This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
File:                     pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft (raw, json)
Hash identifier:          J+2Fuujt/G6wfYyFe/u5xL1DGuuSju/J7FYBH8IYgls=
Subject key identifier:   6D:CF:6F:0C:AF:1B:41:A2:95:DF:3E:39:2F:F7:29:42:70:47:5F:EB
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Certificate issuer:       /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial:       019BF42C043946C38431ECED15F32B226D5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
Manifest number:          139A
Signing time:             Sun 25 Jan 2026 08:01:23 +0000
Manifest this update:     Sun 25 Jan 2026 08:01:23 +0000
Manifest next update:     Mon 26 Jan 2026 08:01:23 +0000
Files and hashes:         1: fdT3b0j9xYycMnNUDTWzmF8Bb7g.roa (hash: LfSnPghhevtLy1MM7rtPbsVSYd2mOLD+4FPcdvQvTwU=)
                          2: pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl (hash: PVJ6c3CgCBTJ8dYZcTHxJODGUoHyOnXqNcHGrf6fFsM=)
                          3: q8-Ew0dXoh0Fn5drN8sbLkXlETk.roa (hash: PpsW0kQOqLrOT35vh+7+TROLiWEv2SzyjXi3XlCRylY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2c:04:39:46:c3:84:31:ec:ed:15:f3:2b:22:6d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
        Validity
            Not Before: Jan 25 08:01:23 2026 GMT
            Not After : Jan 26 08:01:23 2026 GMT
        Subject: CN=6dcf6f0caf1b41a295df3e392ff7294270475feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b7:07:fe:1d:05:63:e0:2e:2c:1f:20:88:f7:
                    62:d4:16:a0:93:40:5d:34:5e:62:39:6e:ae:93:a6:
                    69:5c:c9:55:55:b0:c0:3a:b5:dc:61:db:67:e7:f2:
                    c2:db:78:cc:e4:43:0e:82:de:be:6a:52:c1:70:d4:
                    2c:ff:b2:7a:73:68:87:f2:34:fc:26:19:5b:e2:90:
                    ae:f9:34:df:2f:fc:b0:bf:97:ac:f5:6e:74:58:e6:
                    17:92:16:95:10:7d:e2:77:f0:a0:69:75:82:bd:5f:
                    7b:34:2c:45:ba:c3:36:e9:5e:d5:34:f7:e9:bc:28:
                    98:c3:ec:bf:dd:3a:fe:60:8b:e6:d5:37:fd:8f:d4:
                    2c:4a:21:43:3d:bd:b2:3c:3f:04:b8:36:cf:36:dc:
                    99:51:43:68:66:4c:9f:a3:3b:97:33:b0:49:de:40:
                    84:92:85:d8:ed:9a:12:d9:9f:0b:a5:a0:03:96:cb:
                    e9:ac:d3:04:6b:97:2a:23:fd:5f:74:ac:aa:12:36:
                    5e:3a:fd:33:1d:29:5d:be:36:22:e2:74:45:d3:77:
                    14:bd:ba:7d:0d:d6:53:99:75:d4:b4:29:f5:cb:df:
                    07:e0:41:04:37:b2:7f:8e:f4:a8:78:74:a8:e8:02:
                    a7:88:75:70:e5:f7:44:33:80:9f:38:91:3b:f3:17:
                    36:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CF:6F:0C:AF:1B:41:A2:95:DF:3E:39:2F:F7:29:42:70:47:5F:EB
            X509v3 Authority Key Identifier:
                keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ab:2b:e8:46:ef:ae:a9:de:d3:88:72:19:f8:b0:bb:53:73:
         58:77:aa:4e:e9:c8:45:70:bf:28:43:8c:d0:00:a1:22:8b:b1:
         36:05:53:d3:3c:d3:68:bb:4c:8f:28:0e:e1:c5:d0:64:c6:b1:
         66:df:0f:1b:14:24:00:e5:d4:4a:a7:e5:dc:c3:0e:68:28:90:
         35:85:4f:57:4e:3b:96:51:b5:4e:a5:74:95:09:a5:57:8c:00:
         3d:b7:d0:e0:ab:cd:03:27:c7:62:f3:80:e3:cd:bb:a1:a2:72:
         c3:0a:ec:d6:75:e3:45:5e:d0:81:ee:56:60:0e:ee:c5:70:c7:
         a9:6f:95:cc:89:02:01:b1:4a:b4:43:3d:f1:fb:36:c0:59:18:
         9e:e5:2b:7a:7e:ea:da:d7:6a:24:8f:19:0d:9e:7d:1e:1b:31:
         5b:ad:45:14:1d:6c:55:6f:40:3a:47:77:4b:35:0a:a4:a2:4b:
         a3:bc:38:ae:34:f6:11:70:8b:65:3e:2d:0c:16:4d:04:55:1e:
         4e:73:68:e1:05:15:aa:70:7f:37:84:58:74:37:9d:2a:0e:01:
         3e:94:f4:e4:d5:e7:f4:fb:cf:14:8e:a5:30:05:16:64:ee:ef:
         37:96:d1:a9:ec:51:1a:b9:e7:2a:a1:e4:46:16:17:59:ab:fd:
         31:30:be:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:49:05 2026 by rpki-client