This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
File:                     8GGl-jflzRAVCFJj7AKeGv95ONc.mft (raw, json)
Hash identifier:          nlWSyNfMEG053JRFt2XsRbfR5PaRyfDt1O//e6X6160=
Subject key identifier:   BC:EE:70:67:C4:6E:E5:B0:43:D2:6A:BF:A2:27:6F:46:EE:99:AF:D5
Authority key identifier: F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
Certificate issuer:       /CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Certificate serial:       019C41A2263480E4D8319BE675B304AB1B83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
Manifest number:          07A7
Signing time:             Mon 09 Feb 2026 09:01:11 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:11 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:11 +0000
Files and hashes:         1: 8GGl-jflzRAVCFJj7AKeGv95ONc.crl (hash: zVH7TU40qecgiKNz88WNKDn1DoG+di4C/BxsyFVpXfQ=)
                          2: y_SCanDgj_MM1S_IDo64t6KWr_s.roa (hash: c0z1Y3wg26X0Siv87LHdyGq71I3TjKiIOT/D8Eaa0Ck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:26:34:80:e4:d8:31:9b:e6:75:b3:04:ab:1b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
        Validity
            Not Before: Feb  9 09:01:11 2026 GMT
            Not After : Feb 10 09:01:11 2026 GMT
        Subject: CN=bcee7067c46ee5b043d26abfa2276f46ee99afd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6d:b0:6c:f3:0c:a2:f9:e2:32:c6:67:75:59:
                    c2:f4:17:26:1a:59:6e:56:eb:a8:d8:c5:45:48:29:
                    f5:fd:3e:83:2a:64:2d:f3:dd:a8:13:e2:ad:85:d0:
                    25:68:96:0f:5f:8d:1e:67:3b:02:b0:15:61:60:68:
                    e9:41:45:a3:dd:0b:ba:a2:fd:3a:b4:50:b9:2f:22:
                    52:9e:29:00:89:32:88:3b:d9:e3:41:d8:fd:dc:d7:
                    15:4b:0a:ce:95:9e:21:04:79:2c:e0:af:4c:4c:7d:
                    0d:81:79:bf:61:d1:71:61:b3:52:a4:9e:d4:b6:4f:
                    f8:8c:2a:ce:2d:98:e7:66:82:09:7c:dd:2f:03:5b:
                    72:af:fe:39:af:00:0a:73:55:3f:6a:1a:42:a0:6d:
                    29:f7:51:ac:42:a5:47:c7:55:63:06:e7:0e:b3:85:
                    5c:46:82:42:6c:3b:78:e1:7f:eb:6a:74:ad:52:87:
                    b3:90:ce:98:60:7b:78:4c:69:6e:86:b6:8f:04:7b:
                    84:85:d3:cf:57:21:36:1d:8c:33:fa:bc:22:1a:74:
                    5d:1c:66:63:4f:1a:ff:37:e6:e6:96:77:dc:a7:57:
                    db:af:16:aa:c1:3b:13:d4:43:bf:e3:26:c3:6c:fc:
                    c8:9b:b6:69:f0:b4:f4:57:bd:9d:21:8d:cd:46:86:
                    40:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EE:70:67:C4:6E:E5:B0:43:D2:6A:BF:A2:27:6F:46:EE:99:AF:D5
            X509v3 Authority Key Identifier:
                keyid:F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:71:de:1f:42:3b:01:85:76:da:6e:7c:df:65:84:ac:91:d7:
         6f:d0:ef:0b:7a:ba:9f:13:d8:2f:ce:dc:32:22:4c:c3:1f:06:
         ed:57:49:55:6b:92:ca:da:da:04:42:3e:61:6e:91:78:10:ea:
         f1:37:ac:57:37:a5:42:cc:b7:26:09:ef:d9:66:34:16:80:b8:
         81:0c:f4:b5:54:7e:59:02:34:ca:ad:30:3d:ff:00:80:17:ae:
         15:d9:3b:98:55:85:fd:12:6c:dc:42:37:19:54:e3:29:0a:41:
         4f:fe:32:99:c5:d0:2c:28:24:ca:f5:22:24:c7:fe:0e:6b:69:
         0f:d5:00:97:99:37:9d:98:06:eb:95:f2:e5:4c:2e:29:c5:04:
         1e:54:b1:1c:bb:60:0b:a6:78:d8:b9:9f:d2:a0:84:ac:8d:0e:
         ae:0a:e9:e4:4a:96:b1:b7:fa:2e:91:e2:26:10:f7:1c:9a:15:
         e6:3a:a2:ad:12:f0:63:0a:be:4a:61:ef:04:c0:fb:d7:94:08:
         00:68:f0:88:de:4a:a6:26:ed:a7:e6:67:b6:44:0d:b8:3c:68:
         a6:b2:7d:16:ee:13:fd:da:68:62:41:aa:2e:0b:af:72:d8:be:
         ee:b2:0d:b3:d3:57:18:b8:b1:85:64:66:c3:0f:c8:65:01:34:
         27:7f:0c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:19 2026 by rpki-client