This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
File:                     PXud_6rjPsLPGbWtTknB6esdnWQ.mft (raw, json)
Hash identifier:          nkdk/MjRTAhUt1I+32pbl+Fvzx3H8pARz5SIkaQCKes=
Subject key identifier:   E3:4C:93:0C:01:B0:49:DF:4F:9B:AC:4B:29:9C:45:DD:C4:47:D8:5A
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Certificate issuer:       /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial:       019C43FD947F35FEBB0A223E9CB9388D8F4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
Manifest number:          045E
Signing time:             Mon 09 Feb 2026 20:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:17 +0000
Files and hashes:         1: 4VO4JMCwvHV0sfUNLA59ac2Dg3Y.roa (hash: kJ9VYAuV//vjujGkSWMWi/e+PbUjjVkj9bRtxmow20o=)
                          2: PXud_6rjPsLPGbWtTknB6esdnWQ.crl (hash: uymj+Md40bm/3lEtMbM9Az7kAq2/W0ErF8hkB1DcazM=)
                          3: SzDjXmkPc81OxUH-J5X5s68f_Jg.roa (hash: uY/BmEoUTgPIr21DkbWh/gHnXF9vEuYAHGIFIehB+YQ=)
                          4: _FiCFPS2WDQr7qrNaK4jqE3Fo30.roa (hash: 85eMzcmnZYam84IsG9UXFtajYX0CoTdOe5qhVA9kejg=)
                          5: _yxMDdNQJ6Gep4Y5SiebkN9OZOc.roa (hash: ngJbG5m3YmsYx5tKmvort95IPotFGSUX55NRo92YHuQ=)
                          6: cphFg1iNKGaqHHSqn4B1PMh4i3k.roa (hash: CS6t4yS3dAdL6oYmfo90GkG5Ay5V1qyLgzfsgwOA6Qg=)
                          7: ggNVICV3n79luwmtpqxkxLAB9-E.roa (hash: hehy8vJ2pMCobL1Ks6NMf8zuXtrrG4R7n74ZthFaYEQ=)
                          8: uj6_1RbcFYiy4iSbzHXMjMdTY8M.roa (hash: OVjAStpjdIoEMhnUSMUk0Ln55rKzOTzbc4j6hvTT0lc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:94:7f:35:fe:bb:0a:22:3e:9c:b9:38:8d:8f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
        Validity
            Not Before: Feb  9 20:00:17 2026 GMT
            Not After : Feb 10 20:00:17 2026 GMT
        Subject: CN=e34c930c01b049df4f9bac4b299c45ddc447d85a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:77:44:39:ce:de:f1:cf:f9:92:76:a2:c3:9f:
                    30:47:1e:21:a3:c7:14:65:7a:94:33:4d:bb:51:c1:
                    dc:e5:48:4d:d1:0a:0f:e7:0a:0b:3a:09:da:39:b9:
                    63:a7:f2:76:5d:b7:32:45:64:cb:6f:08:43:c7:5b:
                    9f:4c:ac:92:ac:9a:b4:05:0e:c8:e8:4c:8e:49:20:
                    bf:c0:7a:49:a1:dd:d3:e0:eb:20:cf:67:15:df:e8:
                    e3:cc:ed:37:11:2d:09:2d:5a:9a:ef:3f:14:4d:4a:
                    d0:9e:ba:40:16:34:57:2a:cd:ea:c1:a5:f0:22:1f:
                    42:b2:19:d2:d0:0f:97:d5:f5:f3:9a:c2:bd:a7:e4:
                    cc:5d:a7:b2:9f:ca:3d:7a:b8:b8:0c:2d:80:51:59:
                    66:9f:a0:ca:ee:2d:30:d0:17:84:99:56:8c:29:2a:
                    fe:d3:e9:b5:53:e4:62:1b:ba:62:dd:28:07:aa:71:
                    7c:b5:77:3e:27:f2:d0:af:af:a5:87:cb:e4:0e:68:
                    15:dd:c9:ab:23:ad:f7:2c:6b:3c:85:6c:72:cb:8f:
                    02:e9:fb:7b:70:8a:a8:84:d0:f0:d4:8e:f5:50:4a:
                    8e:3d:47:19:70:9f:43:00:7f:db:a7:0e:61:bd:b6:
                    16:71:83:1f:bb:32:dd:be:79:02:e9:21:08:42:64:
                    e5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4C:93:0C:01:B0:49:DF:4F:9B:AC:4B:29:9C:45:DD:C4:47:D8:5A
            X509v3 Authority Key Identifier:
                keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:a2:af:c7:10:57:a9:b5:68:a2:c8:15:64:44:8d:f1:19:c9:
         20:03:eb:84:d2:f2:44:dc:e4:f9:09:36:96:bf:35:02:ea:a6:
         99:33:9a:35:51:72:5a:ee:6b:a9:0f:9b:88:82:88:26:f4:94:
         6f:c1:4d:23:74:29:7c:fe:54:5c:84:18:7f:5c:1a:33:1d:b5:
         ba:8c:00:89:7b:05:e1:9c:fb:53:05:16:a2:8d:7f:a0:5f:16:
         be:37:ad:e1:4a:b9:fa:64:57:09:96:a9:2d:61:07:05:7d:da:
         9a:0a:2a:af:03:cd:5b:df:9b:3a:db:76:b9:5b:57:74:a4:fd:
         f2:3b:6a:c5:83:be:6e:3d:90:dd:cf:56:05:49:93:70:e9:cc:
         dc:fd:d7:a6:07:f5:d0:6a:01:86:8d:89:e9:6e:82:2b:c0:36:
         8a:75:64:dc:4a:be:cc:31:a6:85:9d:fe:3e:42:2c:a1:83:49:
         15:e7:3d:71:cb:df:3f:d3:03:8e:64:81:69:53:f9:d6:3a:c0:
         7e:ea:d1:2f:9e:33:37:42:f7:3e:dd:bc:da:90:51:6b:28:b5:
         ec:4d:2e:0f:e5:55:05:bf:c5:d1:90:43:c6:94:1c:3b:44:30:
         ca:5b:65:8b:dd:ab:1b:f2:4e:aa:dd:f6:4c:b8:66:42:fa:cf:
         82:38:5b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:19:27 2026 by rpki-client