This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
File:                     GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft (raw, json)
Hash identifier:          izxnu/dmkRxLbmb93g/eKSVdgs8e/1l/3jBL+DZqbiw=
Subject key identifier:   A7:72:73:CB:28:DC:71:2A:42:CD:AC:14:D5:FC:22:7E:08:84:68:FC
Authority key identifier: 19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C
Certificate issuer:       /CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
Certificate serial:       019C43C7588AFA8395B588A35FFD5C00B752
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
Manifest number:          03A4
Signing time:             Mon 09 Feb 2026 19:01:03 +0000
Manifest this update:     Mon 09 Feb 2026 19:01:03 +0000
Manifest next update:     Tue 10 Feb 2026 19:01:03 +0000
Files and hashes:         1: 70J52jJueevnyZxBFCOB5w1OO_0.roa (hash: 7FPRoRZ8DnOq8+EjrJxFEg7wAYyvSOnnlxu+F1i8H/0=)
                          2: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl (hash: u9cBkc5SsuWW8bxEuAw2X9HvBM0NbiWF2pY6xALcSL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:58:8a:fa:83:95:b5:88:a3:5f:fd:5c:00:b7:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
        Validity
            Not Before: Feb  9 19:01:03 2026 GMT
            Not After : Feb 10 19:01:03 2026 GMT
        Subject: CN=a77273cb28dc712a42cdac14d5fc227e088468fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:14:e3:71:80:0f:4c:38:4f:9e:09:02:8c:3e:
                    bb:fa:db:25:b3:b8:d2:82:e6:b7:13:b9:86:26:23:
                    2e:40:4b:53:2a:38:ba:95:7f:e2:db:e5:01:fb:33:
                    38:c2:ed:8a:67:39:0a:e9:ec:a7:ac:11:40:f8:8e:
                    fa:68:78:7f:79:05:84:ac:7a:92:e5:7c:08:5c:36:
                    db:3d:66:3c:f1:d9:3c:52:1e:9a:c1:42:8c:91:d0:
                    ad:b8:23:77:10:16:63:1e:a9:c9:34:26:28:19:1e:
                    63:0e:f5:c6:06:a1:20:0d:67:ff:78:82:a5:93:6d:
                    47:8d:2b:63:f8:f5:7f:cf:6a:52:35:a5:b6:89:66:
                    02:cb:09:8c:29:55:b9:fc:15:30:fa:a8:80:82:bf:
                    44:e2:c6:95:2c:bd:db:e9:1b:a3:fa:aa:76:26:3b:
                    f4:df:cb:4b:7b:8d:bd:24:cf:73:5c:9f:f0:b6:e4:
                    b4:e6:ad:40:d8:c5:8d:55:a8:d2:68:1b:1c:9e:eb:
                    57:71:37:e1:b0:9a:25:22:03:f4:50:96:c7:07:77:
                    79:e4:d6:eb:7e:ba:ef:47:cf:8c:71:18:25:18:4f:
                    c9:36:c8:a0:58:b9:ef:0f:7e:6f:25:32:e4:a1:d8:
                    e1:5f:07:dd:40:f9:c0:e1:e0:bd:67:89:aa:a1:49:
                    63:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:72:73:CB:28:DC:71:2A:42:CD:AC:14:D5:FC:22:7E:08:84:68:FC
            X509v3 Authority Key Identifier:
                keyid:19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:73:b7:4e:18:01:fd:99:2c:a4:d7:29:9a:88:f7:b0:eb:d2:
         eb:63:c8:2e:35:f8:71:5d:f6:84:aa:54:0c:0e:75:46:74:bd:
         37:58:60:12:89:0e:8f:1b:71:b9:87:d8:5b:25:b3:4a:52:58:
         d5:3d:ea:79:6e:48:99:29:af:c7:4c:35:cb:48:a1:e4:ff:f2:
         6d:0e:e8:80:6d:cc:07:cb:66:3c:e7:09:cc:7c:75:0a:2a:77:
         02:ed:d3:b6:60:a7:14:c5:d4:fa:84:cc:14:d5:dc:49:54:c5:
         e3:17:5c:b0:13:75:1e:65:51:b7:0b:38:dd:a3:af:39:14:66:
         b6:ba:8e:b5:5b:fe:2c:19:c5:10:37:ca:11:70:17:38:01:84:
         da:76:4d:a2:f5:76:b8:b3:50:09:70:af:b5:61:b8:93:02:a2:
         d3:c1:5b:04:bd:ea:21:4f:7f:99:a4:a5:ee:22:0a:4c:0a:01:
         c2:45:a5:55:60:1b:ef:1b:0b:08:6b:9d:49:69:f3:56:f5:ff:
         ee:ce:d2:1f:ed:a9:d6:97:1e:05:ba:43:6a:97:08:63:df:3b:
         5d:3e:ea:27:62:f8:85:a5:ca:a2:ec:8f:9f:62:46:1a:fc:97:
         01:b7:30:c5:03:ce:6c:11:f9:8a:69:9a:6f:15:17:54:48:1e:
         32:77:f8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:40 2026 by rpki-client