This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
File:                     G2pafunSGn3UW7v_9DGzZN6gta4.mft (raw, json)
Hash identifier:          aY3Trzzx1zmAjn4LcLWtpoGoHL6lu/JxEUBrvVgV2ug=
Subject key identifier:   8F:43:A0:3C:9A:40:0F:99:39:83:F2:C5:1B:03:71:D2:90:EF:FD:0C
Authority key identifier: 1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE
Certificate issuer:       /CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae
Certificate serial:       019C42EB5C78839C3616F55D64094A0B5EA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
Manifest number:          0A3C
Signing time:             Mon 09 Feb 2026 15:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:46 +0000
Files and hashes:         1: G2pafunSGn3UW7v_9DGzZN6gta4.crl (hash: EYR3vRFPq++3vQNmsdSy/9OrQwCQhSDa+dJkaseltcM=)
                          2: tjiTHEP-kK7YvaF4jOv_5AENFR8.roa (hash: +t1GaH9nJ8B0HL8q2iIaAV18s/F2KC1qzK08FxWPKP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:5c:78:83:9c:36:16:f5:5d:64:09:4a:0b:5e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae
        Validity
            Not Before: Feb  9 15:00:46 2026 GMT
            Not After : Feb 10 15:00:46 2026 GMT
        Subject: CN=8f43a03c9a400f993983f2c51b0371d290effd0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:f0:85:d8:c6:59:1d:5f:60:44:8f:5a:19:
                    00:35:46:f3:0b:06:33:4c:47:49:94:28:f3:ab:b7:
                    56:50:8d:11:28:7f:9f:9d:50:f6:f9:d8:01:ed:84:
                    66:dc:03:92:58:f7:43:ea:2e:32:6e:7a:b0:21:df:
                    5c:94:54:e3:5a:aa:cf:1c:19:04:43:49:d1:63:f3:
                    91:50:a1:b0:fc:df:f7:c6:89:1e:70:95:71:0f:c5:
                    01:58:72:7b:8a:bf:ff:60:38:b0:0e:11:99:80:e6:
                    0d:09:e6:a8:90:2a:23:1c:69:0b:e9:9d:d7:f8:fb:
                    f3:cb:34:39:36:e8:0e:39:03:9d:07:90:1f:76:af:
                    ec:d6:d2:cc:1f:0c:24:bd:96:7f:74:c9:8e:93:f5:
                    e1:72:83:f9:ef:77:ac:c9:08:2b:7b:c1:1d:f6:67:
                    52:f0:4e:8b:32:be:90:ea:1c:e3:ee:87:06:ff:70:
                    df:b9:bb:03:a3:af:86:ac:b1:ec:f5:c6:e6:46:5d:
                    b4:a3:05:5f:b0:0c:91:44:47:0e:b8:04:4d:86:cc:
                    8e:dc:12:a0:43:f6:af:48:e0:57:cb:f9:86:fd:9b:
                    69:3d:25:2a:ed:d5:04:f7:50:e1:19:08:39:ab:f1:
                    59:49:cd:95:79:3d:7d:ea:9a:8b:39:1e:4f:b4:de:
                    c7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:43:A0:3C:9A:40:0F:99:39:83:F2:C5:1B:03:71:D2:90:EF:FD:0C
            X509v3 Authority Key Identifier:
