This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
File:                     RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft (raw, json)
Hash identifier:          hhP080Q4EIv5LF+FBl/D0VwNYiu70ixnIwzjqVqvSwU=
Subject key identifier:   01:C4:68:FC:B2:75:07:8A:F9:D9:B0:E6:23:77:74:0B:98:48:B3:B7
Authority key identifier: 46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
Certificate issuer:       /CN=4603c656c197461a49caa1ffd720d18beeac8076
Certificate serial:       019C427D939E420CEAE32A5CFD2D955FD279
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
Manifest number:          05D8
Signing time:             Mon 09 Feb 2026 13:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:51 +0000
Files and hashes:         1: Hrj27dyCNZvY-lKB2ef8Mo4G6tA.roa (hash: ywCaGFxrJHREbSiyJrKj2GAkS5PQJLvo8VTO1MR9hlc=)
                          2: RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl (hash: XA8kF7Fyq6QOqgMr/arKGfXYlKKre70IZjaBGPszAJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:93:9e:42:0c:ea:e3:2a:5c:fd:2d:95:5f:d2:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4603c656c197461a49caa1ffd720d18beeac8076
        Validity
            Not Before: Feb  9 13:00:51 2026 GMT
            Not After : Feb 10 13:00:51 2026 GMT
        Subject: CN=01c468fcb275078af9d9b0e62377740b9848b3b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:91:a5:16:a7:d0:9d:29:04:0a:bb:2b:ba:23:
                    c1:05:1c:15:9b:b3:cc:86:df:28:e6:f4:8b:55:95:
                    5d:b4:b5:3d:b3:b3:fd:13:77:d8:80:21:9f:d4:f0:
                    c9:96:71:13:50:69:ef:36:49:98:cf:3d:f9:44:c3:
                    3c:a0:d6:f6:71:49:32:17:64:fc:62:82:84:f3:30:
                    e4:48:49:58:d6:f1:8c:94:3d:eb:79:e9:7a:9e:45:
                    d4:5f:ad:82:9c:c7:5f:2f:9c:64:bb:ac:d7:4b:36:
                    b4:e3:a4:54:7f:39:ca:12:7f:89:65:42:86:27:10:
                    bb:4c:ca:1c:36:18:10:a6:c5:84:fa:ca:18:24:eb:
                    1a:26:48:ce:ac:02:4f:7d:e5:d2:4f:96:0c:16:65:
                    f7:35:58:ca:b5:fd:20:97:f2:41:97:09:4d:f0:2f:
                    25:f2:f2:a1:55:4e:bc:ac:45:b0:1d:e5:00:79:80:
                    9e:09:cc:68:94:5d:52:3f:02:b1:fd:f9:69:06:30:
                    8d:2f:5c:a2:8f:10:fe:49:91:f2:0a:7c:32:26:bd:
                    eb:60:77:23:a8:b3:ee:6c:11:db:29:3e:0b:aa:59:
                    eb:b3:05:a1:86:ec:d0:96:a9:d8:f9:7d:c6:6d:02:
                    08:85:ce:84:fc:65:70:9f:d9:dc:9b:0b:ef:c0:3d:
                    da:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C4:68:FC:B2:75:07:8A:F9:D9:B0:E6:23:77:74:0B:98:48:B3:B7
            X509v3 Authority Key Identifier:
                keyid:46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:80:93:ce:c2:d6:d8:45:11:94:87:a2:91:6f:9c:1d:b8:ee:
         d4:82:18:3d:81:f7:ce:19:6f:79:02:42:e9:cb:a8:4a:c6:ce:
         04:1a:d4:70:31:b3:84:e6:ee:10:0b:5f:f1:bd:c5:18:00:f2:
         66:64:b1:9e:80:c4:31:01:4e:8d:f6:18:40:8e:0a:27:28:0f:
         30:c3:e4:73:c5:46:df:fb:46:0e:1c:7c:ef:0d:c5:87:bf:f9:
         25:2d:b4:78:0f:ad:82:4d:69:d8:f9:03:db:af:50:9d:8b:32:
         31:4f:b8:50:1c:c8:eb:8c:ca:25:6e:03:02:da:5c:25:75:4d:
         58:58:46:50:95:0a:6a:ec:3d:bf:52:4c:08:99:bd:da:c8:38:
         df:92:c2:d3:40:48:6d:f0:59:4c:b5:fc:cd:55:fa:15:66:fd:
         93:57:ca:3b:41:be:1b:1b:90:ff:77:c9:43:42:ae:08:15:c9:
         5d:ec:7f:5b:bc:3f:89:32:05:2f:c8:31:17:98:55:4f:ee:13:
         25:60:f5:8b:a4:88:b8:9d:60:06:fd:4b:0a:1b:0a:5c:63:30:
         57:e3:c9:9f:74:e2:4a:91:b1:0a:e3:a2:7e:c6:8c:34:94:82:
         5c:84:b0:11:83:c1:81:1a:12:76:09:56:67:a8:a0:70:c5:8e:
         16:f3:51:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:13:58 2026 by rpki-client