This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
File:                     guY1_s7xcQnhrHiy-3IkENhHepw.mft (raw, json)
Hash identifier:          cgjv/4jSs9SJNwAUGBBwkqYZ2fq5oMLgURtd5NFDnzc=
Subject key identifier:   74:9E:83:4D:11:FC:73:9C:A0:A3:1F:74:8E:52:DC:BA:AF:F9:80:3B
Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Certificate issuer:       /CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Certificate serial:       019C420F66892A8EDDD66561F2DCFFE8B560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 11:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:31 +0000
Files and hashes:         1: Q5FhHS_MVZGd1l2ZO9zRacw2QxY.roa (hash: Wzi4Lz9Dn9AJ7LwWcDDviF0pPsw/FGU4vgm1EN+k6No=)
                          2: guY1_s7xcQnhrHiy-3IkENhHepw.crl (hash: HSdZ2tW+so3cQp+4Vxe9or2sdpIfggQ6MekXPdKNOb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:66:89:2a:8e:dd:d6:65:61:f2:dc:ff:e8:b5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
        Validity
            Not Before: Feb  9 11:00:31 2026 GMT
            Not After : Feb 10 11:00:31 2026 GMT
        Subject: CN=749e834d11fc739ca0a31f748e52dcbaaff9803b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fc:a7:6b:56:be:35:b2:38:31:d0:d4:97:8a:
                    c1:d5:83:b7:37:39:a2:68:54:d6:85:9c:c9:c4:f6:
                    78:0a:c4:85:75:43:f0:71:12:8f:4d:a1:3d:35:27:
                    b1:b8:4a:15:bc:f3:de:91:4f:57:a4:3a:ee:fc:7a:
                    12:df:5c:95:73:86:db:8a:7f:61:18:f0:f2:5f:e4:
                    a6:5b:73:7d:c6:63:60:aa:95:20:0c:8b:6c:69:e4:
                    d0:cc:65:29:8a:51:2b:20:ff:9d:ef:35:cf:cd:68:
                    00:d8:15:2a:1c:60:57:a1:c2:61:70:30:b8:24:d2:
                    53:e0:e1:93:4f:d1:6b:94:66:c9:06:47:8f:46:de:
                    7f:6d:f7:3d:b7:41:7f:d6:3e:f5:55:86:3b:41:12:
                    20:24:f7:24:f0:19:90:b4:da:6d:a3:57:ba:fe:cd:
                    20:27:88:71:bd:64:12:62:cd:a2:27:18:e1:82:51:
                    5e:58:6b:a4:bd:9e:d9:59:a3:e6:fa:87:e1:92:9e:
                    62:c0:36:bd:bd:ab:0f:f4:87:82:b1:2e:5d:1f:d0:
                    bb:3e:8b:75:72:08:ee:3e:14:eb:c1:81:38:d7:f8:
                    ba:fe:f9:79:25:0a:92:aa:cd:ad:a9:a8:33:70:c5:
                    10:35:c6:9d:06:e9:1b:1f:4d:78:8f:db:d1:d7:50:
                    a9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9E:83:4D:11:FC:73:9C:A0:A3:1F:74:8E:52:DC:BA:AF:F9:80:3B
            X509v3 Authority Key Identifier:
                keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:7a:69:a5:d9:61:6a:15:9a:2a:f3:41:2e:3f:4a:15:ef:fb:
         db:36:e7:4a:22:42:0b:28:14:dc:05:4a:01:88:fa:a0:6b:5d:
         5c:fd:44:82:51:65:10:12:7c:2d:b6:06:4a:11:37:f6:13:6f:
         70:49:ca:36:1f:7b:5a:19:7d:fd:44:00:f3:e1:b4:4f:04:c3:
         32:83:0a:d0:55:df:98:5d:64:a6:fe:36:47:c6:af:88:b4:38:
         2c:80:eb:3e:c3:01:ae:b2:64:4c:43:be:cd:ae:f1:98:0e:d6:
         56:95:d1:04:03:f9:b1:7b:32:3b:22:51:87:74:05:f0:fd:0f:
         09:1d:d7:82:40:fc:95:75:22:44:8f:3f:95:c4:3e:2f:01:96:
         ba:29:7c:04:b0:a9:44:17:66:0f:ca:4d:47:e4:87:64:94:8e:
         79:34:63:99:04:46:c7:b5:1a:0c:bd:f6:b0:f7:89:6f:be:b8:
         28:37:40:7a:fe:62:f7:15:0f:3f:13:15:e5:a3:da:fd:e5:5f:
         aa:fc:b9:db:e9:d8:d3:4b:47:99:b2:68:54:56:11:93:40:ff:
         66:38:4b:cc:a1:b1:38:ed:e8:3f:c4:20:82:82:4b:c5:c9:69:
         e0:a0:af:e9:20:f5:ee:2f:b7:73:92:e3:26:88:37:da:e4:c5:
         25:8e:0f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:01:57 2026 by rpki-client