This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
File:                     gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft (raw, json)
Hash identifier:          OhUbiuJ5BEvEYfI/ZLYPyihXuCj15va9tdpS9OklFAQ=
Subject key identifier:   F0:72:7F:B3:E9:B5:01:0B:1F:56:F4:F5:3B:9B:D8:92:A7:CF:0E:B4
Authority key identifier: 83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F
Certificate issuer:       /CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f
Certificate serial:       019C40FD0F1811A70CD3D0AD37CAC7C9EE95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
Manifest number:          1171
Signing time:             Mon 09 Feb 2026 06:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 06:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 06:00:52 +0000
Files and hashes:         1: VlW6EtyMaH795hvnaMozw2BfYQQ.roa (hash: my2rC1+ycBVaR38Z3DLdakYhoWnomEP/kZgHcgk7zUE=)
                          2: gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl (hash: K9dxiUP/hr8xOh2sIZseoapYPgTYiiYfc6+lLo2D3l0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:0f:18:11:a7:0c:d3:d0:ad:37:ca:c7:c9:ee:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f
        Validity
            Not Before: Feb  9 06:00:52 2026 GMT
            Not After : Feb 10 06:00:52 2026 GMT
        Subject: CN=f0727fb3e9b5010b1f56f4f53b9bd892a7cf0eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d8:d9:3a:0c:59:36:08:83:c8:cf:fc:5c:33:
                    5b:59:dd:b5:28:34:34:b3:14:c5:47:69:01:7a:75:
                    4b:58:51:44:dc:27:b3:3b:78:e0:f4:fb:3f:b8:b0:
                    d6:10:0a:44:6b:b3:37:68:56:e9:9b:ea:20:ca:6a:
                    b3:40:9e:39:88:73:33:f2:80:b3:df:47:7d:4c:f5:
                    6b:4c:33:cd:57:2f:da:9c:a1:94:83:03:da:85:90:
                    59:b4:19:53:08:64:93:c5:21:f4:fc:41:3d:0d:91:
                    0a:26:17:4d:84:9b:af:8b:4d:12:f6:15:69:90:e6:
                    61:79:32:d1:47:c6:8b:8a:f1:b0:bc:3d:07:2c:c9:
                    64:ba:20:f3:86:2f:3a:70:fe:d7:93:b1:bf:69:9a:
                    56:6e:b9:f9:b3:4c:06:13:62:a6:2d:bf:11:38:d0:
                    62:7c:12:6b:6e:62:36:3d:11:54:65:ba:ab:a3:1b:
                    99:08:87:25:af:73:00:a6:31:4a:73:db:73:29:09:
                    1f:60:ec:b4:43:b2:ef:63:38:bb:e3:37:ae:1e:5c:
                    9f:23:3b:e0:14:3f:c9:55:d5:f3:6c:35:30:d9:c2:
                    55:e6:c1:86:2c:03:65:59:b4:1d:84:a5:e5:64:94:
                    2e:52:5f:b4:5d:d3:4a:cd:c6:d1:3d:5d:d0:6b:45:
                    ae:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:72:7F:B3:E9:B5:01:0B:1F:56:F4:F5:3B:9B:D8:92:A7:CF:0E:B4
            X509v3 Authority Key Identifier:
                keyid:83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:dc:45:fa:68:67:28:35:7b:2e:cf:b1:11:e2:c9:90:9f:91:
         e1:0e:e0:58:de:20:fe:f1:96:de:9f:fa:4a:41:87:93:a0:b7:
         55:ba:43:a6:96:8c:4e:dd:84:2b:f2:4c:88:11:2b:a3:b4:ba:
         95:15:e1:89:34:b0:86:e3:1e:cf:4e:f2:3b:1e:3e:65:88:73:
         64:99:3b:3b:8c:7e:b9:25:d8:de:48:15:2e:26:65:a5:30:da:
         60:32:81:1c:e4:9c:b6:d4:45:0a:d3:d3:31:1a:c8:20:89:17:
         de:83:a2:fc:37:21:c1:8e:aa:4c:4e:ae:70:6b:c0:63:76:87:
         3b:8a:b0:7c:4c:e6:a8:44:f5:ba:1c:05:7c:22:65:3f:e2:e0:
         75:cf:68:85:ae:87:c2:94:a5:7e:3a:f7:78:6f:08:9d:0f:e1:
         19:2f:c9:8c:47:86:34:87:44:ca:c1:71:ba:6c:9f:e5:c8:3d:
         b5:87:24:c4:1a:40:6c:36:35:99:6a:91:be:6b:25:64:7b:35:
         15:38:f1:68:f9:ab:4d:c7:cb:a0:d8:c5:94:2a:d0:44:12:68:
         8c:25:34:dd:4c:ce:8c:d2:d5:56:81:8f:ed:b9:8c:d9:90:cf:
         1d:83:12:04:19:ef:0f:82:42:ec:31:d5:02:0a:fc:f8:a3:0e:
         e5:2c:4d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:26 2026 by rpki-client