This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
File:                     PCH6xeiV5bfOZv4In_0LL2FVDSE.mft (raw, json)
Hash identifier:          ID7JUDFTpB58WU2TS4E3TPZXx0Z+OS8hjec0p6toUCE=
Subject key identifier:   C7:CA:FE:28:E5:DE:6E:1E:5C:1B:93:D8:87:8A:A0:ED:FD:B5:36:85
Authority key identifier: 3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
Certificate issuer:       /CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Certificate serial:       019C427D763E5926A48FCC3FC0E826101CDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 13:00:44 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:44 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:44 +0000
Files and hashes:         1: 9ue2agzfAIo35GmUAoRIfCasK3U.roa (hash: yFoHWICrkhwEa2l89NQ/jxElFE5J+GHyL3e0jPdDNQw=)
                          2: PCH6xeiV5bfOZv4In_0LL2FVDSE.crl (hash: fFxa3BjVFJYncEw978QTIdyww+9A2ZlnvyW76bW3E5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:76:3e:59:26:a4:8f:cc:3f:c0:e8:26:10:1c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
        Validity
            Not Before: Feb  9 13:00:44 2026 GMT
            Not After : Feb 10 13:00:44 2026 GMT
        Subject: CN=c7cafe28e5de6e1e5c1b93d8878aa0edfdb53685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b7:51:f6:b8:ea:86:20:34:22:cf:4e:c0:87:
                    5f:c5:79:93:04:66:de:48:43:5a:27:e5:fc:57:bf:
                    07:2a:6e:44:54:81:d0:ca:52:45:bd:69:96:4b:14:
                    60:50:50:9c:e8:d0:c8:a4:cc:94:6e:b1:22:4d:d9:
                    6b:eb:68:4c:b4:0d:f8:38:80:3f:2f:3b:7b:36:e2:
                    85:1f:1f:25:49:7f:22:11:46:27:cc:34:8e:59:61:
                    77:72:d4:93:5f:4a:5c:03:9f:78:3f:ee:ca:af:65:
                    b2:17:02:80:bd:c3:02:b9:cc:df:fb:1d:ce:cb:05:
                    73:e4:a2:60:41:0f:a1:38:ca:3f:b3:be:a9:bc:4f:
                    bc:f9:67:5a:2a:4d:1b:6c:80:ff:f0:f8:e0:f4:47:
                    5e:2f:46:c6:19:6a:48:aa:18:4e:0d:20:ea:a0:80:
                    83:a2:1a:a0:10:0c:fb:3c:e4:a7:f7:16:0e:9e:87:
                    c7:e5:34:cc:7d:92:30:a7:18:43:9d:ae:3d:de:1e:
                    3d:28:32:70:60:32:f1:ac:b9:3f:4b:ef:9d:ee:d2:
                    31:14:3a:3c:d2:15:68:50:2f:92:43:1b:24:9a:00:
                    e7:46:b1:aa:b4:0f:13:11:58:3f:98:c6:57:79:1e:
                    03:87:02:e0:4c:bc:81:1e:23:51:b5:2b:ae:f6:ab:
                    65:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CA:FE:28:E5:DE:6E:1E:5C:1B:93:D8:87:8A:A0:ED:FD:B5:36:85
            X509v3 Authority Key Identifier:
                keyid:3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:a5:b5:5e:9b:2d:fd:da:bd:ab:d1:a2:cb:bb:aa:30:ad:00:
         5d:5d:1d:fd:1c:30:b0:b7:68:53:5e:67:bb:99:cc:96:56:05:
         7c:31:f4:8b:90:aa:f5:bf:a6:76:69:0c:d7:89:81:e7:13:3b:
         d9:fb:5e:3d:fa:5a:9c:b4:c1:9d:e7:d1:77:3a:45:6a:6c:64:
         7b:4a:93:0b:f9:0d:ba:76:16:eb:37:a5:ef:34:e3:01:f7:a2:
         e5:53:4f:30:72:0a:e5:c1:0d:24:c5:42:5b:89:c4:ff:64:4b:
         c2:5d:cb:ad:16:15:3e:32:2f:8d:da:b9:c7:28:0b:1d:62:da:
         f1:3f:56:43:8c:db:15:36:b3:93:d2:ea:56:72:e5:81:01:82:
         a6:aa:db:b0:7e:b0:9f:d1:95:79:56:a0:c5:90:e0:1b:7c:1e:
         98:8b:6c:b8:c3:3b:a3:4b:03:44:a5:83:1a:d6:fb:42:9d:0a:
         01:a6:16:0f:e3:0d:32:51:2e:3b:c0:20:ef:87:c9:e9:40:9f:
         1a:77:06:00:f2:74:b2:30:86:71:88:7b:a2:25:29:01:8f:fa:
         3f:bf:4c:c2:7e:bd:a2:c7:97:4c:9f:98:d4:41:83:b3:24:16:
         fb:43:25:88:31:18:3f:b2:3b:26:47:9c:d6:e9:e5:a8:e9:a9:
         b5:1d:18:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:45 2026 by rpki-client