This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
File:                     gI4jjjDct1l1n7ijlNniEaKLnYc.mft (raw, json)
Hash identifier:          rTqUnSNP2XzIQaPgh4NFfvV5KMWCqBJ7W1NDsO1d8BM=
Subject key identifier:   B2:8F:E6:D8:46:5D:1F:6A:3F:CD:1D:5F:C7:6E:56:B0:FB:FB:67:F3
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Certificate issuer:       /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial:       019C329CCA663B120351F1AC683BCD2A8D8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
Manifest number:          17C1
Signing time:             Fri 06 Feb 2026 11:01:02 +0000
Manifest this update:     Fri 06 Feb 2026 11:01:02 +0000
Manifest next update:     Sat 07 Feb 2026 11:01:02 +0000
Files and hashes:         1: 6K4rT6VCuHtrpHkb6XBvfHzGcts.roa (hash: rcgp9RRt2ZMAtK8hgAgj71whrGluIkO7wLBZN77JUi8=)
                          2: 7H4eovIj7ri5a4YGeazmMZD4xU0.roa (hash: VG6bKSTJ2U4Zytr4AzXi09offh8427MPVKqZ8LWMbF8=)
                          3: C7uI61q8dQVU_3fsVaMtwm-r8h4.roa (hash: j2Y8Kx7Kbyv7kbNZrbep36yCj0SwPksojFDFgp+to00=)
                          4: EsSyiXnC44Xl8fO-3wz0FTDHjxQ.roa (hash: RCqvNh4i3hyPp+Oe+ChUyeaHuVCxT8Wqs4E9vLq+3Wo=)
                          5: TJcBJB8tMVwgDD5VmpPQL_K5MUc.roa (hash: SHSnvcEgiE0T0omJOGKRwDEpcU7UTWSZBFiCrzeaHso=)
                          6: aLeBPPf7ugWBDmXZtGstFAYR5d8.roa (hash: WCjwJf715go5YX++trIsBUfbf3PUAGqQfhdqAZp7NwQ=)
                          7: cFNkpBBI6QgxmqXdNxyE4i3ZWnQ.roa (hash: Tq1d2AHFpLFiKaiI1LAqCi5XawIGiQzqgQJ+E8gkzHI=)
                          8: gI4jjjDct1l1n7ijlNniEaKLnYc.crl (hash: +eAnTe6z04Ph90OkcB92D5py5klfPNPJFoIMC1N7uTo=)
                          9: rqerlNmrLuq2_e9gT61g1lPKhKw.roa (hash: baZcLs1YVGyRyT3FzbboyPeCvMFaa7u6Y1jXFJdiXQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:32:9c:ca:66:3b:12:03:51:f1:ac:68:3b:cd:2a:8d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
        Validity
            Not Before: Feb  6 11:01:02 2026 GMT
            Not After : Feb  7 11:01:02 2026 GMT
        Subject: CN=b28fe6d8465d1f6a3fcd1d5fc76e56b0fbfb67f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:04:76:06:91:a6:d3:7f:7d:4c:11:08:6d:90:
                    e8:2e:06:87:e1:56:6f:5e:a5:51:a5:f1:7c:da:ac:
                    09:d4:00:c6:88:5a:9b:27:3c:d1:06:cc:d0:56:e1:
                    36:0e:c4:4d:cb:cf:0a:24:90:23:bd:2c:69:be:39:
                    3d:6e:ad:76:b8:b1:a8:5c:f5:88:88:87:a0:39:a7:
                    22:a5:d6:d5:ba:69:84:08:55:b0:94:9b:38:b1:83:
                    39:03:90:9e:85:8b:e5:ee:db:ce:a2:4f:df:c9:76:
                    f7:82:05:d2:74:58:3c:a6:0b:46:c8:ce:f6:bb:fd:
                    6c:99:d5:cb:05:c4:1f:18:45:8a:1e:12:e3:b5:e9:
                    c6:cb:1d:8b:43:a6:13:27:73:2f:e2:50:bc:81:9c:
                    e5:4b:8f:41:86:f3:4e:d3:02:34:4a:7f:15:54:47:
                    ed:81:18:ec:ad:93:17:31:5c:51:f3:7e:98:8c:45:
                    42:5c:de:18:e1:43:64:2c:0c:a5:11:f2:de:5f:c9:
                    de:24:f3:38:d5:85:5b:7e:33:61:a7:5f:32:bc:29:
                    4d:43:61:24:cd:34:e0:22:fb:08:70:06:e7:3f:62:
                    b7:87:4d:c6:33:b0:13:c5:39:15:3f:42:80:19:15:
                    12:ea:e5:7f:d2:c4:0e:56:70:84:d0:ad:e1:5e:6e:
                    22:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:8F:E6:D8:46:5D:1F:6A:3F:CD:1D:5F:C7:6E:56:B0:FB:FB:67:F3
            X509v3 Authority Key Identifier:
                keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:f2:92:70:77:de:e3:3e:db:2c:d6:3a:de:d9:a1:25:a1:21:
         cf:6c:9e:12:52:bc:65:bf:67:cd:e6:67:ba:36:d2:fe:98:40:
         b8:32:9b:d6:61:6c:22:05:a7:b0:3d:8e:39:0c:28:ee:fc:a7:
         c6:e8:c8:1b:fd:a3:e3:ca:7b:28:87:7e:de:06:6f:2c:7d:8d:
         61:65:ea:11:f1:28:94:f9:4f:2a:50:55:3b:d6:84:81:58:6c:
         e6:10:6f:36:18:cf:19:f5:ec:92:c2:31:98:59:28:25:09:45:
         80:bb:cc:a4:74:1d:99:84:8e:f1:25:18:a5:5d:16:66:54:79:
         0c:f0:0f:c5:bc:2b:8c:ce:7c:87:4e:c2:37:9b:8e:a6:40:08:
         fe:3a:65:83:c2:8d:25:17:df:45:1b:85:4a:8a:2b:00:cb:50:
         f1:c6:67:ed:2a:c4:27:ca:15:7c:19:cc:92:97:8c:1f:d6:f3:
         26:fd:fa:56:30:bf:fa:79:85:b0:56:c3:a5:b2:f9:06:da:30:
         08:96:1a:55:d5:8d:d4:8b:e9:bb:3f:41:25:55:3b:76:3e:76:
         46:f6:89:9e:01:e3:ae:3c:99:7f:e4:96:6f:00:54:b2:4a:3e:
         f4:13:b4:cf:ae:37:25:cd:12:84:17:5a:24:12:07:e1:ca:a8:
         37:5a:05:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 15:32:49 2026 by rpki-client