This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
File:                     0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json)
Hash identifier:          pChki+ZeY+vQ3JgQvOwagkqt4UB0jIXeYRlkg1NSQmM=
Subject key identifier:   BE:AC:60:ED:46:49:00:6D:7B:AD:49:13:AA:36:3A:DF:AE:69:1B:BD
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Certificate issuer:       /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial:       019C427E07F3CCB67B39A36DC9B7D53EF7DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
Manifest number:          053F
Signing time:             Mon 09 Feb 2026 13:01:21 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:21 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:21 +0000
Files and hashes:         1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: lToN9/jX4ml7n5/npB4pFAKO8BVVTxF/+CDiT4zrqDU=)
                          2: Gm-t-lh2E0gK3CSrIU-gJkije_Q.roa (hash: Ono4+T4YpgzQm0xFxMzJXZM1mWa8sfDRC5aPTIXlCxg=)
                          3: HOPT3iuIJW2Ca5RKaQZ_7H8DEUg.roa (hash: Z7lWxJ3V5i6LgJFHNccxxl1xQSA36VYmA9LTVT4CQFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:07:f3:cc:b6:7b:39:a3:6d:c9:b7:d5:3e:f7:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
        Validity
            Not Before: Feb  9 13:01:21 2026 GMT
            Not After : Feb 10 13:01:21 2026 GMT
        Subject: CN=beac60ed4649006d7bad4913aa363adfae691bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:33:98:4e:7a:82:08:e9:6c:75:e9:12:cc:f6:
                    58:6a:02:15:f2:5c:7f:47:ad:de:5a:3f:c6:51:50:
                    89:79:18:bd:a0:e6:8b:32:eb:68:b8:47:5a:d4:c8:
                    99:02:db:88:c8:6e:f7:81:28:dd:13:32:84:cf:40:
                    5d:70:4f:5d:64:14:8b:0d:60:82:6e:36:00:c4:df:
                    85:83:68:84:21:e4:b1:3d:b4:d8:59:50:46:f0:08:
                    e2:73:b8:17:96:3a:5a:0c:52:15:4c:d5:13:f2:97:
                    a0:b3:47:0b:b9:e2:fd:9e:83:39:71:d9:4c:e3:11:
                    95:97:78:5c:16:c7:46:19:4b:a0:e5:0b:fd:32:0f:
                    bf:24:d6:a4:e9:5c:0c:f2:07:0c:bf:40:f1:f8:19:
                    48:30:55:9b:5a:fd:fa:1c:ff:bf:b1:8c:9a:2f:d1:
                    cf:90:ff:c7:91:15:3a:dd:50:40:43:ad:e7:b9:a0:
                    0d:ee:54:e3:09:d3:a6:67:5e:8e:d6:aa:3d:b6:11:
                    92:8f:11:5d:e1:e6:68:ee:b8:a8:48:ce:08:7a:ce:
                    b0:43:30:a9:48:08:3a:9a:11:1e:e1:1b:1c:57:97:
                    ca:35:00:40:c8:18:c0:b3:c5:2f:1d:97:4e:01:f2:
                    61:3b:e0:9f:e9:b0:cc:b1:3e:1b:67:9d:37:64:3e:
                    3b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AC:60:ED:46:49:00:6D:7B:AD:49:13:AA:36:3A:DF:AE:69:1B:BD
            X509v3 Authority Key Identifier:
                keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:ff:76:0c:d7:48:d8:22:9f:45:5a:e2:e7:42:b9:be:f5:a6:
         20:13:0a:7a:f8:b6:c9:4f:b9:f9:a5:8f:31:82:a5:7a:9d:fe:
         4d:47:15:04:d5:cf:c9:1b:29:d6:60:eb:25:78:55:df:13:87:
         8f:d9:5f:77:31:f9:d0:fc:14:82:fa:b0:d1:c0:9d:1e:8c:12:
         ac:da:a0:e1:f3:9e:d3:8d:7b:3e:a0:ff:d7:51:5e:f0:73:c7:
         57:74:b8:4f:1b:e2:e7:51:a5:bc:a9:10:17:e4:31:29:57:12:
         d7:ac:9d:f7:e1:ab:29:81:f9:29:f3:05:16:a9:0f:68:1b:99:
         db:e6:78:30:02:5e:73:e9:5b:37:f5:73:f5:a0:d2:6e:cf:ba:
         44:21:5d:37:78:1a:e6:c1:cd:09:25:67:ce:9c:21:a1:0e:6c:
         86:48:ae:d0:27:80:c3:ab:e3:ce:3d:0e:0a:bc:fd:81:af:3f:
         56:94:49:84:9a:23:1a:24:de:83:71:a0:e2:a1:d0:30:b0:24:
         45:0d:33:35:bb:30:85:56:79:d9:c6:e7:36:c7:3a:47:0e:60:
         1a:7f:c2:83:d6:59:9d:1f:3d:c0:6d:73:45:c0:4c:25:7f:59:
         bb:cf:30:1e:54:12:da:a6:03:2b:2d:cc:55:0d:c0:1a:15:4b:
         ed:19:6f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:08 2026 by rpki-client