This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
File:                     gNZ6hECc7boCLusDW9itYg1oPqc.mft (raw, json)
Hash identifier:          LTcX7YoyMjCfjQ1cYCqUJAIa+RYHsSM7qNZKzVRLm1U=
Subject key identifier:   18:6A:40:91:83:88:28:5B:31:67:00:10:97:41:F0:FD:DE:51:B4:2D
Authority key identifier: 80:D6:7A:84:40:9C:ED:BA:02:2E:EB:03:5B:D8:AD:62:0D:68:3E:A7
Certificate issuer:       /CN=80d67a84409cedba022eeb035bd8ad620d683ea7
Certificate serial:       019C4434C51F43471089C1AF7339EDB84A5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
Manifest number:          17A6
Signing time:             Mon 09 Feb 2026 21:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:34 +0000
Files and hashes:         1: _Yb7IW78SKZuD4V1IkJEZwe6uu8.roa (hash: 14e7sG8qVox+8SMefeXpeF7AFL8AbwbjJc3kCO+AHdc=)
                          2: gNZ6hECc7boCLusDW9itYg1oPqc.crl (hash: iOwiyq4Dt6SmKRj18jAH7EOH1Flg1T6avhQrwWP1b24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:c5:1f:43:47:10:89:c1:af:73:39:ed:b8:4a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80d67a84409cedba022eeb035bd8ad620d683ea7
        Validity
            Not Before: Feb  9 21:00:34 2026 GMT
            Not After : Feb 10 21:00:34 2026 GMT
        Subject: CN=186a40918388285b316700109741f0fdde51b42d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:2f:f8:2e:5a:37:a9:78:e4:f7:ad:8d:68:af:
                    ef:72:3a:71:11:b5:24:44:77:ea:90:a2:c6:6c:f7:
                    24:11:3b:8d:07:8c:d5:af:35:d1:03:98:6c:66:a1:
                    c0:ab:3d:13:d3:92:82:34:0f:80:59:12:7e:fd:01:
                    15:25:2e:76:0c:d0:ff:7e:e5:4b:e2:6d:70:03:45:
                    df:22:18:5b:e8:62:18:30:f6:51:b3:ec:ed:ae:d0:
                    3c:de:43:30:ba:e9:cd:96:1e:86:1e:71:38:05:d2:
                    38:c2:59:7d:37:e0:71:c7:ad:f6:20:49:55:ec:16:
                    1e:a8:2a:f3:c5:c5:2a:5e:cb:52:20:87:88:75:dc:
                    7d:8b:e5:28:0b:6e:e1:f7:12:3a:ef:58:3d:fb:04:
                    55:dc:98:bf:16:9d:8d:be:95:60:44:eb:45:ff:f2:
                    1e:8f:6b:a3:f4:6d:e8:10:41:d2:ab:48:66:b0:66:
                    b2:0f:d1:59:1d:92:58:78:86:a5:e6:7c:da:f7:40:
                    69:a8:ee:23:53:5b:a3:e7:66:99:3b:74:b2:d7:d9:
                    21:a8:92:e6:4b:e5:df:df:65:f2:7d:1f:f0:32:31:
                    8e:97:a7:aa:7d:00:53:44:70:e8:f7:92:95:7e:e7:
                    94:f2:79:1b:48:c1:78:a9:6e:c4:91:87:83:3e:c8:
                    ae:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6A:40:91:83:88:28:5B:31:67:00:10:97:41:F0:FD:DE:51:B4:2D
            X509v3 Authority Key Identifier:
                keyid:80:D6:7A:84:40:9C:ED:BA:02:2E:EB:03:5B:D8:AD:62:0D:68:3E:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:62:07:5b:91:46:fb:eb:fb:03:55:0f:f8:8b:46:d4:01:11:
         d2:3c:94:28:78:70:ae:a0:ad:a2:06:f0:29:1e:98:e2:e0:55:
         aa:b5:15:7e:9c:a9:34:8b:00:c8:e5:0d:1a:ff:45:e3:d1:db:
         05:13:8f:63:2f:54:ec:4d:4b:cb:b9:bb:f9:a6:97:16:c7:4b:
         b1:1f:ab:99:1c:4c:90:7d:75:af:a2:05:48:72:9d:99:39:e3:
         af:58:94:d7:95:fa:b9:54:99:79:19:42:af:04:80:84:a5:84:
         4c:4e:3e:15:06:7e:c4:46:7f:7d:f2:73:78:a5:1d:5b:c7:61:
         f1:64:24:d5:eb:81:4b:d0:7c:db:e9:a8:6d:9a:3d:85:b1:4a:
         c0:2e:30:8f:5d:1c:9c:7f:80:b6:6a:0e:8f:2f:18:75:eb:dd:
         01:69:8b:ad:ed:a1:d4:f8:ea:f1:03:ce:ad:7c:d7:1e:5c:7c:
         d8:b1:08:bb:f5:4d:fb:30:ce:db:28:6e:c1:42:88:4e:dc:a3:
         f5:60:ea:9d:5b:a0:d2:74:a8:d5:ab:56:98:25:5b:35:b8:22:
         2b:1e:c2:80:e6:fb:2f:7c:8c:49:b6:b3:08:e7:f4:7c:c8:c8:
         1a:7f:6b:5a:a0:71:70:8b:62:02:83:75:2b:bb:11:60:60:38:
         55:38:cf:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:40:52 2026 by rpki-client