This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
File:                     gBfqodqvIl9FOAKjO6-WOMzNd6U.mft (raw, json)
Hash identifier:          LW0xxmNCAnL0MAbcErUM+pakPBWofeyF29uosEW7Zqc=
Subject key identifier:   78:0E:1C:C7:DC:CF:77:27:96:31:67:D8:64:D9:14:EE:8B:D9:EA:A9
Authority key identifier: 80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
Certificate issuer:       /CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Certificate serial:       019C41A1F59E01D927329420436C6C68A5E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
Manifest number:          0DB1
Signing time:             Mon 09 Feb 2026 09:00:58 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:58 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:58 +0000
Files and hashes:         1: aIIL3zN4ZUN1hFPhWa5OB2tT7BE.roa (hash: fzKmg/Y3EsolCl+9NGvW6oDouQRm2edVgKukMEtlQJI=)
                          2: gBfqodqvIl9FOAKjO6-WOMzNd6U.crl (hash: m3+aF5zmbTK19vEWSUDhmOlphfD1T/ADEQ1mENmN09w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:f5:9e:01:d9:27:32:94:20:43:6c:6c:68:a5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8017eaa1daaf225f453802a33baf9638cccd77a5
        Validity
            Not Before: Feb  9 09:00:58 2026 GMT
            Not After : Feb 10 09:00:58 2026 GMT
        Subject: CN=780e1cc7dccf7727963167d864d914ee8bd9eaa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:37:ff:37:f6:bf:b8:8f:a1:88:58:6b:14:85:
                    9b:51:77:52:f2:fc:b1:d1:49:9c:25:27:a5:57:02:
                    3c:fc:07:f8:c3:ac:65:42:db:1d:10:04:72:ec:ff:
                    fb:12:a5:cd:e0:df:67:de:83:d1:47:2d:dd:52:a5:
                    bb:dc:8d:a7:d2:2e:4d:2d:33:a0:5b:f8:c4:9b:62:
                    2f:fa:42:f1:27:fd:31:d7:ae:0e:ba:64:40:87:43:
                    86:a9:50:4b:e1:5a:7c:10:33:1a:ca:aa:7e:27:7b:
                    21:1b:f3:63:be:b9:1c:2e:96:a7:8b:5a:1a:19:33:
                    ad:5a:e0:8c:f4:46:d8:d0:b4:bb:f2:2b:e7:ed:d1:
                    b6:32:3c:5a:86:a7:13:98:e5:57:53:80:ea:55:06:
                    a0:2e:1c:03:8b:c7:9c:90:f3:dc:aa:48:8a:1d:a5:
                    bd:65:be:ab:0d:e4:f6:30:04:4c:1f:3d:30:b3:3d:
                    7a:9b:95:8a:cc:c5:a6:ea:34:ee:36:d1:88:19:21:
                    31:3b:45:a9:df:91:8a:55:64:59:ce:e6:9e:48:80:
                    82:d8:c9:a4:47:2b:db:ee:79:18:6a:5e:6c:fb:00:
                    66:17:02:5f:8d:c7:f4:f9:18:c6:b5:48:de:99:f0:
                    9c:17:2b:c8:ba:a9:dd:0a:47:01:8a:80:0b:d0:af:
                    48:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0E:1C:C7:DC:CF:77:27:96:31:67:D8:64:D9:14:EE:8B:D9:EA:A9
            X509v3 Authority Key Identifier:
                keyid:80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:05:cb:5d:ba:9f:75:ad:b5:49:1f:e3:d4:90:e9:54:1f:4c:
         76:47:52:5b:3b:38:2a:a6:2c:ed:4e:e0:e0:7e:74:71:5f:04:
         87:0a:a0:92:14:a2:21:81:53:d4:3b:66:18:a5:85:6c:82:96:
         48:ab:1a:99:f0:05:9f:22:7a:6c:78:d5:99:d0:c1:cf:e7:08:
         2c:f5:99:bf:fd:99:52:0d:d9:14:cc:49:6d:56:cf:61:ec:1a:
         4d:6f:71:63:c3:7c:38:90:34:32:4d:11:a1:0b:19:ec:b1:d6:
         87:29:2e:32:24:5e:8d:84:8a:ab:aa:d2:ab:d2:47:f2:33:bd:
         3c:9d:06:98:a5:5e:99:70:5f:ef:27:65:07:c6:e6:23:c7:5c:
         89:de:db:ba:9a:cd:15:3f:17:a6:5c:39:ef:77:3c:5a:7e:f2:
         9f:8e:82:49:47:35:e9:15:5c:26:11:6f:bb:41:18:a3:35:36:
         93:a0:a2:b2:49:3b:0b:f4:e5:70:78:0a:48:67:c6:3e:b8:2e:
         eb:b3:08:64:1e:91:ed:77:b5:6f:85:fc:e9:75:a7:0a:a8:b5:
         19:5c:14:fb:5c:15:da:62:b4:65:8d:69:42:90:13:21:53:ca:
         d5:8d:c4:ca:e0:45:83:a7:2d:84:bd:07:54:ba:9e:73:07:4e:
         2d:12:5f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:53 2026 by rpki-client