This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
File:                     gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft (raw, json)
Hash identifier:          maYM/3txO9ANjpPJYcIfpTYrG1/iQZ1SpTL/OZeS9s8=
Subject key identifier:   F8:53:2A:E8:72:19:7A:B0:4E:F5:1B:AA:FD:E5:10:0C:AC:46:0A:7D
Authority key identifier: 81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
Certificate issuer:       /CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Certificate serial:       019C42EB87D7597D0B23930F15C296014933
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
Manifest number:          0F99
Signing time:             Mon 09 Feb 2026 15:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:57 +0000
Files and hashes:         1: U0VXVBNH_sq5iJd2GKeaUQVKrlM.roa (hash: 9SxTMnA/ARh1HjLKf0PfWKa0umnzt2pBGbzQr2CW6PA=)
                          2: gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl (hash: Q5w0Amfrk6Qy+nmBwjTd/HBpxpRJhGol0+c48F7lxfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:87:d7:59:7d:0b:23:93:0f:15:c2:96:01:49:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
        Validity
            Not Before: Feb  9 15:00:57 2026 GMT
            Not After : Feb 10 15:00:57 2026 GMT
        Subject: CN=f8532ae872197ab04ef51baafde5100cac460a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:65:21:3c:97:43:1c:2f:aa:3a:cd:4b:51:39:
                    9b:04:26:32:59:70:7b:44:90:26:fe:a9:cb:f6:00:
                    ec:b0:6c:dd:b7:85:c3:25:a4:bd:79:33:3b:71:fb:
                    8a:34:a8:3d:4d:b0:92:27:2e:de:e4:f6:cf:44:3b:
                    ca:c4:1c:61:ab:66:98:4a:f5:3a:82:bf:dd:5f:f5:
                    33:c9:e3:16:b6:d1:26:86:69:e8:71:32:69:30:98:
                    74:ce:95:71:2b:d0:ef:31:cd:fd:21:48:47:cb:ef:
                    3a:c1:97:f2:30:a5:07:c3:d1:d7:c0:1c:df:45:d9:
                    8d:16:17:17:50:ba:c0:a5:c3:ab:b0:62:bd:28:7e:
                    02:34:fb:fe:eb:f2:81:6f:d6:ed:bf:fd:2d:93:08:
                    dd:d5:96:d0:3e:c7:42:8c:0a:a4:aa:f8:e2:92:71:
                    d5:55:a7:21:99:a7:11:d6:b6:a3:5e:2d:26:61:20:
                    bb:6c:a3:73:62:f2:a6:28:22:fd:a3:79:bb:53:30:
                    e3:94:25:cf:21:12:40:7b:98:ab:fd:a8:40:3f:9d:
                    12:bc:59:56:cf:d3:9c:e6:ab:96:f7:8d:45:6a:81:
                    f3:35:db:14:4d:b8:e5:17:87:50:50:52:dd:6f:3a:
                    77:30:89:d6:38:51:e6:f2:f2:9b:21:07:fb:95:9b:
                    cb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:53:2A:E8:72:19:7A:B0:4E:F5:1B:AA:FD:E5:10:0C:AC:46:0A:7D
            X509v3 Authority Key Identifier:
                keyid:81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ae:46:b3:de:0c:6c:df:d8:b3:8b:b6:2a:4c:d1:b1:d1:dc:
         3b:45:74:d2:7d:d8:67:71:20:25:30:25:9d:24:17:9b:64:59:
         e5:6d:48:97:46:1e:5f:4b:bf:a2:72:99:15:c1:23:b5:d5:6f:
         24:68:d4:44:47:df:d4:39:f9:eb:5d:37:8c:dd:f4:3f:84:cf:
         d6:67:8f:52:40:88:ad:55:46:57:40:e7:4e:78:c9:d1:4a:d5:
         b0:f3:c9:26:c6:3c:bc:1d:b4:3a:2f:29:29:1a:07:76:ee:b2:
         7b:41:11:2b:db:b9:d2:be:1b:54:96:4e:e8:9b:25:fb:a9:2c:
         07:74:1f:dd:13:07:66:e8:96:1c:e9:e6:46:ba:72:8b:3a:ce:
         28:f7:78:45:ed:29:79:53:68:da:72:d7:ce:42:20:22:e9:21:
         03:4a:64:a7:9b:dd:72:40:75:56:90:74:27:33:e0:c6:84:2a:
         84:40:25:31:f3:35:b8:45:af:47:82:b4:87:31:44:7d:0f:0a:
         fb:d0:ef:69:15:e0:08:69:ee:c1:92:4b:af:53:6d:7e:d2:e2:
         95:93:c1:e1:45:54:fb:cf:1a:c0:d3:0a:84:a9:9c:c5:32:90:
         f9:c5:37:2b:44:10:2f:8a:ec:dd:be:d1:16:af:3c:65:3a:e3:
         4d:b2:c4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:04 2026 by rpki-client