This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
File:                     g-I0DvXEpJUutBPSiMKdk3g0IjI.mft (raw, json)
Hash identifier:          lC+iOhJz8dbhk+Lsr52lFG15t+sICnJ5VdJ2pCPdWt8=
Subject key identifier:   B5:B2:C9:AD:61:50:F8:82:09:35:33:68:24:46:0C:80:85:AE:35:2F
Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
Certificate issuer:       /CN=83e2340ef5c4a4952eb413d288c29d9378342232
Certificate serial:       019C4246D7D5261BE6718908F62468C574D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
Manifest number:          11AA
Signing time:             Mon 09 Feb 2026 12:01:04 +0000
Manifest this update:     Mon 09 Feb 2026 12:01:04 +0000
Manifest next update:     Tue 10 Feb 2026 12:01:04 +0000
Files and hashes:         1: N4QCwmv8Sw5ybiIBKm-0kiR2k5M.roa (hash: jAlFMSYTvLNZZPUNEkcMr5EHaq268sFn92XHnKsQ7g4=)
                          2: QQ5S1kn00ChCgstLW3aRVKkKIS4.roa (hash: X5JipwgBz71sKHnS2t/k7iUruR1RHoHrGOPn5Rwy9nI=)
                          3: g-I0DvXEpJUutBPSiMKdk3g0IjI.crl (hash: 6v8VYPnVy3BaTS6nE9NzxbNkKbIv3XVtMgNaL7vvnYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:d7:d5:26:1b:e6:71:89:08:f6:24:68:c5:74:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232
        Validity
            Not Before: Feb  9 12:01:04 2026 GMT
            Not After : Feb 10 12:01:04 2026 GMT
        Subject: CN=b5b2c9ad6150f8820935336824460c8085ae352f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:29:df:bd:e4:03:2f:a4:2d:4e:bd:a2:3c:a1:
                    eb:60:b7:91:be:4b:e3:3d:b3:d9:dd:6b:28:d1:ed:
                    39:62:2b:cd:34:7f:31:f7:e7:82:fc:8e:fc:8e:e5:
                    47:30:c3:b5:02:2f:23:54:d3:d2:d6:f8:86:d5:0c:
                    63:48:76:53:c0:b3:38:bb:80:0a:93:bd:16:55:0f:
                    69:87:f9:cf:67:a9:9a:f2:d5:e8:5d:12:7c:df:ee:
                    b7:22:c8:9d:33:2f:fc:86:fe:ae:74:c4:ef:55:15:
                    71:2d:44:71:6f:74:1e:ed:b3:58:10:0a:d7:83:c9:
                    24:bb:8e:ac:1d:12:c4:5b:a6:ab:5e:50:4e:74:be:
                    1a:c1:c9:d5:f7:3f:1f:31:4d:5e:b1:ba:3d:0c:9b:
                    ff:1d:78:a9:b8:49:9b:2f:38:b5:5f:25:4a:bc:ac:
                    2a:41:07:ae:61:de:c2:ee:63:68:ea:26:ec:3f:be:
                    fd:89:39:18:64:e4:da:28:55:41:7e:31:54:70:02:
                    dc:27:41:64:1a:0f:44:9f:29:cd:b1:6c:e5:5f:e2:
                    7f:25:d5:ee:20:7d:12:69:b4:34:dc:58:2c:ac:4e:
                    cb:2b:33:09:f0:ad:1d:79:21:42:59:5f:0b:e3:5f:
                    84:34:25:e8:50:ba:f4:90:12:4b:a5:6c:85:2e:b5:
                    c9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B2:C9:AD:61:50:F8:82:09:35:33:68:24:46:0C:80:85:AE:35:2F
            X509v3 Authority Key Identifier:
                keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:19:72:c9:d7:5f:38:c3:ba:55:9a:05:99:d7:8e:f1:ca:ba:
         a1:63:a8:df:34:e0:eb:71:67:1f:a9:47:8d:d4:7d:67:b4:3f:
         b3:23:ee:45:58:22:1a:81:9c:28:6d:40:b8:3b:11:f9:5c:e0:
         56:81:f1:9f:c6:b2:df:3b:d7:48:8d:ad:ab:08:04:8b:0b:9e:
         e0:28:9c:dc:d6:95:0f:6a:b9:71:6b:e1:df:bd:d0:4b:16:08:
         87:55:97:5f:d8:7a:9a:b7:8c:73:59:37:f9:4e:a1:40:2a:d6:
         21:7e:b6:c0:9e:d6:88:ea:e7:9d:79:46:c0:7c:a8:01:65:8f:
         6a:1b:3d:a4:5d:fb:52:1d:4f:5c:52:cd:cf:2d:8f:21:ad:54:
         94:d5:84:ae:c6:ef:f1:dd:04:91:66:cf:65:6a:79:4f:1e:69:
         c3:01:2f:36:42:88:8a:01:2d:6a:de:05:a4:29:ff:e3:20:3e:
         be:eb:33:21:1d:1b:ed:52:9a:b0:f1:29:02:c7:b3:33:9d:c1:
         fc:5d:3c:ff:22:b0:8a:c2:8f:be:17:1a:54:90:c0:23:40:39:
         8e:96:e6:3a:f2:41:38:a6:50:6b:a2:ae:d9:de:43:7f:0c:74:
         1d:74:88:ed:a5:3c:7a:20:00:6e:90:a7:f5:f5:41:7a:07:29:
         cc:72:47:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:49 2026 by rpki-client