This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
File:                     1GbRcMgQujTELpIOhNQmKEWXf4U.mft (raw, json)
Hash identifier:          qcmGuHUYzJnG78U1iZzbo9+cyUNOaWm+arGcOW4+s/o=
Subject key identifier:   0A:28:67:D6:E1:83:B2:7E:6E:44:F7:54:0A:59:5C:7D:F7:00:85:D9
Authority key identifier: D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85
Certificate issuer:       /CN=d466d170c810ba34c42e920e84d4262845977f85
Certificate serial:       019C416A8431F46E6E6CC9BB04B5B0A3CDE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
Manifest number:          0723
Signing time:             Mon 09 Feb 2026 08:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:25 +0000
Files and hashes:         1: 1GbRcMgQujTELpIOhNQmKEWXf4U.crl (hash: oBTvuWUj0oGFaxiqPw3K1C/o6rBg3KNT7PXYftP6zpk=)
                          2: XyvlakrX669O27yJ8vUEJgcOTBA.roa (hash: bXnP/tpzRgnQjjCGNcc58oyJ9DS3aNnplVA7Ww2qw84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:84:31:f4:6e:6e:6c:c9:bb:04:b5:b0:a3:cd:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d466d170c810ba34c42e920e84d4262845977f85
        Validity
            Not Before: Feb  9 08:00:25 2026 GMT
            Not After : Feb 10 08:00:25 2026 GMT
        Subject: CN=0a2867d6e183b27e6e44f7540a595c7df70085d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1b:bd:2c:24:6d:87:30:d2:10:89:bb:71:c3:
                    b6:d5:cb:70:62:85:66:f9:e4:dc:69:28:cb:d4:35:
                    20:53:93:bf:83:c4:45:60:02:93:bf:b1:2a:62:2e:
                    5d:31:40:fc:4b:82:fc:cf:3b:4c:df:bb:fc:ed:40:
                    85:b9:59:47:ab:4a:5d:16:e7:68:d9:bd:34:de:7b:
                    4e:18:96:11:b7:ec:67:7b:3b:64:5a:2c:2b:8c:f7:
                    74:65:94:15:ee:99:ed:c0:f0:71:a3:46:78:85:53:
                    91:36:80:89:74:7e:78:94:67:45:44:45:86:e8:a4:
                    29:65:6b:ab:5b:70:31:39:fb:b3:7a:63:93:d2:f3:
                    9b:ea:53:9f:94:47:f3:7a:8a:5b:b7:08:f8:11:4c:
                    5f:c5:c1:1a:57:09:de:33:e7:54:fe:03:26:b4:aa:
                    65:83:7e:dc:4e:c0:61:e2:7e:70:d3:61:1c:0d:f1:
                    67:8d:28:0d:74:99:29:19:fd:50:57:7c:7c:1c:60:
                    a3:d1:4d:c4:0e:30:31:33:6b:54:20:fc:28:f1:b0:
                    7b:d6:87:f8:7a:8e:0e:01:a5:0c:b7:98:ff:d0:fb:
                    2c:b7:af:00:0b:d8:f2:87:11:33:53:4a:78:1b:e0:
                    fa:1c:53:db:a4:1e:17:c9:8d:67:87:f5:85:2b:c8:
                    8f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:28:67:D6:E1:83:B2:7E:6E:44:F7:54:0A:59:5C:7D:F7:00:85:D9
            X509v3 Authority Key Identifier:
                keyid:D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:05:3e:96:9e:93:26:60:22:ad:38:07:5d:e5:7c:e3:6c:cd:
         d1:68:81:d3:ae:0c:65:db:b5:78:ec:a9:76:a0:26:26:d8:1a:
         a1:65:c9:4d:30:a1:af:7f:17:f2:8d:55:72:dc:bf:21:3e:72:
         09:67:61:9f:51:f1:32:42:fb:1b:ee:9c:e9:bb:5a:5c:28:73:
         29:7f:64:6f:05:7d:b6:a7:cb:6f:07:57:ca:dd:fa:0b:d7:2b:
         06:78:ab:21:76:f3:16:d4:c9:cf:9a:64:ca:5f:04:f4:ce:c8:
         fc:5e:7f:07:45:e0:1a:d2:00:35:e7:f6:bb:12:f1:2a:9d:39:
         82:ab:c8:ea:bc:fc:14:ae:0a:c1:66:73:5a:42:14:42:e6:51:
         01:6c:74:19:02:13:04:98:0c:98:ca:a5:94:7c:a8:88:b3:70:
         67:65:d4:d8:a2:cc:d8:cf:89:12:b9:a7:98:99:34:95:9e:b0:
         02:f0:88:e2:21:ee:33:02:58:91:93:9e:88:9a:17:f0:54:52:
         78:6f:72:b6:63:1f:75:69:5c:e6:44:2f:54:80:90:ff:45:b5:
         64:9c:f7:30:46:86:03:1f:05:06:89:a5:a6:4d:21:bb:eb:8a:
         d5:56:cf:d4:99:12:30:61:a4:f1:31:6a:db:7f:0f:35:55:f8:
         c1:4f:81:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:48 2026 by rpki-client