This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
File:                     gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft (raw, json)
Hash identifier:          1lrIDDY6Zg4mEwUq8rSGPNpX7ROrNv1zITEfOzwpXAU=
Subject key identifier:   86:64:0B:30:8E:C4:90:B9:43:33:3D:FD:C1:88:71:28:FE:22:FB:5E
Authority key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
Certificate issuer:       /CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Certificate serial:       019C40FCB4382FDD5DBE8D457F1F90228C72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
Manifest number:          1816
Signing time:             Mon 09 Feb 2026 06:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 06:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 06:00:28 +0000
Files and hashes:         1: 8jxEfSsMBe-K4VvTnO-OwvOLMBM.roa (hash: 3hU9n5i+lk1nxy24FsPYr0quzMoUlf0Ht4DETZ7ST+s=)
                          2: TLlV6jW863bNfhyrt15RgS7DF4k.roa (hash: kGMIhvDQxFzFfEL8ihPcdM+a2HFqV1ObKxrxWA65PvA=)
                          3: gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl (hash: nhlcjLxSjpNUrq2AjcpSMRFqZWaaE29ltreS2f0lrHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fc:b4:38:2f:dd:5d:be:8d:45:7f:1f:90:22:8c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
        Validity
            Not Before: Feb  9 06:00:28 2026 GMT
            Not After : Feb 10 06:00:28 2026 GMT
        Subject: CN=86640b308ec490b943333dfdc1887128fe22fb5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:68:89:7a:d0:6f:e9:9d:db:35:a6:cd:e5:dc:
                    29:7b:2a:0a:73:ef:15:89:64:0e:96:f6:5d:fe:28:
                    f8:70:a2:13:fe:b2:70:fc:10:ce:4d:4c:f8:c0:02:
                    2c:22:1a:e9:ee:66:0f:80:e0:4e:f9:96:e7:2f:b7:
                    a9:cd:61:c0:3c:3c:42:f7:19:5a:80:90:77:23:3b:
                    32:4d:69:eb:b5:f8:90:3f:1c:03:45:a2:e7:78:3e:
                    fd:08:ba:5b:e7:ee:80:b7:2f:7e:cf:a8:03:99:d4:
                    f1:05:97:cd:18:5a:96:45:72:76:03:d6:83:b6:ff:
                    73:d4:a6:48:c7:b3:d0:1e:64:b6:2a:38:68:fc:36:
                    2f:a6:5d:65:60:6c:4d:20:9f:3e:27:25:ad:a0:4d:
                    e8:c7:48:bd:7f:36:a0:1d:d4:91:fd:96:ca:61:bc:
                    a8:7f:76:45:87:17:34:a8:a9:65:42:58:13:a9:76:
                    d5:cd:a5:66:7a:6a:0d:ca:d6:0a:69:44:5b:80:a0:
                    20:05:64:eb:d5:3f:da:a6:69:26:3e:a7:2c:a8:af:
                    a4:10:e8:41:79:d7:74:d0:e1:95:f0:db:e3:ac:ea:
                    49:fc:b2:ba:86:06:ff:65:9a:85:f6:d6:f1:da:fb:
                    17:94:8b:42:1c:b8:36:61:21:0b:7f:7f:a8:dc:f2:
                    2d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:64:0B:30:8E:C4:90:B9:43:33:3D:FD:C1:88:71:28:FE:22:FB:5E
            X509v3 Authority Key Identifier:
                keyid:80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:27:6c:2e:c6:ff:b3:a7:c6:1d:62:87:8e:24:23:3e:5d:42:
         3d:4d:c3:d1:cf:f5:36:59:96:02:f7:97:c6:6d:d1:4a:f5:c1:
         c1:a4:ec:48:ca:63:cc:11:70:80:91:43:2a:9d:42:ff:99:e7:
         66:dc:c3:12:cd:93:25:b8:62:bd:0f:ee:52:e7:a6:f9:d7:e9:
         d0:40:e4:b7:50:da:2c:3b:6d:c0:ee:a8:7d:b5:47:3f:c6:99:
         52:72:af:01:a4:0d:0e:e5:0a:64:57:c0:9b:df:c3:d4:11:2d:
         66:38:96:43:47:53:43:34:99:5e:67:67:b0:13:18:ad:a1:a1:
         82:f7:0d:91:c3:48:0d:63:ed:14:43:69:90:cf:bc:75:68:b3:
         00:f4:95:cc:36:29:74:53:13:54:d7:71:1e:3f:d8:f1:bb:80:
         e5:e7:23:be:51:9d:4a:a8:dd:ad:d6:13:be:ab:f7:e5:d3:b7:
         e4:c9:4b:0d:bc:16:51:58:2a:e9:49:23:c7:a1:0f:c7:e0:70:
         04:a5:a5:e5:4e:08:24:ad:0b:23:5e:29:e0:a0:bd:43:87:3d:
         18:d8:8d:cb:0b:a8:38:5f:9d:90:6e:b4:e6:ac:e4:a1:84:50:
         4a:7a:46:2c:d1:02:8e:d3:33:96:07:88:ba:1e:db:c8:5f:19:
         d2:18:f8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:58:56 2026 by rpki-client