This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
File:                     cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft (raw, json)
Hash identifier:          IOjOMdG+rzYQXTQtSSfM05o7LT3B6WfXOat4EGCTNnc=
Subject key identifier:   A2:69:FE:8A:5E:58:46:76:AD:CF:03:96:82:41:B9:68:F4:12:88:AB
Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
Certificate issuer:       /CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Certificate serial:       019C416AA03A01B3FBCC55DE49A52EA6F900
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 08:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:32 +0000
Files and hashes:         1: VMe8OCfr_t5HXDVBLz0rgr2gaks.roa (hash: MtaQQQY5h3OtFKTOTJxg1rBiAaAsL5LhtWeLWQJUvu4=)
                          2: cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl (hash: 5l1FakwnXQh/p0N1YvzQ4sFb+YlRVKnKNhqBskmSxM4=)
                          3: gJdGEOm66NFVTNBH0oAB9H2an10.roa (hash: jpFzkrgSWLBJPoSMspVLyUPGM0QAIkxfsEyy3UC+Dkw=)
                          4: iGk2rj8YCAdm3k7BovgsXR_S-tk.roa (hash: Oc1cepzzGPdaTQr0Qpo8rTuwZycHeTEsjdA+8mq9b1M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:a0:3a:01:b3:fb:cc:55:de:49:a5:2e:a6:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503
        Validity
            Not Before: Feb  9 08:00:32 2026 GMT
            Not After : Feb 10 08:00:32 2026 GMT
        Subject: CN=a269fe8a5e584676adcf03968241b968f41288ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e1:32:62:30:47:73:a7:8c:f6:d4:f8:d2:e0:
                    24:a6:74:fd:e1:27:e1:87:d4:0d:b6:63:19:f1:5c:
                    0e:28:9d:b1:ca:75:92:e0:4a:24:69:67:14:31:2c:
                    51:f2:bf:b9:af:d3:7a:2a:b2:a5:05:dc:38:cd:16:
                    ec:7b:60:ab:25:db:ea:39:3d:dc:88:ff:f8:fe:25:
                    29:a6:48:09:3c:a3:03:7a:b0:6e:3c:cd:06:da:61:
                    1a:39:25:43:eb:cd:ae:c9:e7:49:c1:b6:2d:4c:6e:
                    43:17:5e:e2:32:68:aa:0a:9c:c9:93:ba:76:8f:eb:
                    22:72:f6:6d:dd:93:8b:0a:9f:0d:ac:6d:5f:95:8a:
                    37:c9:31:36:fe:33:b5:20:c9:64:8f:ab:6e:7e:89:
                    f4:8c:b8:4e:79:75:de:47:6b:1b:be:4a:a7:38:8c:
                    44:0e:9a:69:23:08:0b:52:3e:bd:2a:44:65:a0:f5:
                    e6:b8:38:0c:fd:f0:9a:a2:1c:6d:b1:e9:a4:d8:00:
                    48:c6:a0:8a:63:e8:ff:a6:4d:fd:97:f4:5a:70:99:
                    3e:2f:f3:55:69:52:2f:c0:15:2a:66:01:9d:fc:1d:
                    14:de:27:c3:b1:15:92:ca:83:ae:42:a6:86:c6:f5:
                    f2:61:8e:73:17:16:d9:0b:ce:75:88:b6:5b:7e:ec:
                    a3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:69:FE:8A:5E:58:46:76:AD:CF:03:96:82:41:B9:68:F4:12:88:AB
            X509v3 Authority Key Identifier:
                keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:aa:a9:04:06:7e:85:cb:b6:1c:50:a2:29:c9:a1:4e:80:94:
         7f:09:f6:aa:43:db:bd:cf:ce:ae:7b:6c:e5:fe:82:55:18:b8:
         a0:01:96:63:0e:41:f1:60:48:30:34:1b:61:a1:7e:60:05:cc:
         d9:71:08:13:06:c2:11:98:82:4d:60:91:3b:ca:1f:7f:d2:c2:
         b5:a8:39:58:65:9b:0e:e8:6a:1e:35:70:d0:e1:cf:1a:c6:40:
         90:50:8c:98:f0:8c:7b:c3:33:f9:5c:19:06:12:4a:c1:84:ef:
         e8:93:2b:9d:dc:a9:63:22:72:1a:4a:93:60:9d:40:af:d5:1e:
         57:50:d2:1a:85:6f:a9:0e:5d:bd:73:cb:03:38:80:84:6c:0f:
         f0:1d:c9:11:c7:26:ff:91:aa:6f:54:45:f1:b8:ad:84:f7:53:
         ce:54:48:c7:32:2a:97:1a:13:4f:1b:1d:f1:65:03:b6:f7:94:
         2a:4a:c9:26:37:5e:89:46:0f:46:dd:70:c2:46:43:26:5a:8d:
         85:6b:77:ee:98:ab:1e:26:e1:29:b4:36:42:89:c6:f5:0c:bd:
         5f:34:e2:81:07:3c:13:f2:4b:d9:2c:d7:a2:50:29:44:da:2a:
         78:bf:69:e3:17:59:75:ab:87:8d:58:92:02:33:3d:e0:36:d3:
         97:24:65:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:40 2026 by rpki-client