This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
File:                     gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json)
Hash identifier:          L249T2uGsp96lQksIPKwCELWv8PdYdFKgCjBwO2AS2c=
Subject key identifier:   51:08:A2:24:91:AB:09:58:E2:22:C8:93:01:6B:B8:45:57:F5:D4:07
Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
Certificate issuer:       /CN=805c0c9f23763c037bd6884745cf8464d2db663e
Certificate serial:       019C43FDC318FC4668DB2D8525FD8FE60C5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 20:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:29 +0000
Files and hashes:         1: 1YAm7d6nHHlsRDgw1O6_EUuzw9U.roa (hash: riRb4iPkDBtyw2U0WQzBeSsFtt3y8g90iqUigaVwK4I=)
                          2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: DHaTj1myvwtDJPDhw4AN2FAya8ry0E9XlhmXv0OBkwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:c3:18:fc:46:68:db:2d:85:25:fd:8f:e6:0c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e
        Validity
            Not Before: Feb  9 20:00:29 2026 GMT
            Not After : Feb 10 20:00:29 2026 GMT
        Subject: CN=5108a22491ab0958e222c893016bb84557f5d407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1d:a5:77:99:0b:cc:b3:3f:c3:72:7b:fa:43:
                    d0:99:1f:23:25:9f:11:ee:d3:16:b6:9d:65:78:f7:
                    5b:d2:13:e6:d1:08:29:13:72:1c:19:f4:eb:ca:b8:
                    b7:c6:8c:a8:70:0f:f2:e2:03:57:20:d0:67:a9:9d:
                    55:12:ee:79:8f:8e:86:d1:b9:dc:dc:15:82:3c:b8:
                    4e:8c:31:b1:67:89:b4:1e:dc:c8:7f:db:3d:b3:f1:
                    b9:29:46:b1:f0:e1:e1:b3:c6:1a:74:10:05:bb:bf:
                    f5:80:8b:24:a2:54:5e:a3:3b:88:e7:8d:fd:b3:75:
                    4d:64:02:78:74:ff:32:a3:f5:1c:cc:09:0f:ff:56:
                    2c:89:26:50:12:ef:d8:30:ab:40:16:27:fd:97:4a:
                    a2:40:98:26:19:2d:19:bc:63:99:09:c7:8e:ae:c1:
                    b0:0e:d2:e1:d7:61:93:fd:57:e1:8f:55:d3:b5:84:
                    b7:3b:19:c3:ce:43:f2:35:59:33:11:9a:2d:3f:84:
                    47:b3:3f:df:e0:e6:37:44:b1:8b:f6:72:15:40:92:
                    dc:28:82:96:bd:4c:a6:e2:74:0f:fb:56:4a:6f:57:
                    50:e4:a0:2c:08:69:4b:e7:63:85:43:55:97:91:50:
                    3a:bb:9d:ad:c6:4b:23:f2:ad:a4:56:72:6c:56:40:
                    64:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:08:A2:24:91:AB:09:58:E2:22:C8:93:01:6B:B8:45:57:F5:D4:07
            X509v3 Authority Key Identifier:
                keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:85:9a:de:8d:59:96:0f:76:f2:56:c0:a3:d2:f4:ec:0f:be:
         e9:15:00:d1:49:66:3b:47:ce:8e:33:ee:5f:a9:07:66:d8:07:
         b4:33:f7:38:b5:49:20:29:d0:06:82:25:bd:21:3a:43:1e:82:
         a7:8e:2f:4a:dd:8e:58:f4:f9:cd:6e:85:ae:ee:27:ef:f3:34:
         96:d3:91:22:34:ea:2c:30:a0:19:14:74:03:f5:a6:7c:a9:b5:
         0c:65:1c:73:84:c9:3c:5d:0b:58:55:03:11:89:21:2e:48:e2:
         28:b8:3a:51:31:71:c4:b9:b8:f7:a7:5c:e3:31:2a:db:6a:17:
         0c:a0:41:77:83:ab:51:c9:2d:a4:04:d0:5f:1a:d0:50:3f:3f:
         f9:56:1e:a0:e6:ce:6d:d4:ad:51:4c:7a:33:d5:bf:e2:92:1b:
         e9:c2:3a:68:ab:7c:39:f7:4b:4b:73:15:32:c3:6f:40:00:9a:
         35:58:96:b1:f1:20:22:bc:cb:77:55:53:a7:9b:8e:2f:9e:c5:
         52:f8:6d:0f:f1:c7:87:08:b2:63:3e:00:93:df:63:c3:d5:b6:
         08:ab:a3:8c:34:6e:fd:bd:8b:ad:b0:cf:a0:b6:3c:63:d5:42:
         29:32:ac:c7:3c:73:a6:47:ed:83:d2:76:7c:13:b0:84:f7:eb:
         a2:d3:79:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:08 2026 by rpki-client