This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft
File:                     Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft (raw, json)
Hash identifier:          H6GSauE8OHpNme57vvSFLKRLkzDCgnteH8wX1sQ4yNY=
Subject key identifier:   01:2C:7F:BA:15:51:29:7D:8E:8E:00:3A:A3:5C:C1:39:D8:04:06:94
Authority key identifier: 1A:BE:5E:EC:B2:3A:F5:69:AA:70:1A:7A:B1:6C:F7:AC:1F:90:F9:60
Certificate issuer:       /CN=1abe5eecb23af569aa701a7ab16cf7ac1f90f960
Certificate serial:       019C1B7062E0DA92189F92E6FE5AF52B588A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft
Manifest number:          17FA
Signing time:             Sun 01 Feb 2026 23:01:15 +0000
Manifest this update:     Sun 01 Feb 2026 23:01:15 +0000
Manifest next update:     Mon 02 Feb 2026 23:01:15 +0000
Files and hashes:         1: 0Jl1abYGtc0G0VxCIikfpEXcyQA.asa (hash: spCudA/BRA5WS4oGW3ZjJD1TfyKLPu1VOB18U9BAu44=)
                          2: Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl (hash: SmelzpJlc/Vt/yj0yfrw3J7wlsxFMnpgrZU0m50ZLjk=)
                          3: LVeS85DfebbtBcAsMZC_wog4u10.roa (hash: A1rVGsYR8Sw3aAlxQ52458EV4JvWNk3L8x2i96mTExo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:70:62:e0:da:92:18:9f:92:e6:fe:5a:f5:2b:58:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1abe5eecb23af569aa701a7ab16cf7ac1f90f960
        Validity
            Not Before: Feb  1 23:01:15 2026 GMT
            Not After : Feb  2 23:01:15 2026 GMT
        Subject: CN=012c7fba1551297d8e8e003aa35cc139d8040694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:67:15:a5:e0:0b:8f:f2:39:c0:fc:eb:3f:8f:
                    d7:9b:96:8e:c2:ef:bd:e9:b4:0e:0d:15:54:f6:00:
                    6e:ee:e1:0f:d6:e3:40:0d:2c:bb:f9:dc:a0:04:0a:
                    27:9f:8c:53:83:8a:92:6f:a8:38:0d:b9:a1:c6:7e:
                    c7:fb:54:d2:ad:02:a2:9d:a9:38:e2:f8:f5:4f:e2:
                    a4:6d:7b:fe:ad:46:f0:b2:96:e8:77:59:85:57:20:
                    a0:a1:fe:a0:86:0c:41:fd:df:61:dd:60:9c:60:ad:
                    ef:69:2b:70:e2:7b:f5:12:4d:f4:ea:ef:3e:6f:16:
                    0b:5a:ac:76:76:b2:c3:f2:0f:a4:79:3e:8a:9a:57:
                    ec:5b:42:02:e7:64:19:b5:d2:fb:3a:b6:6a:41:04:
                    e6:3c:70:f6:24:84:e3:42:ce:55:7b:f3:48:57:34:
                    e2:2d:73:a2:42:af:0a:bd:be:f8:c1:73:18:5a:14:
                    e3:4b:2f:f2:92:20:b8:7d:75:21:85:6d:2e:a9:07:
                    4e:ab:c8:dc:62:c1:69:36:5e:b5:4a:fc:2b:51:ee:
                    ae:2d:47:81:b8:55:f6:28:77:84:e8:fe:25:c8:ce:
                    7f:4f:3c:86:41:33:6c:97:94:63:a4:4d:a7:39:72:
                    db:a5:08:79:63:df:fb:61:f4:3d:a6:91:9e:59:80:
                    b5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2C:7F:BA:15:51:29:7D:8E:8E:00:3A:A3:5C:C1:39:D8:04:06:94
            X509v3 Authority Key Identifier:
                keyid:1A:BE:5E:EC:B2:3A:F5:69:AA:70:1A:7A:B1:6C:F7:AC:1F:90:F9:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:2a:35:25:e6:3c:a2:26:28:cb:55:58:ee:42:aa:4b:d4:ee:
         c2:9d:75:75:a3:63:85:b3:94:cb:da:51:8f:6a:21:3c:93:20:
         cd:83:18:b4:b2:83:c8:a1:05:f8:39:e3:16:ab:5f:1e:85:1c:
         2a:6f:6d:e6:b4:28:24:21:5f:3b:a3:0f:65:a1:a9:0f:c3:90:
         b6:67:d8:50:d0:8d:d6:ce:45:f9:9b:b1:ed:ad:20:96:3c:02:
         73:92:f1:ff:58:6b:e2:b5:19:fa:d0:3c:08:42:da:11:b1:a5:
         48:f8:ee:8a:25:c7:04:4e:3b:e2:de:c3:97:52:b9:43:d4:50:
         5b:2e:a2:d8:11:f6:b9:21:45:8b:17:2c:0e:ad:7b:4f:f3:2a:
         32:3a:e3:2f:6b:7f:73:e1:97:ad:a8:e5:8e:79:4f:c8:aa:e8:
         ee:84:d4:e2:08:c9:2e:d7:aa:19:c5:93:49:ca:87:72:c5:f7:
         ee:52:be:f7:fe:13:b0:34:60:64:73:b6:93:05:aa:e6:55:6f:
         b1:4a:1a:c7:cc:e1:50:fd:1b:45:4b:0d:ed:99:61:07:ca:75:
         fc:c4:f3:e5:26:7a:1b:39:77:19:25:17:01:31:89:e7:cd:07:
         33:d1:1f:8a:ae:47:eb:b6:12:b3:9b:eb:f9:b0:da:c3:60:ce:
         92:fd:e4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:16:03 2026 by rpki-client