This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
File:                     gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft (raw, json)
Hash identifier:          +Y6URjjZh9f7jFxnY5vb3mD2sRMWi6kAzcfxqxa2Bb4=
Subject key identifier:   08:45:46:87:A9:B6:02:C9:26:7B:81:B1:02:39:DE:81:14:A8:3F:FA
Authority key identifier: 80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
Certificate issuer:       /CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Certificate serial:       019C427DEB260954297A6EDB8DE32AD2C1B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
Manifest number:          16E7
Signing time:             Mon 09 Feb 2026 13:01:14 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:14 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:14 +0000
Files and hashes:         1: PsabYp2ySYYY4yWAvK9dKL6YUH8.roa (hash: vZfpMIjc6fu7umjV0/mcBQ6XxsIN7kJ9lIrou1yREPE=)
                          2: gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl (hash: p9Dzi982zgCof6hq0NrcLfRT2f02dei6z+PrWejuJAY=)
                          3: xwHoXsaqChRsiVb50QE3J02tSTs.roa (hash: 3vkTwTSIkCsrZ1qD3qPtZAfnQFTRVxoOlMcE+MNVrg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:eb:26:09:54:29:7a:6e:db:8d:e3:2a:d2:c1:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
        Validity
            Not Before: Feb  9 13:01:14 2026 GMT
            Not After : Feb 10 13:01:14 2026 GMT
        Subject: CN=08454687a9b602c9267b81b10239de8114a83ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fc:a8:6d:0c:b9:fb:7c:4e:e0:9d:0f:96:33:
                    de:97:e8:aa:80:3a:4b:be:df:76:69:8c:57:d3:a4:
                    8c:c7:f1:26:2d:cf:53:31:0d:af:34:2c:a3:cf:69:
                    63:42:aa:41:e7:f3:7c:bd:11:41:90:05:08:8b:dc:
                    80:c4:7d:99:3b:aa:79:74:71:cb:2c:2d:51:ea:e1:
                    f1:de:5f:16:73:1f:b6:cf:37:cb:3a:bc:4c:16:52:
                    c2:57:57:0f:37:2c:76:c6:7a:a9:ae:66:60:48:1c:
                    51:fd:38:11:25:4b:58:39:20:15:54:1b:71:30:44:
                    23:2c:b9:4c:57:bd:ab:f4:c7:35:15:11:11:58:3b:
                    11:e8:a1:24:f9:1c:04:cf:18:3a:14:c2:59:cf:d0:
                    52:82:ff:7b:b5:ef:f1:1d:b0:00:f2:45:98:c7:77:
                    54:0b:8a:f1:a4:2d:3f:5c:89:56:4b:2d:87:2e:61:
                    3d:6e:20:88:44:64:8a:52:95:39:7a:f4:81:a5:d8:
                    84:89:12:b1:1f:2c:69:f3:6e:60:b4:c8:e9:f6:34:
                    c4:68:ef:0a:f3:3f:04:0e:62:58:23:ba:1d:59:72:
                    4c:76:7f:f7:0c:10:90:f5:45:d0:b6:f6:c6:62:e9:
                    b9:f8:d1:ff:04:ad:97:10:f6:3a:ed:98:48:d8:52:
                    d6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:45:46:87:A9:B6:02:C9:26:7B:81:B1:02:39:DE:81:14:A8:3F:FA
            X509v3 Authority Key Identifier:
                keyid:80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:8d:9e:76:e4:b9:27:98:9c:12:ee:ec:64:19:e7:47:fa:c5:
         56:7b:40:ae:04:f4:c3:47:52:0e:07:12:11:18:ca:1e:f7:36:
         e2:49:ac:17:f5:d6:ea:ec:ef:6b:09:b8:2f:41:58:3e:1c:6a:
         34:90:ab:03:e4:1a:64:a4:8c:6b:61:93:04:08:0a:44:be:71:
         ed:ae:73:44:d1:39:3d:e0:ab:c9:12:a8:36:2b:f5:d4:30:db:
         4a:37:8b:cc:90:84:cc:9f:12:30:14:53:10:2f:87:49:b3:a2:
         75:e5:5b:99:ab:4c:5d:81:0d:47:30:89:d7:cd:50:75:c8:a2:
         55:31:54:66:d0:31:91:1c:fc:f8:7f:09:2e:0d:35:7e:43:a7:
         1f:81:b3:a9:2a:a1:ed:2b:11:1c:e5:f9:fe:a3:32:e6:ca:ec:
         f6:5b:a8:d2:25:71:6e:d8:a7:bc:85:60:97:d0:01:fe:8d:67:
         e7:15:59:62:f1:39:b0:25:65:d8:b7:7b:a8:0b:29:2e:fe:90:
         bc:58:ac:6c:28:f8:44:3d:b6:26:2b:fe:52:60:65:1f:36:da:
         4f:c1:4c:4c:a3:84:b0:e2:67:79:6b:f1:4a:41:a2:a1:11:b8:
         ed:38:79:dc:75:b7:2f:59:97:2d:27:24:b9:c9:f3:01:98:77:
         7b:05:bf:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:19 2026 by rpki-client