This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
File:                     g7d8noEHbPS0zv7V7vIQf3UsNjA.mft (raw, json)
Hash identifier:          AEHBCoc4bEp0blfYiBY6ByF4MrLeSUOajWjgac0aNgU=
Subject key identifier:   95:5F:23:39:9E:90:ED:C1:36:4C:17:47:A7:12:C7:AB:C4:E3:1F:8F
Authority key identifier: 83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
Certificate issuer:       /CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Certificate serial:       019C42EB6C43D0145ABDCAC5D0FC5BA9EB7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 15:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:50 +0000
Files and hashes:         1: GHGkwEVylqYxr15hWfLzxHp9MA0.roa (hash: 6MgKNZ/wr6UP8/R75FjFSF75c2qdb4J/GZr8B0Cgj+s=)
                          2: g7d8noEHbPS0zv7V7vIQf3UsNjA.crl (hash: KoAUhvg5uJ1bJFHIe1BaQxi8HUjBJKv4wR6O5Bc2ius=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:6c:43:d0:14:5a:bd:ca:c5:d0:fc:5b:a9:eb:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
        Validity
            Not Before: Feb  9 15:00:50 2026 GMT
            Not After : Feb 10 15:00:50 2026 GMT
        Subject: CN=955f23399e90edc1364c1747a712c7abc4e31f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c7:63:34:a3:ab:97:d2:06:3a:70:74:52:22:
                    9d:d1:bc:6c:63:35:4d:84:f0:ff:22:92:59:1f:8d:
                    a2:5a:d2:05:4e:dd:1c:e8:94:d4:1a:02:9f:d0:f8:
                    ce:22:45:7b:20:7b:a4:67:d3:66:55:64:f4:ee:e2:
                    c7:af:ba:fa:53:21:e6:2f:73:43:cc:64:02:40:69:
                    84:6c:9e:b4:1f:ab:ab:b9:5c:97:d6:87:06:30:cb:
                    71:91:d2:25:ec:45:b1:51:4b:16:8d:7f:4a:c6:69:
                    0e:b9:16:23:a4:ea:35:3e:eb:69:96:a1:c1:63:f8:
                    f7:b3:4e:e2:c2:26:d7:73:aa:bb:a7:60:f2:91:b2:
                    34:35:e6:2a:9e:b9:4d:a1:bd:e9:72:59:ce:78:17:
                    b9:b1:3f:a9:82:ad:75:d6:a0:78:9f:5e:7b:c1:b1:
                    c8:95:7f:2a:04:37:5c:0f:d7:b6:92:d3:e1:64:1d:
                    77:f7:a5:90:a8:d2:5a:5e:bd:ca:97:56:db:7e:d3:
                    23:4a:91:41:33:99:88:25:7b:e7:c1:4c:b4:a5:19:
                    a6:66:04:5c:06:d3:82:e2:0a:cc:78:4c:c1:10:5a:
                    df:30:e0:c3:8e:d5:ca:35:00:43:a6:75:bd:7b:56:
                    27:ff:a3:fe:35:2f:7b:5d:47:7d:40:d3:36:7c:7d:
                    10:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5F:23:39:9E:90:ED:C1:36:4C:17:47:A7:12:C7:AB:C4:E3:1F:8F
            X509v3 Authority Key Identifier:
                keyid:83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:9d:57:d2:04:47:35:f5:ff:ea:7a:8d:c8:ad:d5:4b:7f:d6:
         dc:60:f1:ed:42:32:6c:c2:10:92:78:77:bc:f5:00:85:e7:a2:
         4d:b0:db:d3:bb:c8:37:88:13:cd:30:fd:2c:51:1f:7f:b9:e6:
         d1:69:88:fd:b7:ca:72:ed:06:8e:d5:2d:c4:3e:3c:4e:25:72:
         99:3a:08:89:ea:2f:8a:c3:f6:ff:c0:ab:d1:b7:dd:7e:df:91:
         7f:fb:7e:bd:b0:47:4e:09:d9:23:d2:56:1d:31:9a:97:a0:c2:
         96:50:12:fd:7f:77:4d:83:75:35:e3:43:32:36:e0:64:e3:fe:
         9f:38:88:a3:49:0b:73:d6:59:79:1c:b1:39:7c:9c:93:d2:22:
         fd:be:4b:0f:a9:db:ba:ca:7b:d2:1f:da:6a:48:45:56:e0:8b:
         2c:e9:b4:6d:15:6f:38:c1:c3:73:eb:11:f3:cd:f3:96:8e:2c:
         17:06:9a:38:d7:53:9e:1a:18:26:40:11:b8:35:fa:20:f0:47:
         f9:53:f1:44:8d:2f:9d:5c:12:2e:be:3b:f8:eb:bf:41:ef:6f:
         92:64:88:91:61:c3:fc:42:0e:1e:70:66:60:c9:a4:5b:0a:52:
         bd:d9:74:29:06:23:43:24:eb:bf:9a:dc:2f:d9:09:bf:38:d0:
         98:3e:ae:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:34 2026 by rpki-client