   8F:FE:7F:9C:F4:20:43:04:5C:3F:29:47:FB:AA:1F:7B:1B:17:FF:D8
Authority key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
Certificate issuer:       /CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Certificate serial:       019C2E520E1B92DFB1A6076434DF1D239C44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
Manifest number:          0978
Signing time:             Thu 05 Feb 2026 15:00:55 +0000
Manifest this update:     Thu 05 Feb 2026 15:00:55 +0000
Manifest next update:     Fri 06 Feb 2026 15:00:55 +0000
Files and hashes:         1: Ed-jWM6oR1j0LJ_ORKoMheO5-e0.roa (hash: kYGqmXXjuRtKcO0c+iMXi0qsCWcYdXw5YIPgbA3A38U=)
                          2: PLeBKLecqRq2JLqDJd_O2U9kRpo.crl (hash: xIxULj3qZ51i3PWB9yLh6zexsZ5cNoNX/SSweDvjt8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 12:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2e:52:0e:1b:92:df:b1:a6:07:64:34:df:1d:23:9c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cb78128b79ca91ab624ba8325dfced94f64469a
        Validity
            Not Before: Feb  5 15:00:55 2026 GMT
            Not After : Feb  6 15:00:55 2026 GMT
        Subject: CN=8ffe7f9cf42043045c3f2947fbaa1f7b1b17ffd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:42:96:07:93:3e:d3:7f:f0:05:5f:50:8b:
                    b6:3e:5d:d9:6e:30:aa:55:b9:b8:33:08:43:61:47:
                    35:75:13:2d:18:64:c7:64:89:89:71:ce:49:39:48:
                    6e:05:38:e9:70:3b:0e:83:d0:2b:f2:00:55:33:46:
                    51:06:bb:c1:13:a2:de:58:60:c6:f5:b3:fa:08:8a:
                    d9:d7:d4:3d:fe:63:21:85:8f:00:58:5a:2d:d1:dc:
                    1a:8c:e6:b3:f2:88:af:14:47:77:88:1f:43:13:dc:
                    50:e4:9e:97:ca:61:62:c1:7e:32:63:ac:87:a1:a5:
                    69:eb:59:f7:ac:0a:38:21:e9:16:9c:3b:fa:e4:38:
                    92:6f:c8:17:1b:f8:af:6a:dc:20:a5:41:d1:47:c8:
                    c1:3c:04:de:75:14:2a:33:03:a3:af:12:ac:5f:b3:
                    17:79:fa:ff:7a:36:d8:d7:10:68:f5:62:84:3b:e1:
                    2d:da:3d:0b:96:81:66:bb:89:86:0d:85:49:70:d2:
                    9f:ed:fa:39:29:47:fd:f9:f1:06:40:6e:9e:c4:9f:
                    02:de:99:5c:35:41:15:2f:b8:2c:67:c6:2a:a5:61:
                    21:af:27:c6:b9:ca:c4:6c:78:a5:ee:d9:3d:7a:17:
                    75:e9:69:79:7f:80:cc:c1:d7:3d:a9:de:c2:ed:5f:
                    ff:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FE:7F:9C:F4:20:43:04:5C:3F:29:47:FB:AA:1F:7B:1B:17:FF:D8
            X509v3 Authority Key Identifier:
                keyid:3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:af:a8:f1:e5:ba:2d:bc:57:e5:f7:ab:88:86:48:da:ca:1c:
         96:e3:2c:a0:87:73:66:dd:77:97:d3:56:b1:db:7f:98:bc:1e:
         ab:ae:9c:43:2f:65:90:4d:29:25:e7:f7:d8:73:73:76:ca:0e:
         ea:b3:9e:ba:db:eb:fe:bd:87:d9:6b:4c:ba:e8:98:b9:25:00:
         c3:63:8a:20:40:a0:57:8b:39:2d:c2:2c:f9:08:bf:a9:19:b6:
         c4:a9:cf:4b:61:e4:5f:33:25:0b:e7:68:e1:49:5f:ce:b7:22:
         e9:37:08:09:38:b9:c3:5d:f4:8f:d0:2e:43:bb:f6:3a:d6:b6:
         ff:c6:b5:65:10:f9:e8:1e:36:87:ed:54:26:43:bc:38:b5:17:
         4d:96:d2:44:40:20:f7:fc:c2:c0:5e:6e:34:2d:4d:cd:bc:0e:
         96:0f:34:93:d5:fc:96:59:d6:53:34:1e:c0:a3:d8:61:b1:a4:
         4e:e3:2d:74:ed:39:2f:6a:76:82:cc:68:ce:55:a4:0c:bf:49:
         1d:63:d1:48:ae:84:6e:81:35:2b:26:e0:96:50:8a:14:de:61:
         bc:16:1d:5b:98:bc:4f:2f:19:8d:d9:c7:09:31:4e:e0:97:69:
         5c:e2:81:db:12:05:aa:12:ad:ce:09:fe:aa:4e:87:b3:03:13:
         3d:8a:a7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 21:11:40 2026 by rpki-client