This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
File:                     MGavc-_zrCH_F6CVL_Nw5gykS10.mft (raw, json)
Hash identifier:          q/IZs/SOTEHe12X6KRRopemqSsMrFfTiqYviFkjiMko=
Subject key identifier:   07:2A:AB:8A:3F:EC:B3:6A:CC:0F:2E:6E:8F:12:1B:A3:F9:64:B6:C5
Authority key identifier: 30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
Certificate issuer:       /CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Certificate serial:       019C44D9E795D2F7915211131D2B9E6091C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
Manifest number:          1810
Signing time:             Tue 10 Feb 2026 00:00:57 +0000
Manifest this update:     Tue 10 Feb 2026 00:00:57 +0000
Manifest next update:     Wed 11 Feb 2026 00:00:57 +0000
Files and hashes:         1: C1RBBN_ZVpEXr_O5XicmF9RRbqw.roa (hash: VWcYJnFNZXnjTlhzeEFW69/RT95ec57ErxUIeBg+zwo=)
                          2: MGavc-_zrCH_F6CVL_Nw5gykS10.crl (hash: FanhreYLvJFJXwMcZafmh/Q5vAX4mF/FBJXaS7e4YAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:d9:e7:95:d2:f7:91:52:11:13:1d:2b:9e:60:91:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
        Validity
            Not Before: Feb 10 00:00:57 2026 GMT
            Not After : Feb 11 00:00:57 2026 GMT
        Subject: CN=072aab8a3fecb36acc0f2e6e8f121ba3f964b6c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7d:c3:60:a9:eb:8a:b6:82:31:49:8e:a5:7d:
                    51:a7:50:6d:d6:c1:4d:29:fb:a2:bf:6c:7e:83:36:
                    38:b6:07:85:ab:e9:77:6f:07:79:2d:4c:e9:e9:ef:
                    26:cc:8c:92:f3:33:1c:2d:91:7f:2b:a2:4a:db:bf:
                    bc:14:c9:4e:14:30:20:9b:36:fe:a3:52:2e:ad:8c:
                    09:51:b0:4f:52:b1:9e:c7:6b:02:65:8a:0c:c9:65:
                    dc:18:ce:64:f7:e6:11:93:e0:25:96:01:da:f8:b3:
                    c1:bf:70:45:97:d4:d7:e8:1b:91:54:39:8c:3e:19:
                    23:5b:15:48:d4:66:37:69:44:a6:86:fb:68:87:e1:
                    7d:97:a3:eb:c0:77:06:36:bf:4d:4c:47:52:3d:3e:
                    87:72:d5:0a:93:c3:d1:c0:63:3f:7b:5a:bb:66:3d:
                    f8:55:41:7b:a3:4e:8d:24:79:01:75:d9:87:48:45:
                    4b:f0:e2:a5:2c:38:fe:9f:cc:04:a2:c5:e5:4f:2c:
                    0c:83:6f:f6:fb:f2:f7:1b:1b:dd:a7:56:6f:ac:24:
                    d5:16:1d:55:df:b3:5b:da:65:fe:c5:6e:6f:ac:3d:
                    af:cc:48:fd:c7:53:00:d0:88:26:87:44:fa:ff:0b:
                    d0:c2:fe:a5:a4:b7:a4:2a:55:1b:c9:44:95:9a:ea:
                    d4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2A:AB:8A:3F:EC:B3:6A:CC:0F:2E:6E:8F:12:1B:A3:F9:64:B6:C5
            X509v3 Authority Key Identifier:
                keyid:30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e5:b3:63:b1:b5:b1:2f:22:4e:c1:0e:89:69:1c:82:ba:16:
         a3:d6:fd:17:0a:64:59:8b:5a:1e:5e:b9:4b:13:70:7a:0c:bd:
         40:e9:c1:42:9f:da:3c:e0:88:d1:8a:e4:1b:24:43:0b:2e:ec:
         ec:2f:3f:50:31:1a:68:f6:a1:e7:81:a2:f8:f8:32:ec:43:21:
         71:6a:8f:f6:61:13:c8:6b:8f:c2:fe:fc:38:05:e1:90:dd:ea:
         3a:0c:da:e7:19:d9:72:26:a2:56:9e:7d:0f:e2:8b:7f:68:8c:
         e3:19:f6:91:a4:f1:db:a5:cf:6d:3a:de:d1:83:71:ef:03:c5:
         2b:b7:c3:4d:75:0e:84:0a:99:27:f3:c1:b9:93:88:96:c4:cd:
         6f:03:00:37:b8:ec:87:92:c3:03:a0:fe:68:ca:31:98:55:6f:
         3c:a3:70:29:92:09:37:29:5c:34:28:ed:90:8c:15:fc:09:ba:
         dd:29:1f:b3:08:43:69:6e:00:57:c1:94:b6:6d:a8:76:7a:e1:
         1a:94:27:61:f1:48:7f:4b:3b:ec:d1:81:bc:c9:44:0e:fe:a6:
         fe:fc:b0:ca:ec:d0:c9:bc:3b:ba:c0:9c:46:ae:3c:24:06:be:
         b7:51:37:2c:5a:62:25:1f:f1:9b:31:96:73:86:03:2a:a0:58:
         6a:b0:9d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:01 2026 by rpki-client