This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
File:                     gwn4FzfW8X58GtWISa_3HFAGTwQ.mft (raw, json)
Hash identifier:          NelrS2KASCfSfweMw2ciNoMY3fQ+HqBNt+aD6niEo3o=
Subject key identifier:   C0:ED:89:CB:AC:4D:B6:6D:85:A2:25:99:27:05:95:3A:49:6C:95:3B
Authority key identifier: 83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04
Certificate issuer:       /CN=8309f81737d6f17e7c1ad58849aff71c50064f04
Certificate serial:       019C42466AE0AEAEF7379AE3B13F1FBE643E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
Manifest number:          15F7
Signing time:             Mon 09 Feb 2026 12:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:36 +0000
Files and hashes:         1: b5oUI_QaX4CIrD9gVfpSglG-l0g.roa (hash: yb9qoXzX3+CuYySvgkHy2fr0k4HAjW35z3hNaIhuEm8=)
                          2: gwn4FzfW8X58GtWISa_3HFAGTwQ.crl (hash: v4Fy7NZavNfiv9UFdqS/8LLT+hsu2rZbLdlCeOsyZK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:6a:e0:ae:ae:f7:37:9a:e3:b1:3f:1f:be:64:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8309f81737d6f17e7c1ad58849aff71c50064f04
        Validity
            Not Before: Feb  9 12:00:36 2026 GMT
            Not After : Feb 10 12:00:36 2026 GMT
        Subject: CN=c0ed89cbac4db66d85a225992705953a496c953b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:41:7c:30:bc:1c:bb:9c:79:be:f6:d0:81:ef:
                    7f:94:9d:d2:db:1a:61:c7:b0:08:3f:b5:82:de:52:
                    88:b6:dc:76:d2:2a:f3:a1:f8:5b:b8:54:df:25:b0:
                    4e:06:ce:a8:5e:6c:15:27:c8:51:80:cd:0f:6f:a2:
                    91:52:85:18:19:ca:a5:ed:9f:53:7a:dd:40:ab:f2:
                    7d:72:b3:cc:01:2a:a1:a5:12:a0:96:8b:04:93:0e:
                    2c:ab:27:35:8d:6b:4a:53:27:78:39:b0:48:83:f2:
                    8d:19:c2:38:cc:55:4d:44:4a:d6:62:97:c9:4c:30:
                    49:16:ff:2d:ab:78:41:b1:da:e6:a0:a0:17:aa:80:
                    00:5a:c6:ad:db:13:55:68:15:43:aa:ea:b3:27:00:
                    30:d3:14:26:68:c8:53:9f:80:16:4e:0f:11:d5:de:
                    e5:ad:b0:31:f6:5d:71:dc:fa:52:65:39:4f:d9:c1:
                    91:b9:4b:cb:32:ea:b1:f6:a6:32:fb:ee:c4:9b:c6:
                    33:62:59:a9:95:95:99:51:97:c3:fb:0e:a9:a2:73:
                    30:3f:43:4a:d3:45:50:e4:74:ac:d3:b9:20:71:df:
                    19:75:9c:44:87:5f:95:54:69:97:14:2b:4e:55:d5:
                    0f:f7:73:de:ec:90:55:c9:f8:ba:34:3b:25:ed:6c:
                    b7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:ED:89:CB:AC:4D:B6:6D:85:A2:25:99:27:05:95:3A:49:6C:95:3B
            X509v3 Authority Key Identifier:
                keyid:83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:80:42:85:23:53:c9:88:8e:6d:dc:3b:44:3f:c8:2a:b9:04:
         40:82:cd:17:25:b4:f5:70:3d:c3:5d:5e:89:6a:44:25:1b:09:
         c6:90:43:6a:4f:8b:8f:2d:b5:4a:b3:b3:df:72:4f:74:6d:da:
         05:57:0c:d6:59:bf:62:52:5e:93:5b:82:f4:74:95:5f:69:8a:
         a9:a1:31:64:50:0c:3e:27:4d:eb:7f:99:fe:f4:ca:03:2f:78:
         dd:c7:da:3b:83:2e:89:73:b7:d8:db:67:cb:cd:e4:4f:38:fc:
         97:8a:67:da:28:40:97:a2:4e:35:79:d6:9f:04:dc:7d:6e:06:
         de:f2:05:d6:f9:48:07:84:e7:75:4b:48:38:d7:a6:25:5d:97:
         de:43:93:d3:4e:0c:56:a0:b7:6c:69:66:1c:33:dc:0e:52:77:
         b1:50:4d:53:2b:f5:03:e0:3f:6e:55:1b:3e:c6:01:d6:88:f7:
         c0:7d:3a:7a:1d:78:c8:2d:fe:3a:7e:38:89:52:b2:9f:81:97:
         b2:94:bf:d9:7f:04:c6:30:da:57:3e:28:90:69:a9:e1:0f:5d:
         41:0b:10:00:67:0f:88:ea:8a:83:13:bc:e5:47:6a:b3:0e:01:
         c4:3a:37:6b:73:1d:66:dd:3f:98:0a:3a:e3:7b:be:03:a3:52:
         9c:9b:b3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:30 2026 by rpki-client