This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
File:                     ggBZa784LUmLxewrP9ZTOehbmPI.mft (raw, json)
Hash identifier:          3w3vBQIwaCV7IKpB69VBV5N89JsgV0wmpyjyvm8VpR8=
Subject key identifier:   19:54:2E:7D:F8:89:34:CC:F1:27:6B:71:ED:57:E5:FC:0F:32:60:8D
Authority key identifier: 82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2
Certificate issuer:       /CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2
Certificate serial:       019C41A1D83D21F86045BF0AC3B7A56359D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
Manifest number:          0FA8
Signing time:             Mon 09 Feb 2026 09:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:51 +0000
Files and hashes:         1: C3dW_FiIoEs6GrFhvU5lar2mS5g.roa (hash: fqgtLb5/szWJ2+3XnL0HEWrQ0seXWzzVVKN65vv4UQo=)
                          2: ggBZa784LUmLxewrP9ZTOehbmPI.crl (hash: gKXrgQ3xiunKyvFnQmjRQP9STio7tYHEaUc25O05DMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:d8:3d:21:f8:60:45:bf:0a:c3:b7:a5:63:59:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2
        Validity
            Not Before: Feb  9 09:00:51 2026 GMT
            Not After : Feb 10 09:00:51 2026 GMT
        Subject: CN=19542e7df88934ccf1276b71ed57e5fc0f32608d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:35:6b:19:2e:9c:e7:70:4f:44:a0:2e:dd:7f:
                    ef:62:62:78:52:af:3b:33:68:fb:78:1a:fe:2e:04:
                    8a:a3:78:c8:b3:73:c6:a6:f0:e8:c3:cf:58:2e:4a:
                    21:6b:20:8a:db:1c:f3:20:70:3d:e4:cd:d2:94:12:
                    13:bf:92:76:7d:d2:db:4d:fd:c2:63:2c:49:b5:53:
                    21:ef:fe:b0:63:6e:a2:3d:fc:39:93:51:f3:49:e6:
                    bf:c2:48:d4:a8:42:a9:45:1d:a0:7d:0b:af:de:12:
                    67:58:00:36:dd:a2:9a:e6:44:26:8b:9a:10:a7:44:
                    1f:05:2e:72:d0:1a:fc:94:39:b5:30:69:42:b8:d5:
                    05:5e:0a:79:d7:60:16:88:3c:5b:dd:d3:7b:59:01:
                    ad:0d:6d:9e:a5:67:84:82:05:dc:87:dd:4b:4b:5c:
                    f4:cc:ac:cf:3f:98:62:7d:94:a2:96:3c:8e:19:35:
                    f6:bb:c6:59:b0:2b:fc:24:57:05:18:0d:05:da:2d:
                    4c:d2:1d:25:90:8f:74:a9:5d:28:f7:08:90:48:01:
                    de:43:0d:30:d8:97:63:66:e8:e7:3f:6e:27:57:74:
                    29:e6:17:d9:1f:36:8c:dd:30:b8:5b:1a:fd:44:c6:
                    ae:c0:bf:52:f4:ce:53:b5:29:40:9b:12:67:f7:3f:
                    fd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:54:2E:7D:F8:89:34:CC:F1:27:6B:71:ED:57:E5:FC:0F:32:60:8D
            X509v3 Authority Key Identifier:
                keyid:82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:9b:25:82:77:b4:07:78:90:89:2f:5b:2d:99:11:08:35:70:
         18:15:1b:6e:6f:c5:3c:05:b0:cb:0c:75:07:36:62:23:73:fa:
         53:29:a2:84:ec:9e:92:b9:be:6c:32:eb:2d:e0:4b:32:94:28:
         5e:3f:7e:20:68:b1:a9:2d:22:60:4c:98:42:27:c5:41:2d:08:
         08:0a:e2:97:7f:78:07:10:db:8e:87:56:59:dc:42:26:47:55:
         09:83:8c:42:d0:db:a2:25:2e:5d:58:47:6d:80:88:af:ef:88:
         58:37:5c:ea:d9:8f:44:b0:56:4b:66:56:f3:4e:f2:49:64:2f:
         1e:22:9b:46:8d:94:0d:06:dd:30:ea:60:d4:b1:29:a5:39:fa:
         e0:ea:04:66:3e:8c:e8:ce:c9:ff:a6:c2:9e:89:35:33:2d:23:
         34:0b:b3:a7:d2:96:1f:06:c3:fc:ab:63:1b:27:36:47:05:9e:
         96:7f:69:51:d7:db:c7:18:ce:7e:3c:7b:85:c7:7a:2e:99:7d:
         49:14:ba:63:d9:b8:94:f1:c6:10:b0:62:6f:a8:37:c1:e2:38:
         32:7f:b0:8a:a8:b8:1e:06:69:27:71:42:e5:9e:9f:6b:8e:b4:
         be:f4:d1:cd:b8:dc:16:d9:e8:18:40:29:c6:59:ff:81:57:67:
         c9:2e:93:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:13 2026 by rpki-client