This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
File:                     G_FOjQs977AwQnATDRFHrg3ZLYs.mft (raw, json)
Hash identifier:          MpPHfQzSywME6Oer8arTUnfa1JsOtfUAv+fepp3MxJQ=
Subject key identifier:   97:61:BB:76:EF:CE:70:D9:82:76:6B:4C:0F:43:C9:82:9B:4D:ED:25
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Certificate issuer:       /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial:       019C41A1A656980E36FB9EE6BEEFD720662F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
Manifest number:          0B07
Signing time:             Mon 09 Feb 2026 09:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:38 +0000
Files and hashes:         1: G_FOjQs977AwQnATDRFHrg3ZLYs.crl (hash: bK9oPbMOikC9nlMmuuKVyphrxd9VZFbz/fGzHhVcvZ0=)
                          2: HM3veogcFYi0WJB7lr909iQ8ZfQ.roa (hash: rEWeHfmczSgGJR8/ER5dg8E/KF7D8W9GBFoejJSi06I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:a6:56:98:0e:36:fb:9e:e6:be:ef:d7:20:66:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
        Validity
            Not Before: Feb  9 09:00:38 2026 GMT
            Not After : Feb 10 09:00:38 2026 GMT
        Subject: CN=9761bb76efce70d982766b4c0f43c9829b4ded25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:40:c2:00:01:88:c8:fa:3c:a5:b7:9c:b1:e1:
                    4a:5a:4d:2d:14:9d:b5:57:50:54:1c:d5:2d:f1:7f:
                    d3:10:55:b3:78:84:39:7a:ed:e1:d1:f0:0e:92:d3:
                    f8:34:7b:15:cd:0c:ae:1a:28:4c:5b:38:1d:90:74:
                    53:e0:dc:ef:85:ae:8b:ac:62:20:77:68:a5:8c:91:
                    20:6e:46:27:ba:98:e3:3f:4b:3f:f3:cc:a2:f9:28:
                    6a:4e:0f:a3:6a:85:84:ca:34:49:fe:be:08:ba:5a:
                    df:07:78:7b:25:ed:e9:03:c1:18:de:91:b0:85:9c:
                    9d:b3:d4:fe:5d:e0:97:31:83:67:ed:3d:98:91:28:
                    d0:a3:8f:1b:21:a6:a7:42:cb:d8:7f:f7:a2:d5:cf:
                    03:46:68:d1:75:5d:ac:1f:1e:5c:e7:f6:a5:bd:7e:
                    f8:0f:6a:34:19:d8:8a:66:89:d4:eb:71:98:1d:b9:
                    60:e3:e2:d3:5a:24:79:06:a1:e6:e7:a8:c4:ef:69:
                    06:ce:fa:57:72:bf:94:d3:ac:84:9c:7d:e4:cf:db:
                    54:46:6e:15:96:1d:2f:43:97:2e:1c:5a:d9:86:ce:
                    87:7c:c0:42:09:d3:f4:cd:28:b3:f6:ca:2b:e3:b0:
                    88:d1:13:e4:97:43:66:ff:83:e2:a7:78:10:da:8f:
                    c2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:61:BB:76:EF:CE:70:D9:82:76:6B:4C:0F:43:C9:82:9B:4D:ED:25
            X509v3 Authority Key Identifier:
                keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b2:38:0d:26:b3:96:1d:4b:95:41:35:78:01:79:49:63:2d:
         e3:99:9c:5a:9a:3d:01:c0:9b:da:ee:f6:40:d9:18:d7:ba:97:
         74:97:b4:ce:7f:b3:7d:1c:aa:d8:47:c3:5e:4f:fe:48:f4:aa:
         06:5a:52:7c:6f:de:3b:d7:89:87:64:1c:63:2d:aa:89:34:83:
         f6:45:7f:0b:59:7f:8c:6d:9e:a7:02:50:54:46:39:65:fc:20:
         f3:a1:b2:b8:a6:16:50:6b:af:92:85:5d:55:5e:6b:d5:7e:f3:
         8a:a5:55:d8:7a:48:fc:88:26:9c:0f:a0:73:a1:06:16:fd:53:
         e7:a2:ab:d7:9d:7d:0b:5f:be:86:d2:e2:44:3f:ff:17:2a:7c:
         eb:97:17:1c:99:e4:76:1e:58:a3:00:8e:c5:1b:a5:73:54:4e:
         c0:30:db:3f:ad:c5:e5:c3:91:8a:34:5e:c7:79:59:30:25:1d:
         f3:bb:a1:3a:ec:a3:60:fb:a6:69:c9:c8:da:7b:9a:29:16:91:
         c1:29:83:4b:53:c1:ae:1a:de:12:80:a9:42:e8:81:18:f7:31:
         c2:87:1a:63:d5:17:97:a3:59:55:bc:72:1b:3a:b7:42:d7:fa:
         88:0c:92:e5:2f:e2:37:e4:c7:d4:8c:d8:be:5a:03:44:fe:66:
         fc:6e:99:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:58 2026 by rpki-client