This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/gjptycYnXW8k-Z3kFmCcYihYlt8.mft
File:                     gjptycYnXW8k-Z3kFmCcYihYlt8.mft (raw, json)
Hash identifier:          lSAI2FM8OLfcFVvEI4wKMOAF5mSY4DiX3EiNLlGiFa4=
Subject key identifier:   22:25:C9:B4:9F:19:94:21:26:FA:85:DE:8A:F9:79:AC:38:DB:3C:DB
Authority key identifier: 82:3A:6D:C9:C6:27:5D:6F:24:F9:9D:E4:16:60:9C:62:28:58:96:DF
Certificate issuer:       /CN=823a6dc9c6275d6f24f99de416609c62285896df
Certificate serial:       019C43C6CB82BAE7CC69E0D8BF9E83AB7E4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gjptycYnXW8k-Z3kFmCcYihYlt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/gjptycYnXW8k-Z3kFmCcYihYlt8.mft
Manifest number:          01B8
Signing time:             Mon 09 Feb 2026 19:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:27 +0000
Files and hashes:         1: gjptycYnXW8k-Z3kFmCcYihYlt8.crl (hash: c7mya+kUPgX3m/rZNLeiGrDKXbKSmJrUu2712eLfChs=)
                          2: lBVSgQweE1BJqbhkRvpQwbZbTyA.roa (hash: Rgz6GrVznV5GBRhmPL2LXDP9SY/swRAmcv24DHg10RU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/gjptycYnXW8k-Z3kFmCcYihYlt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/gjptycYnXW8k-Z3kFmCcYihYlt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gjptycYnXW8k-Z3kFmCcYihYlt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:cb:82:ba:e7:cc:69:e0:d8:bf:9e:83:ab:7e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=823a6dc9c6275d6f24f99de416609c62285896df
        Validity
            Not Before: Feb  9 19:00:27 2026 GMT
            Not After : Feb 10 19:00:27 2026 GMT
        Subject: CN=2225c9b49f19942126fa85de8af979ac38db3cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b7:14:35:32:34:da:14:9f:88:93:f5:7a:fe:
                    ba:2f:52:db:8d:3d:2d:ab:b9:f0:ef:2d:c6:c5:5c:
                    6f:81:74:17:f1:7b:9a:f5:75:e8:b5:f0:34:af:da:
                    45:e2:1e:34:15:1e:b5:73:9e:8f:16:e1:aa:c3:ff:
                    30:6a:5c:a6:bb:72:e2:1b:67:ff:bc:f6:8b:27:da:
                    a0:ec:92:1a:ee:69:3d:2b:54:71:29:fe:14:1c:83:
                    81:e2:5c:dd:e0:c5:ca:6f:c8:61:90:ee:b9:75:9b:
                    97:b6:37:b9:dd:80:d3:a8:54:58:68:37:34:dd:74:
                    35:03:eb:16:33:04:1d:85:16:a8:56:8c:18:85:28:
                    d3:30:9c:77:30:32:f8:8b:87:49:73:f2:2b:69:95:
                    bd:75:9a:23:32:62:a5:dd:82:4f:da:9b:9b:49:79:
                    23:7b:1d:4d:4c:1e:73:b1:10:7d:a7:69:de:1b:8e:
                    11:29:90:1d:81:13:15:4a:0a:2a:47:ff:15:99:e2:
                    95:1f:ea:07:43:f7:d2:f7:03:f0:4c:5a:ca:f7:65:
                    aa:b6:dc:f3:bc:d4:bb:41:59:44:11:b3:d1:3a:53:
                    07:7d:d6:d3:c7:19:ac:20:c3:90:1d:61:ef:0f:b9:
                    8f:5b:45:93:29:3d:9f:81:bb:a9:c6:d9:a7:7d:b2:
                    21:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:25:C9:B4:9F:19:94:21:26:FA:85:DE:8A:F9:79:AC:38:DB:3C:DB
            X509v3 Authority Key Identifier:
                keyid:82:3A:6D:C9:C6:27:5D:6F:24:F9:9D:E4:16:60:9C:62:28:58:96:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjptycYnXW8k-Z3kFmCcYihYlt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/gjptycYnXW8k-Z3kFmCcYihYlt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/gjptycYnXW8k-Z3kFmCcYihYlt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:aa:8c:56:f5:32:42:3e:7f:be:8c:fb:5b:c5:89:b2:b6:3d:
         d2:fb:bc:ec:aa:f6:a0:79:09:2f:0e:1a:f7:a1:5b:3f:71:5a:
         7c:c7:c8:9f:0d:06:85:f6:cb:a7:df:61:12:69:36:12:72:eb:
         9c:6e:bc:71:77:05:03:82:27:40:c3:f4:f6:50:d8:1c:ea:2e:
         18:ce:d8:23:74:75:b1:1d:99:ee:72:81:35:84:cb:55:09:b9:
         65:70:fe:a1:a2:41:68:0f:62:ab:cd:8a:52:76:48:18:2b:5f:
         62:c1:2d:34:4f:29:46:5e:2f:ac:99:01:83:07:a9:e7:3c:1f:
         23:df:26:6a:eb:28:a8:67:74:af:e8:c8:ee:78:77:cb:1e:3e:
         25:21:fe:c3:cf:69:c8:45:c3:89:59:ae:1a:12:a5:f5:85:2e:
         93:eb:48:e6:cf:ce:21:04:a0:a8:ad:87:30:79:a2:30:b1:89:
         0c:ec:80:87:50:ac:ad:b9:eb:4f:10:15:1e:a8:84:14:61:22:
         9a:7c:b5:28:93:a8:ed:a0:62:e7:82:63:e1:d7:84:9f:84:d4:
         05:ec:35:34:cf:65:7d:46:b6:99:76:6c:9b:a6:7f:0f:af:57:
         58:91:34:1b:8d:37:4b:e2:ca:fd:e9:ba:4c:25:81:6a:2a:d9:
         36:b4:72:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:51 2026 by rpki-client