This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
File:                     g_gpRGn7euwmAbsDdy0BVvRwt00.mft (raw, json)
Hash identifier:          Ttr7yqj/bhkTytvGk+22Z8K9bRZZRAWQsIaqkk4uUdU=
Subject key identifier:   3C:2E:59:08:24:C1:7A:3F:1F:CE:47:76:61:C8:92:D3:EE:27:D4:1A
Authority key identifier: 83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D
Certificate issuer:       /CN=83f8294469fb7aec2601bb03772d0156f470b74d
Certificate serial:       019C443508F09E0889CCAA4DD05E83F99B86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 21:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:52 +0000
Files and hashes:         1: gEd6QeiAQ932jPLYrtnGG0ZTT6w.roa (hash: RPvaNvrZcdDQu4AbrRZ97MsyJRS0F3BlThyjoqYHdHI=)
                          2: g_gpRGn7euwmAbsDdy0BVvRwt00.crl (hash: FeSJeZgYcOyHngfX+IwLYEvoovYPQ5Z4CyUxZb1wY1M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:35:08:f0:9e:08:89:cc:aa:4d:d0:5e:83:f9:9b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83f8294469fb7aec2601bb03772d0156f470b74d
        Validity
            Not Before: Feb  9 21:00:52 2026 GMT
            Not After : Feb 10 21:00:52 2026 GMT
        Subject: CN=3c2e590824c17a3f1fce477661c892d3ee27d41a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a2:b7:06:0f:e9:61:1e:7f:5a:d4:9e:79:e8:
                    27:2f:2c:81:fc:67:82:6e:61:e7:f4:41:35:c6:92:
                    d9:7f:b3:fa:ee:30:75:7e:c2:bf:fb:59:79:62:c3:
                    2b:48:d8:91:96:7c:32:34:f5:66:11:ed:60:25:7a:
                    d6:26:f1:29:e0:15:91:7d:b2:f9:c0:0d:ad:50:74:
                    85:b7:17:ea:94:da:02:c6:1f:c4:01:fc:ae:ed:7f:
                    b9:67:1b:68:42:50:6f:cc:ff:ab:29:c1:84:7f:28:
                    bf:f0:5a:64:ac:57:21:aa:ba:1e:e8:99:ab:79:a7:
                    cd:85:1a:10:ee:35:88:85:53:78:c9:59:cf:61:4e:
                    69:63:01:68:ad:1a:74:84:a9:30:96:a5:4f:93:46:
                    5c:fb:05:c0:43:93:8c:ca:18:30:b4:57:38:97:bf:
                    cc:9c:3f:95:dd:5a:4f:df:93:21:3d:8a:17:b1:a0:
                    86:4b:7e:72:1b:e6:5d:ff:db:98:6c:52:b5:8b:aa:
                    9c:59:40:95:a7:21:df:45:49:23:3e:e1:8f:68:ab:
                    77:a5:b1:2e:c7:29:fc:d9:81:ce:c3:d1:d0:72:c3:
                    d8:e6:9c:dc:c1:30:ef:e2:70:aa:bb:15:fe:2e:7d:
                    af:aa:23:2a:94:55:22:99:fe:c4:75:6f:76:22:c7:
                    63:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2E:59:08:24:C1:7A:3F:1F:CE:47:76:61:C8:92:D3:EE:27:D4:1A
            X509v3 Authority Key Identifier:
                keyid:83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:3a:83:bb:3b:ed:a1:dd:76:10:63:28:4a:7a:ae:cd:01:92:
         12:53:ac:20:dc:94:00:32:f6:dd:f1:51:41:f9:35:c6:b0:20:
         07:8b:9f:1a:75:b0:e8:e6:1d:99:a2:f6:0e:a5:9d:ed:71:83:
         05:49:a0:4f:fe:bf:20:a1:76:75:77:e9:84:3e:f9:79:19:ff:
         42:56:6c:a0:6e:64:a0:b3:7f:32:a8:74:4c:27:9f:e8:13:99:
         a5:53:07:ff:b0:42:4c:d4:00:a6:2e:8a:f9:5a:47:b8:a7:50:
         1e:09:69:ce:64:30:07:90:d1:59:63:a7:e7:a7:89:12:56:84:
         43:f7:ac:15:2d:6e:17:83:39:1f:8d:f5:a8:7e:d2:f1:a1:0e:
         13:7b:f4:8a:b6:ba:59:63:c3:44:5c:a5:ae:25:ad:31:03:23:
         4c:e4:ee:cb:77:ed:e1:4e:76:fe:74:dc:9c:ac:37:66:d3:0f:
         fa:fd:03:1b:6c:e0:82:27:d5:04:3e:9b:81:c3:4d:ec:b4:5b:
         d5:71:2d:85:ae:63:c3:fb:f2:e5:8c:92:a5:75:25:59:a6:5d:
         ab:6e:96:c9:44:50:bf:cd:d5:95:5f:4c:1c:6d:ba:82:3e:99:
         28:bd:6a:1f:59:95:9e:e7:3f:46:27:0f:1a:31:92:f9:c9:2c:
         fb:0c:a9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:39 2026 by rpki-client