This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File:                     gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier:          VKAmA7r6jCDhwX/01VihLXqn9H0iiiU7SM6Q9NeZ/9k=
Subject key identifier:   84:F2:A3:26:22:A9:52:90:C3:CA:87:1B:F6:A2:22:6B:77:71:C0:A5
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer:       /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial:       019C438FC17D103D7E76FB74BF39EDCBF3FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 18:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:20 +0000
Files and hashes:         1: ZWUErCoRp6n3sDfUTwWNxFlFwkE.roa (hash: 8RNREI6ryiba9fmNE0nRRUczZpr0WTS3WDo4j3F1+PE=)
                          2: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: mPw2WpC7OFjZWL4FpWrc87O2MaXojanA98KR5USUj8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:c1:7d:10:3d:7e:76:fb:74:bf:39:ed:cb:f3:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80043f23936622824111e8865a50002067d95a62
        Validity
            Not Before: Feb  9 18:00:20 2026 GMT
            Not After : Feb 10 18:00:20 2026 GMT
        Subject: CN=84f2a32622a95290c3ca871bf6a2226b7771c0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4d:94:2a:76:b0:43:1c:3e:20:93:1a:bb:a5:
                    09:dd:71:3c:4b:30:50:8c:bc:53:ed:d1:5d:15:d0:
                    e0:b5:aa:02:25:72:b7:13:c4:c5:00:ba:91:df:8b:
                    c2:d4:ef:d2:19:7e:97:8b:17:87:6f:80:96:db:30:
                    50:e4:5a:3e:f8:65:74:09:48:0a:e5:c3:a4:34:5d:
                    28:ac:ad:04:38:d1:38:15:5a:7c:fc:ba:f6:d7:75:
                    df:20:6f:9c:49:d6:e3:8e:52:0a:4b:0c:16:e3:b8:
                    6e:b2:35:db:15:9a:f0:10:68:28:ab:34:68:34:73:
                    da:be:54:05:8e:e2:9f:3d:f8:57:25:24:a7:08:00:
                    de:73:b7:d6:a1:b0:2c:72:fd:02:40:4b:2a:20:48:
                    38:d6:ab:63:e0:d6:ba:55:bc:05:b3:19:b9:a2:a8:
                    22:28:9f:f3:88:a9:65:61:2c:b7:48:68:8b:96:a6:
                    45:f7:7e:96:52:c3:0d:44:17:7c:92:5b:15:4e:49:
                    bb:53:69:93:fd:29:0c:c0:22:92:50:bc:29:31:c3:
                    04:8f:1c:f4:df:49:c9:10:70:da:4c:9a:24:4f:95:
                    11:57:02:7e:fb:2a:e4:62:19:83:58:48:6e:58:3f:
                    fe:2f:1b:7f:29:73:85:72:24:49:7a:e6:93:c0:c7:
                    f1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F2:A3:26:22:A9:52:90:C3:CA:87:1B:F6:A2:22:6B:77:71:C0:A5
            X509v3 Authority Key Identifier:
                keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ac:e4:e6:13:95:6d:53:e1:f0:b2:d7:6f:3c:58:74:00:9e:
         ba:86:1a:32:64:df:3e:4c:db:71:ec:0b:b4:4e:78:20:9b:0d:
         9c:36:0e:6f:2d:e8:d0:23:de:a4:f4:2c:f9:da:09:51:44:9f:
         d4:4d:55:89:5e:b3:ad:ad:19:c9:f4:db:94:9c:4b:c1:ab:b2:
         34:f7:eb:f1:70:4d:aa:9f:e2:b6:cf:e8:b3:9c:25:ae:9e:74:
         15:a6:b1:b5:01:47:ae:44:9f:4a:a3:d8:1a:fa:a9:e1:92:7d:
         be:8f:7d:9e:2b:f3:a5:5e:da:1a:33:b9:59:6d:b7:8c:cc:95:
         85:84:4d:7d:6e:f1:61:dd:10:82:fe:38:3a:6f:2d:59:2c:b4:
         07:17:c3:6f:81:b6:45:fa:b4:4c:d0:af:21:fe:f0:b8:f5:4e:
         d0:40:55:17:ab:da:d0:a3:77:4e:79:90:18:79:5c:53:af:6c:
         46:22:bc:4d:cf:48:5b:60:01:ea:69:c7:fc:56:31:1e:c8:9a:
         96:e2:2b:39:be:4b:e7:12:e2:01:c3:28:b9:f6:b7:35:43:66:
         67:d8:ad:0c:56:31:05:ae:c2:ea:1f:d7:76:13:73:4e:0d:39:
         0e:6a:b5:9b:61:99:32:22:4c:29:ad:a1:21:71:c1:5f:f3:f7:
         d1:43:60:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:46 2026 by rpki-client