This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
File:                     GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft (raw, json)
Hash identifier:          LHPJc4C9mrjCNuMA0Kenxd2E8AEVeDcWsPKhnjT+avI=
Subject key identifier:   92:CE:09:F0:85:C8:CF:CB:BE:96:35:57:C5:8A:BA:28:B1:9E:4D:13
Authority key identifier: 18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
Certificate issuer:       /CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Certificate serial:       019C420F516ED2505937EFFB564551E7D2A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 11:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:25 +0000
Files and hashes:         1: GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl (hash: 09DJtKRRVWA2IsLTefWbtidx7UVimMdwmUcwIwjlFbs=)
                          2: abbbV0XVk995UrsAzYOq3iQxcEk.roa (hash: 4xNlKWkY5oZiKT7584PwOX/H1wHQW2fuOn1s1+Y8Eus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:51:6e:d2:50:59:37:ef:fb:56:45:51:e7:d2:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
        Validity
            Not Before: Feb  9 11:00:25 2026 GMT
            Not After : Feb 10 11:00:25 2026 GMT
        Subject: CN=92ce09f085c8cfcbbe963557c58aba28b19e4d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:57:a8:ff:40:66:ee:65:7e:13:1d:df:a3:ac:
                    37:5c:ec:37:50:e1:b4:4e:ee:9f:66:f4:58:fc:1c:
                    a2:8f:60:e4:88:68:6d:c7:76:77:87:f2:45:24:15:
                    9b:dc:80:7f:36:84:79:9d:1f:ab:e9:51:91:8f:4c:
                    f4:9f:eb:39:a9:ba:b0:a5:73:c7:a8:db:3d:db:7e:
                    ac:28:92:41:de:ce:2d:e6:85:0b:74:11:46:36:30:
                    59:b1:2a:2c:a1:4c:b6:3f:cd:47:77:b6:75:b0:5d:
                    05:17:82:dd:e0:d3:a7:72:c8:4f:2d:50:a9:58:19:
                    1c:31:fe:59:66:8b:6d:6f:f9:56:35:d8:35:18:e7:
                    4d:c6:70:d5:ce:f7:02:19:76:5d:5a:08:8d:97:53:
                    2a:3f:09:d8:a3:8f:c3:19:25:bd:8a:22:88:61:aa:
                    6c:ea:10:2a:c5:ff:28:ba:2f:0b:8a:76:44:56:a9:
                    df:84:0f:fb:67:85:c5:c3:e9:40:47:1b:47:fd:7b:
                    80:2d:16:fc:4f:82:b5:a3:bd:08:5c:0b:1d:79:b6:
                    96:05:8e:ab:f1:0b:ca:1b:62:00:b9:7e:63:42:5e:
                    e7:a5:32:56:4e:91:c1:06:f6:06:ea:c3:47:73:cd:
                    01:fa:54:4e:56:7a:b4:bd:5f:54:11:f1:32:7e:46:
                    05:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CE:09:F0:85:C8:CF:CB:BE:96:35:57:C5:8A:BA:28:B1:9E:4D:13
            X509v3 Authority Key Identifier:
                keyid:18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:99:d9:21:15:32:c4:e4:d3:c3:d2:6c:d3:de:98:96:61:cd:
         49:8e:d1:fe:12:1f:2f:cb:98:9e:52:b2:6f:81:6c:c3:5b:7f:
         a8:58:2c:34:87:52:0c:2f:20:bb:5f:b8:79:1a:58:12:dc:01:
         02:39:e9:5e:17:61:10:4d:5b:09:e3:05:ed:7f:df:d8:29:89:
         3e:1b:95:63:75:d7:56:a9:38:26:3a:6a:fa:59:c0:8f:ab:62:
         a9:89:39:02:24:f6:d9:c5:49:b3:0d:01:83:da:48:13:2b:ca:
         1f:0b:13:5d:93:7a:19:01:9a:ea:38:be:69:ca:d2:17:43:ce:
         67:8c:bd:89:68:7f:b1:ea:f2:fc:bc:b6:c8:8d:66:57:89:c3:
         09:4a:86:6e:77:83:2f:0b:ab:1a:9f:74:5e:fa:9f:8b:35:2c:
         8b:33:bb:a5:24:44:b0:c9:47:59:32:dd:a6:e0:41:08:21:c2:
         1e:e5:30:08:8b:b4:5a:23:94:0e:2a:96:30:34:66:d0:60:77:
         4d:b7:ee:f3:fa:6c:8e:79:be:a5:81:3f:c1:63:1e:56:13:b1:
         bc:49:95:0f:37:e0:98:e3:a5:5f:65:82:a9:be:04:58:d2:fc:
         7b:56:05:31:66:28:05:c7:04:5b:04:b9:1e:f4:86:0f:eb:41:
         6b:f6:bc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:10 2026 by rpki-client