This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
File:                     GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft (raw, json)
Hash identifier:          hLUei7+ONbU2+OZHlh6rmUuvfQ00ueLRFJr0KE+Amp8=
Subject key identifier:   A6:BD:5B:27:23:E2:D9:86:B7:A3:E9:4E:45:38:3C:6F:3C:8B:71:06
Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
Certificate issuer:       /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Certificate serial:       019C43C6E0E30B841F38958B89C42D450A54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
Manifest number:          0539
Signing time:             Mon 09 Feb 2026 19:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:33 +0000
Files and hashes:         1: GHSDF2JPEye0O4AWUxBCYSEkaAI.roa (hash: 0lOTIXpj+IiF+Cvw2ZPIma45JyDvj6gDTakt2B0h2bc=)
                          2: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl (hash: lwmRNoVX5bIv2PPyKZqxNxpkWjy4HwBnVdvPZQAzfBY=)
                          3: zTqwVEZEkJ2o5vXaLHz2zvS-PCU.roa (hash: 3m9rp/jqInhSmfaVC+tbC+fcAxs/SBMNeqBaNmCor5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:e0:e3:0b:84:1f:38:95:8b:89:c4:2d:45:0a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
        Validity
            Not Before: Feb  9 19:00:33 2026 GMT
            Not After : Feb 10 19:00:33 2026 GMT
        Subject: CN=a6bd5b2723e2d986b7a3e94e45383c6f3c8b7106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:dd:9a:9e:38:54:1d:ee:cf:95:98:a4:44:a3:
                    a2:1c:62:d6:d7:24:a8:fe:f5:33:51:21:28:6d:1a:
                    14:5f:fe:d3:37:53:db:fb:dd:25:c4:3f:f4:93:62:
                    8c:ed:96:46:4f:b4:93:5d:b2:13:e1:a3:ec:1a:55:
                    26:bd:fe:05:01:56:66:91:a1:55:83:35:eb:f1:ff:
                    ec:45:9f:41:14:26:66:f1:07:f8:95:35:7d:ef:d1:
                    c1:62:8a:de:f8:a0:a0:eb:52:71:7d:83:f9:cf:a7:
                    61:df:8b:24:27:a1:23:c9:da:3b:a4:46:9d:80:c4:
                    50:0b:0c:06:54:3c:bf:05:b8:84:ca:c0:96:87:ad:
                    94:8a:57:62:7e:c1:24:64:93:2c:0e:a8:d4:c2:e3:
                    06:41:49:8a:9b:9c:ee:63:22:b3:52:30:24:8d:fa:
                    5a:e2:bb:e3:34:63:c6:87:d8:c8:ac:47:2d:38:98:
                    cc:d9:ea:34:e6:10:5f:10:1d:6d:99:54:44:3e:38:
                    04:a5:be:40:02:20:0f:8f:72:ce:69:cd:1a:cb:e7:
                    0f:88:fd:91:a2:a1:3c:4f:42:82:1e:b7:30:8a:42:
                    ea:07:43:36:8c:32:8b:c8:8a:fc:e1:e9:a2:e2:79:
                    8e:5f:83:81:c7:12:b3:72:47:00:70:43:55:52:7c:
                    5d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BD:5B:27:23:E2:D9:86:B7:A3:E9:4E:45:38:3C:6F:3C:8B:71:06
            X509v3 Authority Key Identifier:
                keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:bb:9d:24:5b:fe:72:73:08:5c:14:e4:35:9a:70:be:ba:1f:
         dc:a0:1a:64:54:6b:40:4c:fa:1b:8b:f1:c5:3e:d7:23:92:36:
         f7:a5:93:36:ae:75:a4:a3:80:2c:7f:94:4c:b2:45:aa:e3:9e:
         70:43:25:b9:bd:e6:a0:7a:f2:bd:21:a5:a4:7a:38:51:dc:c2:
         a0:66:df:5d:ad:70:82:27:c9:50:7a:b3:01:6d:17:1b:4a:22:
         75:16:42:84:12:7f:da:f5:d3:8d:27:b9:61:da:fd:18:bb:e6:
         16:aa:b5:e6:73:e4:42:21:0f:d2:f5:7a:f4:81:99:8a:fa:79:
         c2:04:a2:e6:c7:a4:bc:df:31:27:2a:18:51:a9:52:9f:5e:e6:
         0d:b5:cc:9c:38:35:e7:72:9f:b9:7c:84:0e:a6:77:5b:d9:36:
         28:bf:9f:af:93:b5:2b:ba:4b:60:2b:f3:6d:1c:5b:6b:06:1d:
         d8:88:a5:dc:7e:90:4c:03:92:35:0b:ee:21:4c:20:cd:78:bf:
         63:59:23:1f:8f:56:1b:ba:d3:6c:de:b1:fa:e7:93:54:4a:a6:
         b8:19:96:e2:4f:c0:a1:8a:23:c5:ce:c6:ee:e0:13:25:fa:70:
         1d:87:b0:08:4c:fe:05:b2:7e:54:75:53:c7:30:63:7c:6a:ce:
         3f:06:0f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:10 2026 by rpki-client