This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
File:                     gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft (raw, json)
Hash identifier:          yZZ0JU6yskb7+5mK1hLcViPqdMsUHo3yw+RlNmtzgcY=
Subject key identifier:   2C:B2:21:6A:20:C3:72:E5:0B:07:68:1F:69:CA:CA:B5:1C:1C:C0:7D
Authority key identifier: 81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE
Certificate issuer:       /CN=819b97b20ccb4f696518e47c437259a8913e72ae
Certificate serial:       019C41A25060B8E457FF0C7F35E7ED07B7DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
Manifest number:          125F
Signing time:             Mon 09 Feb 2026 09:01:22 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:22 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:22 +0000
Files and hashes:         1: L2sVy84YNgdXdVRcFvky1jOyapo.roa (hash: 3nfkWDukO5seERRcNCHmDmoRPYQO0LEHGFHMMpgINH8=)
                          2: ehALNgmvDMXOCz1qDVIzrXU9qPs.roa (hash: dn6QOi6y7D3WWFMRmemHXTmqvY1tGOW3y/+Az1xAbxM=)
                          3: gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl (hash: ygLolZubCUQJVpghul5cXCMfoTK5jwJyeQ7a6y3GKCo=)
                          4: hwtVlXCFjo--idd4yO5s0tt7X3I.roa (hash: NUHjZYJkOekWUWwDXQIom+k1M6skxKicFwBdcoVK9n8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:50:60:b8:e4:57:ff:0c:7f:35:e7:ed:07:b7:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=819b97b20ccb4f696518e47c437259a8913e72ae
        Validity
            Not Before: Feb  9 09:01:22 2026 GMT
            Not After : Feb 10 09:01:22 2026 GMT
        Subject: CN=2cb2216a20c372e50b07681f69cacab51c1cc07d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:61:2a:3e:f2:5a:6e:46:dd:c3:27:45:06:1e:
                    c4:62:c6:94:03:f7:25:ee:54:72:be:6b:5f:47:ba:
                    c7:d0:46:47:82:f8:6a:1d:ae:66:4b:cb:b6:e0:6d:
                    b1:57:b6:ae:65:23:72:ac:75:67:d9:b8:be:54:b0:
                    85:f3:3d:9d:f0:63:c8:fa:d4:a6:2f:b4:21:79:9e:
                    d1:48:9c:e9:89:9a:47:ee:0d:54:4b:9e:bb:30:f1:
                    3d:d7:e0:13:4c:34:21:b0:d0:58:39:77:da:0b:79:
                    55:c6:ae:8c:8d:a0:68:23:9d:72:31:22:88:3f:3d:
                    91:f8:8d:33:dd:c7:32:d9:f5:b0:04:4e:a5:9c:27:
                    c1:d7:82:c7:8b:96:4e:a4:47:35:95:28:a3:b9:f9:
                    ee:99:7a:8e:b5:e7:87:99:88:1f:70:f9:49:0d:4f:
                    ae:d5:69:74:d6:22:76:f7:4f:28:f6:32:01:60:6d:
                    ec:bc:a8:47:e2:c6:24:2a:1c:1d:f3:bb:3d:e9:d4:
                    ae:09:89:99:b6:58:fa:a8:78:ba:78:7c:13:82:38:
                    28:62:5c:76:29:60:4b:c0:66:98:04:ba:b1:4f:7f:
                    c0:8e:a6:41:58:97:0a:60:ba:2d:15:a5:c3:4e:16:
                    10:59:ff:be:a1:a9:31:db:35:98:0c:c2:38:87:f3:
                    3f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B2:21:6A:20:C3:72:E5:0B:07:68:1F:69:CA:CA:B5:1C:1C:C0:7D
            X509v3 Authority Key Identifier:
                keyid:81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:74:2b:0c:76:a6:91:3c:a4:21:0c:ed:fc:b4:d0:b1:02:6c:
         07:ad:49:78:45:7f:39:84:ed:10:39:f7:8e:5a:eb:0b:d8:de:
         91:a4:54:7d:2a:24:6c:57:e9:78:04:09:1b:87:96:20:0d:52:
         f0:47:73:95:2c:5f:9d:41:09:6d:39:60:7e:69:ce:76:2b:81:
         91:68:c4:15:f1:b9:6e:06:79:b9:4e:32:89:c2:20:1d:f2:f7:
         09:fd:05:62:48:09:35:b3:87:b9:a6:a8:67:00:1c:53:c6:52:
         b7:00:08:80:22:12:cc:e8:01:af:f2:62:83:9c:38:86:e6:6e:
         dc:99:07:36:91:f1:e1:9a:65:49:ae:c7:7a:fb:b8:9f:4f:d1:
         e8:3e:10:96:c5:b9:b5:c8:20:36:ea:a3:c6:37:f9:4d:14:c9:
         09:1b:d4:57:b8:0c:2f:58:98:f5:9d:84:0d:33:45:88:07:c7:
         1f:6a:ca:e0:fb:87:50:1b:eb:be:64:27:b0:d0:3d:7a:f2:ad:
         5c:d3:98:a7:f4:40:ef:93:37:5e:dd:8e:15:f0:ea:90:32:59:
         71:08:bc:db:ed:63:bd:44:df:c1:7e:04:57:64:59:50:0b:7b:
         47:12:0e:92:ab:58:e0:d6:29:e4:1d:1e:4f:bd:d6:a3:c2:6b:
         f4:82:50:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:51 2026 by rpki-client