This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
File:                     gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft (raw, json)
Hash identifier:          ZGPpeu9VMbznYRWBl+WvuQqknb1ckvxqBmdB0Z/kR5A=
Subject key identifier:   50:E5:6D:12:DE:C2:65:F7:C7:61:37:8C:25:C2:80:C9:3E:06:92:09
Authority key identifier: 80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
Certificate issuer:       /CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Certificate serial:       019C4434E7EE938CF746CDE51EF675F008E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
Manifest number:          0F04
Signing time:             Mon 09 Feb 2026 21:00:43 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:43 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:43 +0000
Files and hashes:         1: gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl (hash: MWvz8OrwXIzq8Ik/PKiKlRhYGeDdeBW9kmtzEu2QpYo=)
                          2: kUYY1Q4-v9Q6exQgCpt_jTplt24.roa (hash: L8NHXT8Vz2l7Z8N60RDMTVs4PiVsANYIsY9CEDH7bQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:e7:ee:93:8c:f7:46:cd:e5:1e:f6:75:f0:08:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
        Validity
            Not Before: Feb  9 21:00:43 2026 GMT
            Not After : Feb 10 21:00:43 2026 GMT
        Subject: CN=50e56d12dec265f7c761378c25c280c93e069209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:40:24:2f:86:6c:bb:fd:dd:44:17:99:e5:db:
                    1b:2f:f4:5e:a4:a5:5c:bb:5e:94:b6:de:19:2b:1a:
                    ef:30:fd:06:f5:4e:66:d9:78:a1:5d:81:4d:b3:58:
                    81:c8:45:96:a5:67:df:98:0d:b3:3d:64:1e:e9:26:
                    0d:5b:9d:ae:36:6b:9d:c9:3e:b3:a9:a0:d1:f2:40:
                    36:df:80:03:99:b6:8c:7f:a2:d3:b4:28:ee:ec:96:
                    70:88:5a:5a:92:32:d9:d4:83:e9:9d:db:72:29:6b:
                    83:df:f5:ee:31:4a:d9:78:dd:b5:92:9d:86:19:e0:
                    36:96:71:88:31:37:7c:5c:85:c1:07:f3:66:e7:10:
                    e7:61:67:ea:ac:3f:d3:09:05:fa:b9:c9:e3:b7:59:
                    75:cf:d7:80:97:58:02:0f:1e:b5:14:94:7d:09:b8:
                    82:0c:c2:38:1f:eb:7a:21:fb:37:bc:72:e5:55:49:
                    fd:b2:e0:d4:d0:92:89:5b:a0:88:00:1f:b5:80:b2:
                    78:80:66:25:36:d9:5a:1f:76:9f:f2:97:83:bc:07:
                    f6:1a:cb:df:23:63:e7:34:65:c7:c9:31:74:b5:d1:
                    26:26:8d:4f:68:69:47:66:8a:3d:37:b1:fa:a9:bc:
                    47:f3:3e:37:b2:37:9b:98:a1:0a:d1:46:4b:83:c5:
                    55:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E5:6D:12:DE:C2:65:F7:C7:61:37:8C:25:C2:80:C9:3E:06:92:09
            X509v3 Authority Key Identifier:
                keyid:80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:eb:bf:4a:5b:45:8b:43:90:80:63:e9:3f:be:ed:81:91:07:
         8a:31:5f:06:61:79:45:4d:96:0f:06:9d:70:9b:74:a8:8e:ce:
         3a:10:56:86:67:d2:21:47:80:25:6c:1d:7f:7a:55:bb:23:44:
         2c:0a:67:c7:de:34:47:81:d2:5b:41:32:9d:11:53:e2:ad:40:
         d8:2f:e4:56:72:de:c0:5d:e3:49:44:ba:ef:0d:4d:9c:a9:97:
         1a:5c:bc:16:1f:ca:07:87:c1:b1:e4:73:cb:18:5d:cf:a9:3b:
         e6:00:36:81:eb:21:72:c3:84:7a:d9:78:82:7e:05:7e:c6:c9:
         9b:b0:b9:16:6b:fa:2f:35:d5:31:26:14:bd:e6:64:81:83:b0:
         2b:5c:b8:ba:84:da:59:19:de:13:43:92:20:ea:c0:f7:fb:dc:
         cc:db:70:b7:e1:17:09:57:e5:55:64:ae:3b:ad:70:96:e9:c7:
         dc:6b:39:cb:43:58:71:a9:90:9d:6f:6e:03:e5:bf:cb:17:8b:
         b6:78:2c:18:19:b3:8c:d9:f9:94:0e:ee:18:49:4a:88:c3:57:
         cd:fa:3b:ae:a2:24:74:b5:b8:91:51:88:89:b8:21:f4:f9:8c:
         ed:3b:5b:a8:e0:97:31:62:c4:13:10:85:0a:81:3a:0d:77:55:
         44:b0:a8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:13:54 2026 by rpki-client