This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
File:                     GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft (raw, json)
Hash identifier:          Ew9GgsIcrza5CsAxLZrXcHq8qwTqwpOVzMmEudclvHU=
Subject key identifier:   6A:8B:56:9E:96:83:ED:A2:FA:CF:B3:D4:DC:CE:83:32:B7:04:40:D7
Authority key identifier: 1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
Certificate issuer:       /CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Certificate serial:       019C41D8DA62DC4A5F24990FDA5CF651F46A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 10:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:56 +0000
Files and hashes:         1: GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl (hash: /uW9TENgYYyJskgGN6jt/ZBK+mrNQGIO2Hiycb+CdXE=)
                          2: LiC_HAv2ieS9qZCIroR8UZoFlPI.roa (hash: R+F8lZe1pX4qczdw7OYcz3GuxYj0Q6ggGPfm7H8FjeE=)
                          3: i1r9TcXNXsbzaMSqfIgjvx7tIUc.roa (hash: KYoEYuLGKlqcsdZuYcCfv5Zk9kbtA+bdbC5coofITqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:da:62:dc:4a:5f:24:99:0f:da:5c:f6:51:f4:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a12509e4f2a730e169937d40833bb893ee7b98c
        Validity
            Not Before: Feb  9 10:00:56 2026 GMT
            Not After : Feb 10 10:00:56 2026 GMT
        Subject: CN=6a8b569e9683eda2facfb3d4dcce8332b70440d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c7:25:87:5d:3d:12:42:d1:21:c9:40:cb:7b:
                    a9:a3:21:59:0c:d3:4b:b9:1c:10:d3:0e:d7:8a:1f:
                    f0:22:25:cc:52:a0:27:82:27:8e:17:b6:bd:8a:fa:
                    75:70:96:90:96:9c:6b:03:1f:3a:ab:f6:78:76:f0:
                    fe:cc:99:e8:d3:b4:17:f7:de:92:ca:6b:19:fe:63:
                    30:6c:8f:1c:89:ef:07:74:b3:9d:bb:15:5a:33:32:
                    92:dd:2b:ba:98:f3:91:43:53:a2:5d:6e:42:7f:8c:
                    6e:d5:07:cd:39:3c:85:6e:8b:33:45:eb:75:f8:9e:
                    be:e5:14:4e:a8:bb:f8:27:0b:96:35:d3:00:08:a0:
                    04:73:fb:f9:44:6d:f3:c0:fe:53:e0:df:1f:df:69:
                    20:55:11:f8:d8:94:ca:42:90:ff:f7:b2:2e:00:22:
                    a0:bd:cf:06:fa:e4:31:43:cf:1f:2e:6d:79:0f:ab:
                    26:35:0f:3e:fd:74:32:44:aa:cc:0a:8e:b6:dc:82:
                    b3:f5:db:5f:86:ea:55:f1:0b:08:c7:88:54:4d:13:
                    02:e7:33:da:03:d1:52:8c:45:32:7a:e8:e5:b4:93:
                    cf:bc:8d:86:20:59:ff:27:9d:82:a7:57:50:ec:a7:
                    66:20:d4:72:be:5c:98:bf:40:7e:4a:d9:d3:0e:66:
                    70:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8B:56:9E:96:83:ED:A2:FA:CF:B3:D4:DC:CE:83:32:B7:04:40:D7
            X509v3 Authority Key Identifier:
                keyid:1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ad:2d:df:ed:02:61:d8:4e:13:05:67:dd:8a:0d:42:d5:a7:
         d7:2f:ce:f0:19:3f:95:a4:7e:54:2d:1f:d3:85:44:08:0a:32:
         1f:1e:ad:ee:4c:67:75:5f:48:98:c0:e6:bb:46:a7:19:96:15:
         ac:03:0a:bb:12:e7:ae:e9:d2:77:4e:ea:09:40:df:3e:c3:1e:
         29:14:cd:25:9a:06:8a:98:76:11:ac:a9:91:7a:b6:6c:46:77:
         ff:cf:78:b7:28:51:01:84:44:2f:4c:cf:ee:9a:1d:3f:18:ab:
         d4:cd:53:dd:e2:27:b5:6a:dd:2e:7c:9f:a1:fe:8d:e8:06:e8:
         d5:c9:a8:8c:05:99:8c:d4:96:b6:c4:6f:26:16:0d:7c:0b:94:
         af:53:1b:ac:4b:2b:7f:d8:20:15:f4:d4:99:01:17:82:3c:dc:
         1e:fa:30:48:fe:9b:ea:cb:30:0d:18:51:0e:83:4d:bd:7f:26:
         91:81:3f:cd:eb:db:1c:7f:d9:bf:4b:86:00:f2:01:87:a2:e3:
         4a:7f:60:d1:2c:10:2f:49:bd:b2:a4:67:7a:1e:c2:64:01:eb:
         36:d7:30:20:01:70:75:ae:3c:1d:48:e3:6c:0c:e0:39:24:a3:
         d1:3a:08:a8:3d:02:4a:a6:b9:c7:3c:e0:aa:e2:5a:c6:f4:29:
         22:5a:e2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:28 2026 by rpki-client