This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
File:                     G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft (raw, json)
Hash identifier:          44UvLkRetZpxqG+kQZInpIXUQlg9PGmoA4PFthzHNtk=
Subject key identifier:   9D:4A:92:D2:A4:CE:13:71:E8:1B:2F:70:EE:CB:BF:F2:A5:5D:2C:B1
Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
Certificate issuer:       /CN=1b68656126198373d07886bf4ab8fb06b9006780
Certificate serial:       019C42EB7E187B37C50CA72895CC54FE086D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 15:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:55 +0000
Files and hashes:         1: AdqGNGTNFT1rSz03F0HVwK9B37I.roa (hash: cI5ji7V4dg8v9ui9zXXCNsMNEyJTysTdpdklDgc65jE=)
                          2: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl (hash: uBkzE8gqRiHyFrgcTDjR8MRb3aUSkKsxqviGZREPd6o=)
                          3: SiR8FHHKdbXqmwMkjZZOq7HZtxo.roa (hash: mkRGoCYQs5pO/fqORGXARxwk0SLVCsNlvRMucJrxHow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:7e:18:7b:37:c5:0c:a7:28:95:cc:54:fe:08:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780
        Validity
            Not Before: Feb  9 15:00:55 2026 GMT
            Not After : Feb 10 15:00:55 2026 GMT
        Subject: CN=9d4a92d2a4ce1371e81b2f70eecbbff2a55d2cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fc:e6:a0:76:83:fc:ef:cd:29:7e:39:af:52:
                    73:17:af:de:58:2d:be:3c:2b:54:0d:83:5b:6c:df:
                    aa:a6:a8:44:86:00:7e:7b:2e:13:4e:27:ec:4d:25:
                    8b:68:43:d8:49:80:eb:a7:52:3a:a9:4a:74:0a:83:
                    bf:35:80:8d:e4:30:d7:4b:3b:4b:01:94:05:f9:b5:
                    6a:fa:96:0e:11:3e:9f:da:fa:c9:b6:c7:42:d3:b9:
                    23:9f:d6:f5:34:7d:42:3c:16:11:88:05:9f:a1:4a:
                    89:7c:e4:64:e2:1e:9d:e0:62:a5:4e:6b:6f:a8:db:
                    41:30:95:d9:85:90:2f:98:b3:46:52:57:58:2a:a0:
                    b0:f7:b5:3e:71:6c:89:8d:73:73:59:35:cc:9c:a3:
                    25:73:18:e6:b3:8b:d8:cf:01:79:7a:60:9c:ed:58:
                    b6:b0:b7:00:0f:61:5b:ef:05:50:df:e6:20:d2:09:
                    51:8f:1d:6f:d3:02:1e:89:a7:5c:3d:94:b6:c5:01:
                    c9:11:86:e4:d6:7f:b0:4b:e7:03:f0:0d:f5:8f:62:
                    9a:ee:26:db:41:e8:86:b2:56:92:9b:8a:b6:8b:a9:
                    c3:ee:52:e5:c4:2f:e4:1c:f4:c0:9c:37:4e:32:30:
                    38:39:f3:91:a8:65:05:e9:b5:09:c3:11:75:f3:f0:
                    32:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4A:92:D2:A4:CE:13:71:E8:1B:2F:70:EE:CB:BF:F2:A5:5D:2C:B1
            X509v3 Authority Key Identifier:
                keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:da:c7:b4:12:98:07:0f:7f:a2:90:09:c8:82:b8:2c:b4:0b:
         b9:ea:19:a3:51:09:42:03:09:5c:2b:2c:cf:50:f3:43:6c:26:
         a5:17:fe:49:ee:17:8b:00:8d:1b:cd:9f:1f:98:3d:29:6b:99:
         6d:92:2e:2d:81:e7:ff:82:7e:c9:2c:0b:62:1d:48:fd:89:9f:
         c7:ce:7a:b0:12:40:ca:f9:4e:4c:84:0f:90:eb:72:48:eb:f4:
         12:da:65:78:b2:3e:41:1f:6c:2d:5e:ff:a0:eb:cb:a0:14:35:
         aa:45:4a:48:b7:36:d4:96:e5:c8:c1:bf:10:1d:45:27:6b:b0:
         75:64:0f:81:63:69:13:0a:b8:88:ae:89:f9:73:14:d5:54:db:
         ed:05:09:60:8d:48:85:da:a4:3d:2b:c8:02:ed:ab:31:45:23:
         09:6f:69:13:1f:b6:cf:64:73:32:17:5f:f7:57:35:08:bf:42:
         90:e1:de:8f:41:8a:0d:f6:76:6d:ec:51:02:7d:5d:d8:57:1e:
         05:fc:42:aa:9f:87:fd:f8:cf:fb:5d:81:10:7e:ed:9e:36:c0:
         f8:7e:55:67:d0:44:42:35:51:f0:6b:2e:81:78:af:62:ed:70:
         cf:8e:89:15:80:29:de:df:fd:00:98:d4:04:b8:6e:c8:ca:ab:
         35:33:3b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:09 2026 by rpki-client