This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
File:                     gou61vSRaEK74yAoT6_hDK9Z7fA.mft (raw, json)
Hash identifier:          lWCtpPtM2yNZ+u4AzrWC4MSNPv1u37FO25JNvhrKpQY=
Subject key identifier:   DF:82:13:7A:A0:06:F4:39:B6:1F:65:01:51:48:F1:66:C8:F1:46:FC
Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
Certificate issuer:       /CN=828bbad6f4916842bbe320284fafe10caf59edf0
Certificate serial:       019C4134865E8922182335094B7822170CA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
Manifest number:          0D38
Signing time:             Mon 09 Feb 2026 07:01:27 +0000
Manifest this update:     Mon 09 Feb 2026 07:01:27 +0000
Manifest next update:     Tue 10 Feb 2026 07:01:27 +0000
Files and hashes:         1: fMNCB8rD0Ip8fbF1LvyhEJtg6Gg.roa (hash: LXNlsf10QtsQkHE8Tm9n4uZsh/ON6f1nhNppQ718O5s=)
                          2: gou61vSRaEK74yAoT6_hDK9Z7fA.crl (hash: VqccYl1HBDpVLkf5zGVo5+UhyQ4TeVFoa2/wBe6nxeY=)
                          3: xG0VUDOknHsZasT5TDaZxzA4pvE.roa (hash: Xzghi2lIosJPiXM8pVY4mOf1fz9gQv7/1SCn9lu4mdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:34:86:5e:89:22:18:23:35:09:4b:78:22:17:0c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0
        Validity
            Not Before: Feb  9 07:01:27 2026 GMT
            Not After : Feb 10 07:01:27 2026 GMT
        Subject: CN=df82137aa006f439b61f65015148f166c8f146fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:89:e5:cc:4c:0e:05:6c:d6:c8:29:b2:bc:e8:
                    9a:ad:76:f7:10:6f:46:ee:64:25:a5:89:36:c1:ca:
                    ad:4f:d2:0b:e3:01:2f:bb:6a:d3:dd:b0:8e:7c:ea:
                    57:37:e9:40:06:d6:a3:02:8f:75:24:96:8a:18:14:
                    34:f7:ba:a5:4e:cf:b7:0c:84:8f:75:93:9b:3c:26:
                    38:55:ee:a1:cd:90:21:2b:fc:00:05:a6:29:dc:ae:
                    4f:89:5e:59:34:10:38:56:74:bf:80:81:7c:4f:4e:
                    53:12:ce:a0:08:29:94:f7:d2:ba:7b:55:cb:61:5a:
                    33:a5:e1:5e:72:42:b1:58:42:fc:76:5f:05:25:d5:
                    d1:6e:da:d7:7a:0e:b8:d7:29:16:50:f3:0e:40:bd:
                    49:17:19:92:dc:fd:34:16:30:43:04:7f:6e:ec:5c:
                    61:41:73:cb:ce:a3:fc:7c:74:c1:c3:0b:c7:e4:20:
                    6d:2e:16:bf:b1:f6:1b:9c:eb:c4:7c:8b:1d:cd:80:
                    a2:cc:2d:c1:0f:f4:f1:e6:12:4c:3a:38:99:ec:99:
                    dd:c7:00:56:a0:f0:ba:e6:fd:97:b5:3d:b6:aa:d8:
                    c6:fa:81:13:6c:89:49:63:89:74:02:3c:f0:85:37:
                    da:8d:9c:86:db:91:1e:7e:6b:77:52:66:89:fe:9b:
                    3a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:82:13:7A:A0:06:F4:39:B6:1F:65:01:51:48:F1:66:C8:F1:46:FC
            X509v3 Authority Key Identifier:
                keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a5:4a:3f:17:a5:ef:c3:34:99:18:96:b6:68:b5:da:c5:91:
         df:7f:d9:69:52:a9:62:ba:37:dd:07:e3:e7:19:bb:09:1b:ce:
         96:01:76:88:b4:51:52:5e:c8:ff:7c:09:a3:c6:31:d0:f0:a1:
         4a:f0:b4:d5:90:79:a8:14:0b:70:80:cf:06:92:04:44:90:36:
         a1:5c:f7:c3:44:58:2e:d6:f7:e8:fb:d3:1d:81:aa:b0:2e:2c:
         1c:b1:88:0c:b1:90:d8:e1:c4:0f:5c:ce:a9:07:91:9f:87:68:
         12:0f:c9:1b:5c:49:1b:94:db:e1:e3:17:19:c8:7f:44:db:73:
         62:f6:ad:94:bf:05:0a:e5:f6:d6:56:2c:de:1a:e6:73:d0:6c:
         13:d9:40:fe:eb:3d:64:29:af:96:8d:02:98:9c:56:d8:04:64:
         4f:fb:ff:90:95:4e:02:a0:b6:51:02:a7:08:e3:04:87:3b:5b:
         a0:de:6e:1c:b0:53:cc:10:f7:18:31:9f:14:a4:25:d9:82:cc:
         1c:56:4b:91:bd:2b:96:d3:f1:cd:3f:94:4d:cf:3a:56:25:0c:
         3a:e0:66:89:5a:63:74:b6:92:aa:2f:8a:0a:22:02:97:00:4e:
         92:41:85:77:b1:88:ee:31:4b:1b:70:38:e0:6e:8c:59:f5:9a:
         1f:4b:6a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:41 2026 by rpki-client