This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
File:                     G2goETu6NCPRVzGWT-V7XyUr_eY.mft (raw, json)
Hash identifier:          uem97il2bVhQGKt2V6ObLckYqW0NFORdYvEHwLfWxkc=
Subject key identifier:   62:8F:91:5B:4F:65:0E:79:D8:F4:C1:DB:59:A4:9C:59:A1:9C:61:D1
Authority key identifier: 1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
Certificate issuer:       /CN=1b6828113bba3423d15731964fe57b5f252bfde6
Certificate serial:       019C438FE84381785BAD315099FA2B3FA34F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 18:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:30 +0000
Files and hashes:         1: 9RWhzRxq8FPw1YkS-zkDw9ykoNg.roa (hash: KHfuWgWaHX6Mz8Yo4JI6aEe/kuXdFK4S2I7AeBzy96w=)
                          2: G2goETu6NCPRVzGWT-V7XyUr_eY.crl (hash: D1y1rs4rwBxDQWSJk7PmdmYRzpmANh2AhUPBTapQ/mQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:e8:43:81:78:5b:ad:31:50:99:fa:2b:3f:a3:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b6828113bba3423d15731964fe57b5f252bfde6
        Validity
            Not Before: Feb  9 18:00:30 2026 GMT
            Not After : Feb 10 18:00:30 2026 GMT
        Subject: CN=628f915b4f650e79d8f4c1db59a49c59a19c61d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f3:c3:39:30:9f:18:84:4b:c3:a6:87:bb:83:
                    77:63:03:94:65:66:8e:24:d8:de:09:97:62:c2:2b:
                    7f:cf:e6:51:01:2d:b0:ad:b3:80:c9:92:08:f1:b8:
                    75:08:e4:47:35:73:ab:be:65:6c:83:2c:8e:73:0a:
                    78:fc:41:53:30:5e:c3:c8:03:d4:17:66:4c:04:16:
                    d5:c5:a4:29:fa:87:6b:7f:5c:84:57:50:13:b9:09:
                    84:af:ee:19:ac:12:d4:71:c8:42:c8:20:46:01:9e:
                    ae:8c:51:66:2e:55:d6:63:d8:6f:66:85:51:3e:f7:
                    e2:39:ae:8a:9a:d2:35:78:d2:84:b4:16:d1:9f:43:
                    f6:e1:a6:c9:ea:a9:c6:40:6c:e5:27:4f:93:b8:6c:
                    c0:c9:b9:ab:bd:8a:9d:09:cf:f0:8c:13:9d:95:a3:
                    99:a9:ee:01:4a:77:77:a9:df:6b:14:11:9d:8e:de:
                    67:d7:a3:cc:4f:7a:d7:e6:62:0f:65:ae:92:53:cd:
                    d7:e4:64:ff:1f:19:61:bc:19:2d:c3:cd:dc:56:2a:
                    0a:3f:7c:10:7c:e7:1d:ba:73:d3:1d:35:9a:ff:ea:
                    da:bd:83:28:7a:25:98:a6:12:fb:94:62:c3:a7:6e:
                    d9:91:46:05:64:40:2f:e4:14:b3:2a:f6:ce:7c:38:
                    62:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8F:91:5B:4F:65:0E:79:D8:F4:C1:DB:59:A4:9C:59:A1:9C:61:D1
            X509v3 Authority Key Identifier:
                keyid:1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ae:3c:ae:bf:03:ce:89:69:79:7e:8a:3c:b7:86:cc:0c:b2:
         9f:63:49:7d:86:ae:f5:3c:42:7f:40:24:7a:aa:d0:3e:31:82:
         dd:06:50:bd:42:3e:c5:29:e1:70:ed:88:8e:38:45:4a:3b:63:
         01:67:61:42:d4:d0:19:16:02:84:13:20:07:6d:c1:44:3e:83:
         2d:94:b1:ab:59:00:21:98:fd:b1:6b:83:43:aa:99:8c:18:c0:
         b2:0d:9f:5b:a6:f0:3a:8a:08:37:c6:b3:b7:e2:1d:06:6c:33:
         14:73:ce:25:08:0b:95:ca:53:ad:19:ad:2a:da:b9:4e:0c:f9:
         8c:b2:52:ab:07:a4:4a:46:48:e4:6a:dc:b6:f6:c4:0b:56:5f:
         44:9c:da:4b:84:36:75:56:81:7e:99:9d:c6:f8:8c:83:0b:9b:
         b8:3a:0e:0d:ad:5b:05:34:e5:1f:50:a9:27:af:f2:d1:80:bf:
         15:e3:60:4a:18:2e:a3:ed:1d:0a:cd:02:e6:22:7f:ba:25:a5:
         05:d0:b3:98:cf:d1:41:28:d0:55:3d:81:de:95:f4:3c:12:d1:
         b8:f7:52:8e:04:4a:98:31:55:16:18:ce:bb:c9:e8:af:50:ab:
         fc:b5:fe:fd:dc:d2:54:0a:3a:2f:7a:f1:45:6c:fa:37:36:bd:
         bc:ae:aa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:38 2026 by rpki-client