This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
File:                     G8PBvvFfS8zE50jAiVfswimg8e8.mft (raw, json)
Hash identifier:          fd8G5g9Cxb5yIhUY3UeWzSaIa4ESbIqG02T9hm3yrvk=
Subject key identifier:   A5:64:96:21:BB:20:63:60:40:CD:D5:7C:C4:A0:DE:7D:AA:74:D5:80
Authority key identifier: 1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
Certificate issuer:       /CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Certificate serial:       019C446B92444C46E6005A6CB0CA1F470183
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 22:00:26 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:26 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:26 +0000
Files and hashes:         1: DlKyBrR63naawFqSxCcY5AiE7sc.roa (hash: WQjnV83H98zboyc2IgEVyNSA+r/DYppkxai3rL8VYRs=)
                          2: G8PBvvFfS8zE50jAiVfswimg8e8.crl (hash: bIGMssLMr92KYzPJKYPLe/u6Eb8ia6NkcLrqJuLPoEk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:92:44:4c:46:e6:00:5a:6c:b0:ca:1f:47:01:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
        Validity
            Not Before: Feb  9 22:00:26 2026 GMT
            Not After : Feb 10 22:00:26 2026 GMT
        Subject: CN=a5649621bb20636040cdd57cc4a0de7daa74d580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:62:dc:21:7e:b1:ea:50:f9:dc:5c:0b:22:47:
                    3d:d9:de:1a:9a:9e:57:89:7e:ec:16:6e:66:c8:ea:
                    54:cb:35:a6:d8:0f:f4:7c:10:20:b3:a8:d9:93:36:
                    ac:db:43:18:69:f3:e6:38:45:6f:f8:45:ee:2a:44:
                    ad:dd:26:c9:7d:10:9d:69:a1:e7:8a:1f:69:b9:ed:
                    54:10:b1:ef:07:f0:80:bb:c9:a2:65:50:ec:73:01:
                    12:8a:2f:98:ce:7d:93:8c:46:a7:1d:a5:9b:94:0a:
                    28:4f:0c:84:a4:ca:e9:d5:67:6a:d3:8e:41:44:0f:
                    6e:3f:a4:29:d2:d8:e5:d5:8d:51:d5:22:c0:bd:7d:
                    6c:cc:c3:41:90:37:ab:c3:bc:7e:b6:29:be:ff:80:
                    d6:10:80:d5:b2:93:26:a7:4f:45:64:94:01:33:33:
                    0b:1f:50:bf:21:8a:b1:e5:2b:98:24:96:62:36:5e:
                    92:95:73:3c:74:19:e6:c5:7a:cd:64:64:35:6f:f8:
                    4b:28:14:2d:e1:e9:3d:7e:25:ea:0a:2c:3c:8e:8f:
                    05:8f:81:64:97:26:be:d1:da:48:a0:f0:dc:d0:38:
                    1e:98:f2:fa:b0:1b:88:20:24:0d:e2:63:1d:d7:51:
                    5b:1b:0b:29:0e:93:a4:60:58:1b:ae:c2:57:c7:d4:
                    9b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:64:96:21:BB:20:63:60:40:CD:D5:7C:C4:A0:DE:7D:AA:74:D5:80
            X509v3 Authority Key Identifier:
                keyid:1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:42:54:16:db:4e:49:70:27:ce:11:0b:16:3d:9d:6b:a8:5e:
         4b:66:72:e5:b7:c3:c1:36:00:4d:ad:cc:2d:5d:dc:1d:2c:85:
         c6:58:8d:1c:ff:7d:11:1d:ac:49:1a:cf:26:06:35:ec:f3:d7:
         75:f4:72:e7:f7:5f:e5:5d:d5:34:bb:98:f3:8a:cf:79:d4:1f:
         93:2c:2d:47:1d:eb:e8:5b:c3:df:31:85:47:eb:d1:cb:33:96:
         15:74:b9:7a:7d:6b:db:b2:c6:15:8c:f7:3f:49:1f:e9:23:ab:
         9b:40:84:73:56:10:62:3a:27:24:60:58:24:c9:98:8c:ca:ce:
         1c:e5:c2:61:2d:10:df:6e:39:9e:6b:45:71:9b:3c:e3:49:f7:
         70:2d:6f:fc:4b:f4:2f:64:a3:e8:5c:2c:e1:95:0e:45:f1:9d:
         cc:ce:aa:ad:a9:e3:31:eb:f6:23:a8:e4:66:84:0b:53:12:2b:
         02:f2:bb:1e:f6:b6:b4:09:a9:42:2f:95:7a:f9:fe:eb:c2:40:
         32:b3:6f:b2:d4:9c:63:ac:40:e2:ec:d5:50:08:c4:34:83:e0:
         10:fa:73:e1:5b:f2:1a:3d:9a:bf:34:26:96:94:e7:e1:f6:2a:
         eb:7b:58:2b:c1:c9:22:8f:8e:16:6c:38:6b:9e:52:73:74:80:
         ff:87:55:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:31:34 2026 by rpki-client