This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
File:                     gz4OSAQRuciOkW3vkPw6kBAmOUo.mft (raw, json)
Hash identifier:          omn3aoFT+WsV+qibHSK9pDlAQ939UXePx5uv/3sV06o=
Subject key identifier:   20:5D:26:1B:58:2A:35:B8:D2:79:6D:C1:62:C4:11:F6:98:28:D0:3A
Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
Certificate issuer:       /CN=833e0e480411b9c88e916def90fc3a901026394a
Certificate serial:       019C43C6D08C281386D9DC2ED2756CDE2728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 19:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:28 +0000
Files and hashes:         1: 5gSf1-VDKOYVBkqkgnQrEMypzTg.roa (hash: z6ZcdBsDa7Hg3rkYAPzvBooMd+rknZS/02yCZUcFlGI=)
                          2: CmZeg0QZClyASLrlfEFcbEqzniE.roa (hash: hxAFIZw4RCC07UgvikV6JR0Y6MOvZuFKg3XrUhhJ604=)
                          3: Ih_bDVPWPg40meMVUQH52Q_SiqE.roa (hash: WQr9CRYz6MHyRZSZGa17nV7pgtE8mhzsKExO1LfYlFY=)
                          4: gz4OSAQRuciOkW3vkPw6kBAmOUo.crl (hash: vTuyzuoIALz4QEOUrGuB4Xizd6p2qwj7Wj4Jp0n5ZLM=)
                          5: yhvjZUqxn_FUY-Mlri4ogZjyLBM.roa (hash: L0ywjyagm2bruEE3Ewodq3fXEbUNJSk+4fnvkwsHn6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:d0:8c:28:13:86:d9:dc:2e:d2:75:6c:de:27:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a
        Validity
            Not Before: Feb  9 19:00:28 2026 GMT
            Not After : Feb 10 19:00:28 2026 GMT
        Subject: CN=205d261b582a35b8d2796dc162c411f69828d03a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ad:58:77:fb:85:ed:f0:54:04:44:79:51:60:
                    a3:cf:5c:2b:7a:f5:e0:a5:44:10:f6:3f:10:eb:80:
                    b2:ee:d8:68:7d:95:72:a2:36:23:a5:45:87:cc:31:
                    fd:2f:da:37:fc:4b:ea:f8:84:8c:ce:3b:19:e4:6f:
                    c4:d9:7b:e3:16:b1:60:db:0d:74:75:97:83:64:5e:
                    62:a2:bb:d8:7e:5f:78:ad:6f:9a:9d:a6:e2:c2:5d:
                    e5:1d:cc:62:26:30:c6:5d:62:b5:6a:df:c9:a6:1b:
                    be:7d:9b:1b:79:27:bf:e3:84:f5:13:84:9d:7a:f0:
                    71:43:ad:34:67:f6:ec:0f:d2:3a:f2:7e:c5:aa:54:
                    91:58:f0:6d:86:65:f4:01:4c:f5:1d:bc:9f:c5:de:
                    2a:93:1a:e7:d5:58:a7:74:4d:a6:e3:d4:c1:df:e4:
                    0d:d8:a3:c7:58:4f:a3:c6:c4:24:e2:33:01:7e:49:
                    f0:4a:9c:e0:ad:fd:87:48:81:82:5a:7f:29:6a:57:
                    f9:ee:4a:05:a7:b2:9e:71:3c:1c:98:c4:c1:34:2d:
                    df:3f:3a:b8:b3:02:7f:b8:a7:38:e4:fa:09:0e:35:
                    2e:35:62:95:19:3e:24:df:e2:4e:26:0e:0e:94:3c:
                    db:5a:bc:c1:d6:94:51:4d:92:8e:6d:03:62:36:7c:
                    35:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5D:26:1B:58:2A:35:B8:D2:79:6D:C1:62:C4:11:F6:98:28:D0:3A
            X509v3 Authority Key Identifier:
                keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:07:51:af:06:7c:b6:1e:61:3e:fc:05:f0:36:a4:11:25:24:
         af:2a:48:a0:70:57:23:be:4e:94:60:7b:c3:35:02:08:b2:24:
         aa:5e:af:f1:e5:0c:1c:84:10:69:b9:7f:5c:f6:88:81:36:f8:
         f1:8c:3d:96:73:7a:e1:29:36:8a:02:83:4d:0f:d5:23:2c:a8:
         76:6e:4c:f5:50:10:1c:39:9b:e7:5b:1d:f9:7f:0c:1e:fb:16:
         3f:13:14:71:b9:bc:7a:da:32:7c:6e:49:da:a6:8f:3e:39:f5:
         77:e2:3c:04:a1:db:cb:7e:52:96:49:a5:f4:a0:4d:9a:c0:53:
         5c:94:60:a9:16:05:f6:b7:43:9d:d6:13:63:b4:ca:21:ad:50:
         38:ca:8b:01:36:50:b4:c2:6f:ce:97:53:2c:4e:62:f6:b0:5e:
         1b:c3:40:c0:d1:e1:8b:e0:60:3b:69:4a:9a:cd:d9:1c:4a:d5:
         2c:f7:10:a3:70:52:d5:94:ab:ff:d7:5b:93:7d:41:5f:8c:fb:
         b8:40:da:d8:5c:bc:06:66:a6:6e:3e:fd:c3:8f:e4:ff:d5:6d:
         ba:dd:67:1d:e1:6b:18:a6:97:a6:43:e0:c9:fa:f3:d1:29:59:
         d8:71:ff:18:19:9b:23:94:b2:fa:68:72:13:2d:b5:d3:7f:4a:
         44:8b:2b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:30:28 2026 by rpki-client