This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
File:                     Gqq6fafI82yLJ1ynOEkc7cy14xI.mft (raw, json)
Hash identifier:          SSAgvNy8w9YuRXj6JkZBCCJupVbvqLVHTb9o9MBcmCA=
Subject key identifier:   A1:ED:1A:A3:0B:86:83:4F:BC:C1:70:E8:39:48:50:49:3E:47:D9:5D
Authority key identifier: 1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
Certificate issuer:       /CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Certificate serial:       019C20CDACC1DCEB0A9EA8BA9B530B820544
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
Manifest number:          0C0D
Signing time:             Tue 03 Feb 2026 00:01:15 +0000
Manifest this update:     Tue 03 Feb 2026 00:01:15 +0000
Manifest next update:     Wed 04 Feb 2026 00:01:15 +0000
Files and hashes:         1: Gqq6fafI82yLJ1ynOEkc7cy14xI.crl (hash: CSxeuEfhe7dbxRxX/9L1ZMCinHPyQx5So9aVwSvmOao=)
                          2: I5ZIgX6iDK3oX7v-xFIQ7pdLpMo.roa (hash: 6PLpfxFxy8Nk7yedlc7CM9dTIiIgGRRx4WDgW5TY2yA=)
                          3: bs3te7njxydTnYWSP4ChGEGcJkQ.roa (hash: XPxWLnbyz8Llb8yCU48yi3z2ezc69lq+HL61zB6vbh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:20:cd:ac:c1:dc:eb:0a:9e:a8:ba:9b:53:0b:82:05:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
        Validity
            Not Before: Feb  3 00:01:15 2026 GMT
            Not After : Feb  4 00:01:15 2026 GMT
        Subject: CN=a1ed1aa30b86834fbcc170e8394850493e47d95d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b0:cc:7c:12:83:f8:b9:48:ed:13:29:2c:f2:
                    a7:7c:a1:75:16:be:5b:09:7c:e3:6e:3f:cd:5c:3a:
                    eb:14:bd:d7:86:24:87:db:b9:45:55:3d:ba:c1:3f:
                    30:45:02:64:2c:ed:ba:76:8c:ed:5e:29:50:c5:e8:
                    1b:04:99:ee:43:c6:cc:47:59:d1:fc:24:99:b3:d4:
                    9a:2c:21:5f:f5:9f:02:e2:cc:7f:94:39:d4:f8:3c:
                    d3:02:a4:d5:78:7a:ca:01:89:5c:26:2f:8e:0f:05:
                    05:2e:88:91:db:b8:a5:08:40:a3:11:7d:c3:38:da:
                    3f:b5:a4:92:9a:d1:b6:28:d5:5c:83:26:4b:71:a6:
                    34:c1:3b:5e:e2:40:f4:1f:e8:09:09:8c:fe:60:d6:
                    53:da:6b:94:bf:1b:a0:08:10:b4:2d:78:c6:bd:5f:
                    6b:41:e8:cd:8e:b9:27:bc:1c:90:2f:a9:d9:1b:13:
                    b5:b8:22:fe:f5:39:92:55:f8:bf:02:37:57:e9:ad:
                    4a:30:56:82:08:64:32:d0:d9:e6:99:76:0e:db:ac:
                    e4:04:0e:5b:c3:df:91:18:1b:0f:9c:d7:50:0b:e9:
                    3e:3e:f7:0b:4e:30:4a:a9:fa:f7:62:14:3a:81:fc:
                    71:f4:b7:94:7c:d9:e3:7b:85:2d:a4:c0:95:96:87:
                    a4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:ED:1A:A3:0B:86:83:4F:BC:C1:70:E8:39:48:50:49:3E:47:D9:5D
            X509v3 Authority Key Identifier:
                keyid:1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:8d:d4:9a:bb:1b:4e:91:6a:bb:f5:76:d4:45:85:cf:7a:af:
         6a:9d:8d:17:a6:16:e2:17:25:3a:6f:06:92:0c:63:eb:2c:ab:
         6c:ab:9b:0e:b1:19:51:b7:b8:c6:6c:9a:ee:1a:17:59:2c:79:
         23:d1:3d:ea:99:72:94:41:c6:c5:4d:32:19:fc:c5:51:d9:b5:
         81:f8:51:21:91:3e:84:41:cd:f8:67:4a:a9:2b:21:9f:de:f6:
         f5:9d:bd:7d:32:a8:93:f7:ae:cb:e0:39:f0:b4:00:1f:ee:c5:
         f4:1f:ee:8f:09:97:34:b5:ed:f9:6d:0b:6c:e1:fd:61:5d:2f:
         b4:f4:2c:1e:6b:7e:88:d7:d8:d8:fd:b9:f1:fb:70:72:d2:bf:
         ae:61:e7:a8:18:09:c3:b3:2b:8b:f3:c2:b4:bd:95:25:72:08:
         d2:89:03:a9:97:3a:26:b7:5c:2d:26:6a:c6:57:6a:65:a1:43:
         f2:89:9f:15:0c:78:65:ce:67:5e:b0:44:90:0b:30:18:19:bb:
         48:8c:b4:7f:67:31:aa:36:c4:9b:89:fd:12:cb:fe:e6:28:f3:
         86:c5:38:82:0a:56:e1:1d:4b:ef:50:7f:19:68:2a:2f:d3:78:
         cc:39:ff:33:5a:0e:9d:e6:ed:06:14:4a:44:58:9a:f6:57:78:
         d3:37:35:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 08:55:30 2026 by rpki-client