This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
File:                     gwelIkrm2akuR-ZW3YAbEP-5Bys.mft (raw, json)
Hash identifier:          9SERsKe6D1M6WZx4YwdY929Gem1Mhsw6gokqQ03JrZM=
Subject key identifier:   34:B0:80:19:81:D3:52:D9:22:34:10:16:95:C4:EC:72:D2:ED:82:12
Authority key identifier: 83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
Certificate issuer:       /CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Certificate serial:       019C41A1621A8B074D65576A0D1C3C90747B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
Manifest number:          050E
Signing time:             Mon 09 Feb 2026 09:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:21 +0000
Files and hashes:         1: RdWRv5Q-rS2yC6uCgBMcFMzrMv8.roa (hash: fI9arYNvAPfUyU+E39rZuBfMlHVUr8jzRqIJWE8wtJ8=)
                          2: gwelIkrm2akuR-ZW3YAbEP-5Bys.crl (hash: tVkP1ty8wEUNhLtY/UGQ7b5YAVUT89XpRIgNXvpQsgY=)
                          3: wfxGYWiIUCP6iUkp5_pLsxm1lx4.roa (hash: ArA5MNsGoq16uu1LTXHkSoObxtkAg469b2rN/NS5HFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:62:1a:8b:07:4d:65:57:6a:0d:1c:3c:90:74:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
        Validity
            Not Before: Feb  9 09:00:21 2026 GMT
            Not After : Feb 10 09:00:21 2026 GMT
        Subject: CN=34b0801981d352d92234101695c4ec72d2ed8212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d4:d6:6f:ab:8e:72:ea:99:bd:6d:fa:3c:fc:
                    4f:28:41:f5:10:db:3c:ce:25:f9:42:0b:63:42:35:
                    e6:e4:cd:91:bf:09:ba:2b:b8:47:06:a9:15:8e:3f:
                    c6:8d:3a:52:a4:a0:40:81:d1:7a:da:6c:0c:25:9d:
                    79:88:57:bd:94:f1:e5:6f:28:8c:0b:05:90:cd:6e:
                    47:88:fd:e8:21:1c:8a:56:da:e2:42:7a:f5:44:ca:
                    4a:91:0c:4d:e6:ae:db:39:10:52:b3:10:67:8a:09:
                    9c:fe:0f:cd:e1:d0:7f:97:d5:e7:60:55:49:81:80:
                    8d:20:7a:ec:d4:a7:20:67:55:7c:82:28:c0:06:ad:
                    2c:e9:f2:fc:4f:ab:6a:98:68:19:b6:2d:41:34:1a:
                    08:cb:e4:19:2d:85:bb:b0:3b:aa:7f:f0:bc:12:11:
                    a5:df:0c:99:e1:47:c2:bf:45:b8:72:65:03:9f:1c:
                    47:95:df:ab:c2:d6:e9:6a:41:25:36:43:1d:c9:83:
                    03:11:79:4f:53:cc:53:f8:9b:a8:17:a5:2b:c0:f9:
                    51:72:e7:7d:e6:60:d5:23:69:74:90:7c:a8:d7:a5:
                    42:a1:c8:c5:61:80:f8:51:88:ff:cd:c6:1d:ef:0e:
                    19:07:97:61:a3:bf:19:19:9d:14:44:c2:d9:60:24:
                    ad:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B0:80:19:81:D3:52:D9:22:34:10:16:95:C4:EC:72:D2:ED:82:12
            X509v3 Authority Key Identifier:
                keyid:83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:e0:76:d8:e8:4f:34:f8:8b:c2:b8:6f:b3:95:7f:29:d3:50:
         37:cd:44:74:ba:90:dc:d1:a1:7e:d3:72:16:86:a5:d9:56:93:
         13:93:84:e4:c2:8d:b2:0f:90:34:58:86:ad:20:9b:e9:fd:5b:
         d0:c5:71:aa:77:69:62:e8:d7:bd:f8:e3:23:b7:34:d8:1b:a7:
         dc:e4:a7:b0:01:1c:6c:18:ab:7a:c7:e9:11:a4:15:eb:0e:85:
         c5:f4:e3:ee:2e:69:3d:d0:d6:7d:ab:d0:ce:82:ac:33:be:ef:
         52:9d:64:54:6a:43:57:e4:93:fd:7b:3f:7e:45:c2:43:42:e7:
         e6:2e:39:01:5b:31:48:a6:4a:d1:05:2b:67:fa:b8:09:51:29:
         76:73:8f:fe:1c:e2:a7:86:42:43:c0:5a:0b:e7:25:bd:3e:31:
         fc:35:da:81:51:dd:a7:69:a4:b6:b9:3d:a9:ef:98:49:d8:11:
         ec:e4:3f:88:bf:11:28:46:5f:b1:f2:84:40:f9:b9:b6:41:65:
         f8:f7:8c:2c:9c:a2:58:57:60:45:21:78:61:c5:b4:a8:bc:02:
         33:3a:fe:dd:55:93:e1:80:a2:ad:7f:3e:b1:6a:23:3e:0d:ed:
         6d:b9:26:4a:de:66:24:40:49:a7:c6:ee:08:23:31:42:ef:c0:
         d3:5e:7c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:24 2026 by rpki-client