This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
File:                     o8-bZGUWkotdBsKoGestvA_pkgo.mft (raw, json)
Hash identifier:          Q6GclHQuMcBS8vCTbbKIo6wx9Bg9o4owX4e3L31F5Ns=
Subject key identifier:   28:FC:F2:09:3D:CA:EA:53:9B:12:D9:ED:30:DC:40:10:27:F6:1A:DF
Authority key identifier: A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
Certificate issuer:       /CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Certificate serial:       019C446B9E5EF24817ED2073548B7DAA4FD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
Manifest number:          0264
Signing time:             Mon 09 Feb 2026 22:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:29 +0000
Files and hashes:         1: 699-AVQHq9A-mOz16n5eWo61zOY.roa (hash: qmU7lIRPt6s/fJ1Asi4/dDcElLOynVYiN3n5hO5Ttcc=)
                          2: o8-bZGUWkotdBsKoGestvA_pkgo.crl (hash: TGxLUzQZsH4jJa4SVRE4nT9s9+CcNr7bXw1jqii4sME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:9e:5e:f2:48:17:ed:20:73:54:8b:7d:aa:4f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
        Validity
            Not Before: Feb  9 22:00:29 2026 GMT
            Not After : Feb 10 22:00:29 2026 GMT
        Subject: CN=28fcf2093dcaea539b12d9ed30dc401027f61adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8e:86:c2:c1:1e:9d:af:6e:68:ef:ae:b2:ed:
                    d6:05:4a:dc:58:bf:99:d8:95:9d:09:e2:73:b5:27:
                    cd:0d:b7:27:d5:e3:85:2d:78:7b:8f:df:94:f5:35:
                    66:e9:c1:26:f1:04:99:a3:dd:f4:57:4b:18:8b:8b:
                    50:8f:17:9f:65:a6:c8:3b:ef:62:a6:7c:55:98:a8:
                    31:1d:f2:0f:03:ca:49:3f:de:26:3b:8c:dc:6f:a2:
                    d2:10:00:90:82:99:9a:a3:34:4d:9f:b5:35:29:b7:
                    71:25:a5:18:30:8d:7e:75:9d:09:c5:b1:5c:e4:cf:
                    c0:a9:bd:ac:e3:cb:5d:a5:98:ed:8f:f8:54:50:c1:
                    80:05:ab:5f:df:2b:f9:c8:ae:5c:79:09:38:4e:ee:
                    f8:e5:c5:7e:49:68:15:83:07:95:25:b8:16:f2:73:
                    ed:5f:66:97:d0:73:e9:bc:4e:9a:8b:d1:d3:6c:d6:
                    fb:f8:a5:19:4e:ae:81:77:0f:13:a4:16:3c:0e:93:
                    5d:2c:04:2a:f6:9d:86:a0:bf:da:6a:7e:a7:dd:6d:
                    d3:45:58:2d:5b:cb:89:95:20:cb:d7:77:35:be:40:
                    02:b5:62:61:dd:e1:2b:e4:59:62:47:8a:8e:71:a2:
                    ad:4e:fa:40:45:8c:8a:53:75:f1:9a:8b:80:65:7a:
                    fa:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FC:F2:09:3D:CA:EA:53:9B:12:D9:ED:30:DC:40:10:27:F6:1A:DF
            X509v3 Authority Key Identifier:
                keyid:A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b9:b3:78:1e:66:84:ef:4f:75:21:a8:13:b8:04:2a:6f:e5:
         1a:83:7e:4e:4c:dd:8e:73:d9:05:7f:7b:02:be:97:1d:85:d3:
         98:00:e1:f3:52:73:93:eb:a2:9d:a2:ce:da:b4:22:d8:7d:1c:
         59:7d:a0:fe:12:9e:43:41:cb:d2:84:d9:bf:db:7c:76:8d:1b:
         a7:d3:de:79:21:bc:fa:19:c3:61:a5:b1:01:31:db:bc:5c:64:
         4e:7c:2c:09:10:2d:14:b8:8a:34:9b:56:1f:8c:1a:fc:6a:0e:
         6a:cc:fa:57:1a:86:2d:93:c2:e6:61:a2:95:3f:b4:68:8a:3d:
         8c:c5:ed:c6:c5:70:38:ce:65:d3:e8:e7:c7:b9:d2:75:ef:99:
         98:b7:01:b3:af:2a:f2:b0:26:7a:b0:58:51:46:e4:57:a1:a5:
         90:d2:2b:2b:6d:d2:27:15:6a:e0:2b:7a:68:71:63:18:76:41:
         b4:6e:fc:c5:b3:3d:de:2f:7f:a3:75:7c:cc:d9:3f:ea:a2:83:
         0b:72:b1:c8:1a:33:9d:f6:f3:46:9b:ca:84:0e:77:c3:5d:e2:
         32:e8:12:e1:2e:a0:4c:1c:33:5a:9d:fe:18:fd:b1:a4:95:c0:
         03:16:9f:02:03:0c:4c:0f:8f:61:7e:b8:e4:41:7b:e5:a4:c7:
         ff:28:46:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:51:18 2026 by rpki-client