This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
File:                     G1WOmRP2tWzD1WD5T_E38s1vSGI.mft (raw, json)
Hash identifier:          3b8BTDaA7m+ob1xjs9+2fzCrq79gUw0t78ebANguG+o=
Subject key identifier:   CA:E2:A3:C0:7A:54:FE:91:84:13:F8:80:9B:51:D0:9F:F2:D2:F1:1F
Authority key identifier: 1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62
Certificate issuer:       /CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862
Certificate serial:       019C4246B3714B32A814DFABEA1E5B8E58BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
Manifest number:          0827
Signing time:             Mon 09 Feb 2026 12:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:55 +0000
Files and hashes:         1: G1WOmRP2tWzD1WD5T_E38s1vSGI.crl (hash: uEZlGMe+OFvgULJJkcr489GZeAzz/AwUaCBQ4Kd4qMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:b3:71:4b:32:a8:14:df:ab:ea:1e:5b:8e:58:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862
        Validity
            Not Before: Feb  9 12:00:55 2026 GMT
            Not After : Feb 10 12:00:55 2026 GMT
        Subject: CN=cae2a3c07a54fe918413f8809b51d09ff2d2f11f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cf:8c:9c:7f:9e:6c:09:b0:01:43:0a:75:a4:
                    c2:9e:0e:d7:f1:f7:2f:c9:c6:f1:41:10:33:50:d1:
                    29:27:d4:7f:3c:5c:50:4d:06:90:78:fd:bd:84:49:
                    26:e5:02:2d:b2:e3:77:43:85:7f:72:9d:ca:f8:84:
                    6f:0d:dd:a2:74:98:a6:5a:82:65:95:69:a8:64:6f:
                    6e:ca:18:cb:4e:2e:ae:3b:f6:6c:16:2b:4d:38:00:
                    25:66:3f:05:00:f9:cc:22:f5:12:e5:18:57:2a:54:
                    b1:ba:08:76:d9:eb:78:89:81:6e:3d:cc:8b:73:9b:
                    bf:79:2d:90:b0:7e:2e:53:d4:51:74:ad:ce:c3:9f:
                    ea:19:17:36:d8:da:71:f3:38:18:2d:41:5b:2a:5c:
                    64:09:52:7e:e1:96:1f:7c:1d:5b:6f:b2:e3:1e:11:
                    2c:88:89:54:de:1e:95:99:03:a9:39:66:0b:f0:59:
                    91:3d:10:4b:bc:7a:18:19:fb:1d:ea:e4:ba:35:66:
                    ea:e1:c1:a9:ec:dc:81:cd:32:0f:7c:8e:16:1c:cc:
                    29:41:6e:06:60:d3:a1:4e:89:05:0f:a5:ba:6f:fd:
                    38:30:bf:18:5c:3b:79:1f:e0:a9:1e:35:46:d3:b1:
                    fd:39:75:ca:fc:0e:c6:9e:e3:44:a5:87:6c:f0:80:
                    56:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E2:A3:C0:7A:54:FE:91:84:13:F8:80:9B:51:D0:9F:F2:D2:F1:1F
            X509v3 Authority Key Identifier:
                keyid:1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:36:73:01:5d:9c:c2:f6:5e:1f:ea:e6:6f:a6:a6:fb:ff:de:
         fd:24:40:a8:ab:bb:bd:c4:33:ab:fb:65:02:c1:94:d3:3c:80:
         e6:f9:10:6a:a2:a1:63:1b:68:ca:8c:ec:91:88:fe:43:4c:2a:
         53:70:72:0e:86:1b:ea:2d:1f:61:8e:d0:c7:7f:66:8f:55:88:
         cc:1a:1d:15:30:f0:ea:2d:21:5d:da:a4:a8:2a:df:7f:e8:3a:
         48:2a:a0:75:b9:95:e2:5e:61:7c:cc:e1:25:47:80:98:3e:60:
         27:7f:f0:dc:17:be:0c:02:11:b4:ab:58:4d:4b:0b:02:64:a2:
         74:c4:75:88:81:fe:95:1a:d3:19:27:c7:e7:5e:36:2d:ab:3e:
         c8:a9:d9:15:df:ef:f4:c9:5a:12:b2:12:48:30:f7:53:ae:74:
         51:1a:e7:a2:84:2e:82:ce:e5:f0:04:ba:11:85:2f:2b:8e:b3:
         86:e6:bd:b2:f8:6f:e9:2d:53:ec:0a:da:5a:c3:51:5a:49:38:
         5a:eb:1e:dd:5b:91:da:24:ec:77:10:54:8e:c5:d0:8b:ab:dd:
         77:bd:16:f2:ad:1c:b1:3d:a4:1c:39:c5:cc:b2:d5:09:73:8f:
         44:81:9f:4f:f0:d5:ed:31:1f:09:48:8d:94:eb:3a:e4:1f:9b:
         93:00:9b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:58 2026 by rpki-client