This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
File:                     Gq51omzPhiEiKBakccy3wNXnFuI.mft (raw, json)
Hash identifier:          Xzs9V/ZtIfj79Blb4twjQU8bFcVzlq5Bzi0nM5JN728=
Subject key identifier:   C8:0C:68:3D:18:AA:E5:94:50:90:1D:4B:12:46:B4:99:00:87:4D:7A
Authority key identifier: 1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2
Certificate issuer:       /CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2
Certificate serial:       019C1F840641000F4C676CB53D840162ABDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
Manifest number:          0B08
Signing time:             Mon 02 Feb 2026 18:01:11 +0000
Manifest this update:     Mon 02 Feb 2026 18:01:11 +0000
Manifest next update:     Tue 03 Feb 2026 18:01:11 +0000
Files and hashes:         1: Gq51omzPhiEiKBakccy3wNXnFuI.crl (hash: B0TH0qGqrS9xB46w/P2dmh2IA4DsvTA4tgLyHNjSixk=)
                          2: NVSHB6tzwUob75xSfGz6jaNLiYE.roa (hash: +Q4isin9ctWLd5y4nbiMUVJ0M1dT5+TerwoyCULpr+o=)
                          3: Ou1S9-7Ve_CB-idLlDNc-rifkt0.roa (hash: 39EOhAHHh040SHRa6UcwZcFa8mestfBXu2NgvqotUUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 18:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1f:84:06:41:00:0f:4c:67:6c:b5:3d:84:01:62:ab:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2
        Validity
            Not Before: Feb  2 18:01:11 2026 GMT
            Not After : Feb  3 18:01:11 2026 GMT
        Subject: CN=c80c683d18aae59450901d4b1246b49900874d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e2:31:cc:c1:3f:8c:b8:ef:c1:c0:95:f7:14:
                    90:09:c2:18:5c:d8:0a:6a:59:da:43:ce:b0:09:4c:
                    af:7a:84:30:2a:9d:91:41:33:34:8f:3c:cf:7d:cf:
                    65:66:64:30:8e:95:fb:be:ea:bb:8b:6a:82:a1:1a:
                    c0:b7:f4:1a:dd:39:1b:d2:cd:55:1f:d6:a1:84:7b:
                    f8:e4:d2:c6:57:a9:e7:e1:0b:aa:55:da:d0:3c:dc:
                    60:09:7a:b2:dc:33:86:d7:20:b2:a8:00:82:56:4e:
                    22:88:16:7e:28:13:f2:6f:91:20:e1:6c:e6:dd:74:
                    d4:2d:f6:76:b4:d6:cd:28:d8:3d:b1:f0:e8:04:67:
                    b1:84:15:9f:50:9f:34:b7:58:5a:13:71:e0:a2:37:
                    01:fb:6b:d5:cf:c7:7e:11:37:8a:87:71:61:b5:88:
                    ef:e6:e7:e1:4c:9b:31:04:6a:04:46:f4:8b:85:6e:
                    69:60:c5:84:4e:b4:53:b8:19:37:6d:19:7d:6b:49:
                    28:cc:87:50:13:9d:66:96:1b:31:d0:6e:ad:e3:f0:
                    44:39:31:f6:b4:c2:ee:63:75:43:0d:80:b2:da:ec:
                    62:a9:0b:29:7d:d6:0a:f6:1c:6d:01:e1:61:7c:d7:
                    c8:6f:a7:32:24:f6:42:7a:2b:fc:8c:b1:0b:54:32:
                    95:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0C:68:3D:18:AA:E5:94:50:90:1D:4B:12:46:B4:99:00:87:4D:7A
            X509v3 Authority Key Identifier:
                keyid:1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:33:e3:47:4b:63:bf:ab:2f:ab:a1:2a:e5:d3:ba:d6:69:f5:
         4b:cb:ba:dd:4a:5b:b0:14:be:ea:c4:ee:04:38:fc:8a:33:8a:
         f3:7f:c2:96:0a:d6:24:73:86:9b:00:29:15:42:86:71:d2:f7:
         0f:4e:78:fe:fb:2a:b9:5e:e2:d4:f1:cc:ec:84:d5:0a:5e:23:
         f3:09:59:59:a0:9e:e8:07:d2:80:e0:bb:1b:15:97:52:4c:25:
         df:e9:51:02:fd:99:e8:5e:38:d5:1a:9f:c1:c1:13:f6:22:d4:
         67:ad:6b:69:84:67:7b:ca:8d:8d:ec:9a:3c:d3:8b:59:e2:76:
         ba:87:53:d3:39:80:24:26:0d:a4:1c:be:fd:6d:c0:51:62:f2:
         a1:07:f6:3e:f0:81:ff:46:5b:5d:52:7e:3c:d8:17:7c:68:4f:
         c1:3e:54:5f:ee:e1:85:d5:5e:9f:12:0c:b4:d2:fe:92:32:6e:
         72:15:01:b2:b8:cd:c0:cf:53:f0:68:6d:16:06:81:27:a9:23:
         19:87:26:12:26:05:61:9a:de:43:4b:cb:ca:af:20:10:eb:03:
         7d:9a:3e:be:ef:a2:6d:69:6b:a7:05:60:c3:1b:25:b6:9d:9b:
         cb:c1:af:78:ca:d4:69:a9:0e:67:d1:f5:6c:4a:5a:6d:61:c7:
         c1:fb:25:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 02:27:57 2026 by rpki-client