This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
File:                     PRLRHJogPV58gmPt9URH47c1i38.mft (raw, json)
Hash identifier:          k3Ndxj9+EesmjZtW0oLYF5BYHnO1SdSRLnFRvmMqQBU=
Subject key identifier:   CC:D0:E9:F0:41:FF:D0:37:7D:A0:0C:2C:82:0D:67:54:93:35:EF:36
Authority key identifier: 3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F
Certificate issuer:       /CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
Certificate serial:       019C43FD9258EA942BE5AB7807FAF84362B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
Manifest number:          1338
Signing time:             Mon 09 Feb 2026 20:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:17 +0000
Files and hashes:         1: PRLRHJogPV58gmPt9URH47c1i38.crl (hash: 5Ce3x+R18nMjjCHeFNd4El3MuTFKK24mx/LQ5DAqATQ=)
                          2: fL10Ig4d3crLZGY9ylUsNdJrhx4.roa (hash: 59cphjVnvRGhN51MwGpM2RBhtTLQE+TadVntWntgkw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:92:58:ea:94:2b:e5:ab:78:07:fa:f8:43:62:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
        Validity
            Not Before: Feb  9 20:00:17 2026 GMT
            Not After : Feb 10 20:00:17 2026 GMT
        Subject: CN=ccd0e9f041ffd0377da00c2c820d67549335ef36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:64:bf:fb:9d:be:28:d1:f3:28:98:60:67:50:
                    f3:2b:55:07:c1:77:4c:95:3b:7e:bd:a0:51:ca:97:
                    88:4f:e4:a1:5e:09:06:6d:6f:80:b1:f4:a2:29:8d:
                    fa:e5:96:e9:99:68:cb:84:ca:c0:0a:3b:c6:b6:17:
                    55:ea:c2:d5:0e:22:54:09:59:e3:ee:66:17:ae:57:
                    fb:f3:85:ff:0d:5a:2f:4e:4b:89:87:06:29:34:d6:
                    e6:dc:2c:28:0e:61:bc:95:60:01:a0:69:92:d7:08:
                    6e:57:70:9a:1b:68:c1:f7:9c:32:33:9d:59:3a:61:
                    d6:9c:5e:eb:91:81:3c:2f:41:a9:bd:e4:7c:69:bf:
                    fd:8c:15:d4:5e:fd:51:bb:06:85:27:cb:c0:e9:95:
                    5e:7d:4e:ed:41:fd:9f:96:84:cf:30:79:9c:99:9c:
                    94:15:2c:ca:79:8d:b5:15:64:43:e6:40:a5:7b:31:
                    36:d4:f0:a5:63:56:3f:98:bb:10:ea:3d:09:bc:12:
                    61:50:24:d6:06:77:5d:06:4c:91:b7:39:4d:25:89:
                    da:0a:f0:fa:dd:76:96:ef:19:0b:6c:91:fa:38:86:
                    f2:fc:5c:cd:be:2a:72:93:fe:3f:11:25:f2:e2:8e:
                    e1:fe:6d:8f:d2:0f:63:06:0f:3a:70:fe:9a:ee:6e:
                    6a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D0:E9:F0:41:FF:D0:37:7D:A0:0C:2C:82:0D:67:54:93:35:EF:36
            X509v3 Authority Key Identifier:
                keyid:3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:45:a9:93:6c:25:42:37:1c:b1:98:2b:e5:ec:de:3d:92:a9:
         02:e4:cb:ef:31:bb:61:55:24:26:17:6e:fe:20:6a:bb:a0:fe:
         9a:1e:99:ad:2b:e8:c7:47:cd:6e:4b:78:fd:c1:32:36:f7:cb:
         17:2e:1d:4a:e4:7f:f7:3f:9e:5e:83:cf:9c:06:3b:6f:17:84:
         c9:c6:14:b8:bc:bd:b0:7b:4d:ff:25:cf:17:84:e2:af:0e:e8:
         57:fd:34:81:fd:28:4f:4c:50:f8:4f:8f:c7:2b:83:d2:79:66:
         6d:e3:c2:51:c7:8f:6a:22:21:ca:1a:63:d7:b1:a0:27:37:1f:
         0d:83:d6:62:e4:8b:e9:64:29:34:2f:a6:db:77:89:02:0c:99:
         b3:7f:fd:39:cb:9b:6b:f3:2b:ce:fd:7f:b7:a5:34:0b:bd:7f:
         18:0d:ef:8a:6d:e8:5c:77:48:57:79:50:2f:ca:12:5a:b6:c8:
         4b:0d:4a:69:54:d4:7f:72:dc:6c:ea:ff:cb:4f:b7:79:5b:ec:
         00:ba:34:55:ea:cf:f2:c1:ee:b9:ab:65:cb:84:f8:50:2e:4d:
         b6:03:13:58:d0:c5:58:99:52:09:66:bf:7b:cc:22:cc:a9:d3:
         2e:3d:07:92:3d:97:d7:d1:39:97:ef:b4:21:83:ca:fd:3c:1e:
         2b:38:fe:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:57:00 2026 by rpki-client