This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
File:                     GvzYfmH5F2XCwQAgQUG1lNMsey4.mft (raw, json)
Hash identifier:          sSig+2qRXQ2RxKhqVwv2Yeysh3wtbqELRIjjFmdeXIw=
Subject key identifier:   0F:2F:F2:0B:CA:7E:7C:4C:A9:63:7A:24:33:8A:E4:2A:C5:C1:80:68
Authority key identifier: 1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
Certificate issuer:       /CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Certificate serial:       019C40FCC2500C25779DFB39CE2C9D3EE08C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
Manifest number:          0338
Signing time:             Mon 09 Feb 2026 06:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 06:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 06:00:32 +0000
Files and hashes:         1: GvzYfmH5F2XCwQAgQUG1lNMsey4.crl (hash: kOOmtsPA+z/xLVE0l2fi2+dnY19faBoMOs8GP1zK0Ek=)
                          2: tW75xisNBw44jYns_Y3WtNvzf4M.roa (hash: 1hevvajdIYdR4n3mWoJRqh1PcCq2VWdl5U2HS1l2lMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fc:c2:50:0c:25:77:9d:fb:39:ce:2c:9d:3e:e0:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1afcd87e61f91765c2c100204141b594d32c7b2e
        Validity
            Not Before: Feb  9 06:00:32 2026 GMT
            Not After : Feb 10 06:00:32 2026 GMT
        Subject: CN=0f2ff20bca7e7c4ca9637a24338ae42ac5c18068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6d:ea:b8:c9:16:f1:8a:12:84:f6:27:58:2d:
                    e7:7e:62:25:40:4d:49:67:7d:93:61:7d:fe:21:03:
                    46:55:35:b5:2e:5a:7d:29:92:31:77:29:37:66:3a:
                    48:bd:73:34:14:4f:ca:8a:db:9e:31:9e:a6:0e:45:
                    23:7e:00:0f:d1:96:af:9b:48:45:03:00:28:6a:5b:
                    f3:63:1f:e6:1b:9f:bf:29:75:95:40:d5:58:cb:0a:
                    8f:81:fe:91:29:b2:06:9c:cc:42:17:e7:48:3b:8d:
                    75:9f:8b:93:1a:08:3d:b0:cc:15:3c:54:ac:d8:36:
                    c9:c0:6a:10:d7:59:c5:d9:a2:ea:9d:fa:7d:89:a9:
                    71:69:16:3e:b3:da:73:49:43:0a:ab:34:9f:5c:fd:
                    ae:f4:d0:a7:a5:97:88:7e:5e:ec:cc:3b:14:6e:45:
                    3e:9f:8e:68:9d:4c:c6:dd:4e:9d:40:e4:e4:bb:bd:
                    84:3d:43:3f:eb:5e:16:87:16:28:7f:7b:7d:6f:14:
                    b0:53:ba:f1:7a:3b:31:c4:a8:8b:d3:58:6b:8f:c6:
                    29:d5:c1:a0:cb:2f:fe:6a:b2:61:16:b4:48:15:ec:
                    0c:e5:3e:a5:73:2d:95:9e:bc:ba:62:36:cf:2d:1c:
                    9a:d5:ca:ca:f2:cd:c0:6d:76:d1:78:01:68:ca:3e:
                    87:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2F:F2:0B:CA:7E:7C:4C:A9:63:7A:24:33:8A:E4:2A:C5:C1:80:68
            X509v3 Authority Key Identifier:
                keyid:1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:aa:dc:6c:34:35:1f:ca:26:67:86:eb:72:bb:88:39:2d:34:
         0c:ac:c1:42:45:27:a5:cf:a8:df:82:99:ce:71:d3:6e:d0:39:
         72:a9:11:68:6b:0b:fe:49:ac:db:68:82:61:c2:60:78:8d:cb:
         46:7f:9f:52:7e:65:a4:35:04:68:71:e1:8e:ad:32:5a:78:ee:
         1c:7b:35:67:80:d6:56:3e:f9:36:f6:75:df:28:a9:e3:84:a7:
         29:cc:ff:90:82:e0:13:8b:55:3d:b0:d4:95:d5:02:89:d4:13:
         f6:28:91:65:a2:ef:4d:5e:49:a8:4c:1c:63:2a:da:bb:fd:24:
         75:44:3b:ca:a6:53:14:ee:2f:70:6f:e1:3f:21:de:04:18:c0:
         13:7f:75:17:48:2f:46:0a:21:79:c4:b5:8c:b7:49:c9:01:f2:
         ef:34:e9:f9:36:be:da:e1:82:84:24:b3:57:43:aa:97:d6:86:
         0a:38:4e:a9:93:9d:e5:04:72:51:91:6a:74:ed:db:89:f5:ae:
         f8:da:23:e6:a2:bb:1c:fd:8e:ab:6f:1a:1f:b4:7c:d5:97:dc:
         6b:fd:32:7f:01:45:83:22:35:ce:1e:63:f4:9c:cc:42:29:0e:
         49:2a:52:56:3a:fc:aa:c1:1b:5f:3a:a0:b0:5b:c6:2f:92:28:
         96:34:ff:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:43 2026 by rpki-client