                keyid:1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:c7:4d:87:04:b7:3a:74:64:c9:a5:ec:6a:07:17:6b:af:69:
         a2:79:3a:98:7f:6f:07:e2:a9:de:a9:2e:17:37:40:c6:66:97:
         81:7a:7b:9b:eb:9c:02:f0:ff:c6:32:77:ba:74:b4:34:a6:c6:
         8b:48:47:7a:4c:41:0d:3f:f5:ec:72:1d:4a:ca:26:fb:45:a5:
         fd:3f:4c:8b:f6:7d:c4:27:16:92:12:d0:e5:73:20:ba:a6:1a:
         8c:57:9b:20:2d:31:b3:21:06:74:db:31:c8:e6:c1:b6:b9:06:
         d3:34:f8:e3:7e:e5:16:ff:aa:b9:7a:ac:0f:da:1e:3e:e3:7e:
         16:56:fb:12:55:8d:d2:f5:c0:35:35:53:54:31:26:f3:86:93:
         1c:30:08:52:9a:07:bc:6b:1f:de:35:74:6c:3d:56:65:74:ec:
         81:e5:14:df:4c:c5:40:b5:98:22:0c:11:e0:fc:d0:47:bc:52:
         ef:c4:45:65:a7:3c:cb:ee:c3:b3:a6:e4:94:70:ae:e2:7d:9a:
         c1:b0:71:fb:2f:aa:0c:0f:0a:d1:8e:40:84:ba:79:a9:35:91:
         f5:60:b1:75:f0:8e:ca:5e:c3:82:44:81:b7:53:0c:dd:ec:e0:
         90:25:3a:de:0b:b0:c5:ab:46:9a:33:26:67:76:12:31:e0:ab:
         58:4a:3b:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC61x4g5w2FvVdZAlKC16mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNmE1YTdlZTlkMjFhN2RkNDViYmJmZmY0MzFiMzY0ZGVh
MGI1YWUwHhcNMjYwMjA5MTUwMDQ2WhcNMjYwMjEwMTUwMDQ2WjAzMTEwLwYDVQQD
Eyg4ZjQzYTAzYzlhNDAwZjk5Mzk4M2YyYzUxYjAzNzFkMjkwZWZmZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEnwhdjGWR1fYESPWhkANUbzCwYz
TEdJlCjzq7dWUI0RKH+fnVD2+dgB7YRm3AOSWPdD6i4ybnqwId9clFTjWqrPHBkE
Q0nRY/ORUKGw/N/3xokecJVxD8UBWHJ7ir//YDiwDhGZgOYNCeaokCojHGkL6Z3X
+PvzyzQ5NugOOQOdB5Afdq/s1tLMHwwkvZZ/dMmOk/XhcoP573esyQgre8Ed9mdS
8E6LMr6Q6hzj7ocG/3DfubsDo6+GrLHs9cbmRl20owVfsAyRREcOuARNhsyO3BKg
Q/avSOBXy/mG/ZtpPSUq7dUE91DhGQg5q/FZSc2VeT196pqLOR5PtN7H/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9DoDyaQA+ZOYPyxRsDcdKQ7/0MMB8GA1UdIwQY
MBaAFBtqWn7p0hp91Fu7//Qxs2TeoLWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJwYWZ1blNHbjNVVzd2XzlER3paTjZndGE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kOGIwYzMtM2Y3MC00M2RiLTg1YTQt
NWJlMTIwMjM2N2U5LzEvRzJwYWZ1blNHbjNVVzd2XzlER3paTjZndGE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kOGIwYzMtM2Y3MC00M2RiLTg1YTQtNWJlMTIwMjM2N2U5
LzEvRzJwYWZ1blNHbjNVVzd2XzlER3paTjZndGE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAycdNhwS3
OnRkyaXsagcXa69ponk6mH9vB+Kp3qkuFzdAxmaXgXp7m+ucAvD/xjJ3unS0NKbG
i0hHekxBDT/17HIdSsom+0Wl/T9Mi/Z9xCcWkhLQ5XMguqYajFebIC0xsyEGdNsx
yObBtrkG0zT4437lFv+quXqsD9oePuN+Flb7ElWN0vXANTVTVDEm84aTHDAIUpoH
vGsf3jV0bD1WZXTsgeUU30zFQLWYIgwR4PzQR7xS78RFZac8y+7Ds6bklHCu4n2a
wbBx+y+qDA8K0Y5AhLp5qTWR9WCxdfCOyl7DgkSBt1MM3ezgkCU63guwxatGmjMm
Z3YSMeCrWEo7yA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:41 2026 by rpki-client