This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
File:                     gh8Shdd1qfWJJD6shErcWridl8k.mft (raw, json)
Hash identifier:          2DN/BxXUxJagxvcmyLZqtpFYNegyrnx7Ji0oMGtA4oI=
Subject key identifier:   51:56:8F:92:8C:B9:5C:3C:D2:69:3E:B2:BD:03:26:7F:34:DD:DF:9C
Authority key identifier: 82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9
Certificate issuer:       /CN=821f1285d775a9f589243eac844adc5ab89d97c9
Certificate serial:       019C4321E0DB7E08CC192720A2D1816BB796
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
Manifest number:          0CB5
Signing time:             Mon 09 Feb 2026 16:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:19 +0000
Files and hashes:         1: Ken1-UyKUV7K-ivTPRx21HrB1go.roa (hash: SzlYiDowE9Ts27wto98BsM6+plGlLtF6xf2nTMUOAKI=)
                          2: dGmTMuCLcokZ_dpzsnFglotPhbE.roa (hash: xS9B/n1G06zo3aHFhFfNBhI/mXvOeeGrRH7j7PtD+Q0=)
                          3: gh8Shdd1qfWJJD6shErcWridl8k.crl (hash: 0UU/bHWHLnKhTbJXKMb8AXEG4O4EzzgIFs/nPGb3Udg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:21:e0:db:7e:08:cc:19:27:20:a2:d1:81:6b:b7:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821f1285d775a9f589243eac844adc5ab89d97c9
        Validity
            Not Before: Feb  9 16:00:19 2026 GMT
            Not After : Feb 10 16:00:19 2026 GMT
        Subject: CN=51568f928cb95c3cd2693eb2bd03267f34dddf9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ef:bb:65:07:f3:71:56:e7:b2:ae:bf:75:a0:
                    f6:e6:07:15:95:91:37:29:8a:e6:e4:3e:f0:28:ef:
                    3a:85:3e:39:c1:8a:2f:7c:6f:0e:e9:86:1e:6f:fc:
                    f4:c0:42:e1:2e:1a:73:b1:7e:fe:0c:0e:28:e6:0b:
                    fc:5e:e2:75:c3:44:8e:f5:d4:4f:94:63:7d:17:d3:
                    40:2e:36:10:3f:14:c9:55:5f:04:4f:85:51:29:11:
                    31:c4:2b:9f:a0:7e:e4:a0:b7:1f:80:1c:ec:fe:b5:
                    ef:8b:57:e3:b8:59:41:35:01:38:85:17:15:58:b4:
                    68:1e:e3:cf:c6:31:dc:b9:71:61:99:9c:3a:7c:86:
                    8f:84:0e:5b:bc:38:2c:8b:b8:09:46:af:87:26:46:
                    d9:67:13:a1:1d:8f:22:c1:5e:0d:91:ee:f9:1b:c1:
                    59:94:9a:6b:08:2c:7a:96:32:e6:eb:18:ee:97:d8:
                    7b:78:83:e4:6f:5f:ef:1c:0e:9c:50:3f:72:66:ab:
                    83:85:37:5b:23:24:6f:f5:28:4d:b8:a7:74:a1:b8:
                    c3:21:14:d0:4a:10:65:93:ae:79:1d:46:40:b0:c2:
                    71:03:a5:ac:db:0b:5d:8d:bd:81:a5:e4:f0:94:f3:
                    fb:a1:d2:09:2b:f8:94:00:85:24:32:ce:00:cb:c0:
                    13:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:56:8F:92:8C:B9:5C:3C:D2:69:3E:B2:BD:03:26:7F:34:DD:DF:9C
            X509v3 Authority Key Identifier:
                keyid:82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:05:47:e0:b3:70:30:b5:41:b4:32:51:9b:49:aa:97:2a:90:
         40:99:f8:49:81:cf:60:e8:15:8f:9a:20:2b:70:49:d6:d2:46:
         bf:e8:f3:de:88:fb:d1:c2:a5:69:23:21:5f:73:86:a4:02:79:
         7c:27:72:38:6f:7d:57:0f:87:18:ce:b0:df:f3:0b:12:f3:86:
         b4:84:f6:0e:1c:6b:49:ab:92:6d:fa:18:a6:7d:24:12:c7:ea:
         2b:3b:b2:48:6b:15:de:32:ef:82:d2:c2:9e:0b:dd:c0:53:a9:
         58:3e:6b:ed:24:df:d9:87:4b:87:62:8f:6c:f4:64:f5:c7:10:
         99:ad:8d:a4:df:1e:de:7b:7b:58:cb:87:26:79:a7:60:dd:db:
         c7:98:54:96:15:65:60:1c:fb:71:3b:80:7e:f2:0c:46:37:c4:
         03:91:86:24:36:72:f4:46:f6:7f:b0:70:16:00:7e:63:d9:c1:
         2c:0d:bd:38:80:1e:15:86:51:f1:de:8e:9e:cf:c9:7c:a8:e1:
         ce:22:98:ff:e6:38:54:20:37:de:39:b0:96:03:12:a6:31:d4:
         88:15:26:99:5a:02:0c:66:be:1c:47:8e:ea:a6:ac:d1:15:e1:
         67:53:4d:ed:4e:87:8d:5c:38:0c:ca:81:f1:36:42:2c:90:25:
         b6:c3:23:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:21 2026 by rpki-client