This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
File:                     p03gktwuTXKqfmqWDSGtTnl1izw.mft (raw, json)
Hash identifier:          k6AHej53haVKtB8/JFO5PrJKACs3F1+PIcgMfni6xGs=
Subject key identifier:   B4:40:4C:F8:0E:C7:B1:B2:78:A2:E1:87:06:E2:53:63:81:41:08:7F
Authority key identifier: A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C
Certificate issuer:       /CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c
Certificate serial:       019C40FD0ACA57F476F5183E3D7B2CCC51CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 06:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 06:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 06:00:51 +0000
Files and hashes:         1: HAOGr9qmEHLwQ55VEf6gl-wrCMY.roa (hash: 2L0cffWPWFlhQ1pCasY0Pddusud0MCUWSHUpwa9HyyE=)
                          2: p03gktwuTXKqfmqWDSGtTnl1izw.crl (hash: pJiG/R4dh8gViXgACyqDwpyY0JT1h1nr71c7hDsQf7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:0a:ca:57:f4:76:f5:18:3e:3d:7b:2c:cc:51:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c
        Validity
            Not Before: Feb  9 06:00:51 2026 GMT
            Not After : Feb 10 06:00:51 2026 GMT
        Subject: CN=b4404cf80ec7b1b278a2e18706e253638141087f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dd:a0:5e:79:68:3e:f4:9c:d6:94:48:86:f2:
                    78:b4:39:72:39:48:0d:d3:9c:08:43:95:b8:0b:60:
                    9c:21:88:8b:06:ac:6f:ba:ee:9f:48:89:aa:97:69:
                    97:64:19:48:9d:5d:16:29:21:00:c3:6f:4c:f7:ea:
                    40:5f:12:54:77:83:94:cc:7b:1c:e7:68:d7:d9:ec:
                    5c:29:b5:dd:4b:64:71:c1:b3:a5:b9:1b:bf:d8:09:
                    bf:0b:5d:99:20:51:d4:11:2f:96:27:b7:27:bb:9e:
                    b2:87:4c:f0:bd:32:2e:11:ef:e9:a8:16:02:bb:92:
                    88:27:3d:56:87:d6:7a:ef:45:3d:b9:bb:b2:dc:b9:
                    21:82:b8:90:62:8f:22:88:7c:61:5c:56:0f:3f:a8:
                    bd:fc:c5:c8:43:9f:16:b3:2c:b6:e4:2c:80:2a:3c:
                    b4:68:37:b4:d4:c5:2a:e1:31:f7:f7:bc:38:4b:4a:
                    3c:31:64:cd:10:d0:d3:3b:87:4c:a1:5b:78:cf:d5:
                    21:59:a4:c9:81:fc:d6:7c:f6:94:2b:d2:6b:f8:c5:
                    31:ae:03:ba:23:48:d6:82:1f:d0:93:9e:be:ac:91:
                    ea:fc:a4:ec:4d:78:92:39:da:eb:60:d2:00:13:25:
                    24:47:da:59:33:32:0f:57:5b:a3:4a:b3:76:51:4e:
                    f4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:40:4C:F8:0E:C7:B1:B2:78:A2:E1:87:06:E2:53:63:81:41:08:7F
            X509v3 Authority Key Identifier:
                keyid:A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:34:de:b2:d7:97:69:8c:6b:2f:cd:30:b9:b0:10:e6:81:49:
         2f:dc:6f:62:48:b6:dc:c5:ab:b8:49:63:ff:11:b9:fa:ad:16:
         92:d7:14:2e:4e:e8:3f:45:1f:15:2a:bc:c2:07:1a:07:bb:e9:
         0b:35:a5:b3:48:78:ff:3e:b5:48:f6:b4:e2:d9:d6:30:cb:27:
         8b:f0:58:4a:b6:91:92:62:98:86:5a:23:7b:59:f4:d7:24:19:
         98:9d:a0:9e:ce:7c:6f:84:fe:18:f6:3a:6c:aa:03:0e:91:6d:
         33:58:0c:4d:94:17:20:93:b4:38:33:41:b8:3c:75:af:1d:6f:
         7b:7a:f1:45:90:0d:88:ea:36:61:ac:d9:47:a2:f8:42:c5:db:
         6b:9b:44:35:de:7d:82:b8:4c:68:85:fd:b8:3e:50:47:59:0c:
         c3:71:16:d0:92:f1:af:7b:d9:81:36:b4:87:99:a9:c4:36:fa:
         27:00:79:9f:eb:d1:21:ab:d5:fd:92:36:7b:c3:11:76:c0:d2:
         12:4d:89:a1:b8:6b:32:42:4f:c8:2d:36:b0:ab:2a:d7:57:af:
         da:71:b1:eb:ac:62:1c:98:cb:e6:6c:87:2d:de:f3:fa:3c:bd:
         dc:02:af:4e:96:7b:9e:19:57:bd:5c:94:05:6d:33:d3:ce:63:
         3b:4b:39:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:23 2026 by rpki-client