This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft
File:                     goiQPZDAHi1c4YeIBa1KktKK7ck.mft (raw, json)
Hash identifier:          1fw8km8iKbqJmlQP1fpXP3JpmgBDFPt9LuZdOBWSpGg=
Subject key identifier:   15:62:55:CF:3C:6D:2B:92:C7:0D:32:FD:E2:9E:FB:A1:24:40:23:7A
Authority key identifier: 82:88:90:3D:90:C0:1E:2D:5C:E1:87:88:05:AD:4A:92:D2:8A:ED:C9
Certificate issuer:       /CN=8288903d90c01e2d5ce1878805ad4a92d28aedc9
Certificate serial:       019C42EB834D47AC3236BEFD12F80893F43D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/goiQPZDAHi1c4YeIBa1KktKK7ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft
Manifest number:          0F63
Signing time:             Mon 09 Feb 2026 15:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:56 +0000
Files and hashes:         1: FKqb6xzvddOBKsdPHF3mhYAJS0k.roa (hash: 910PvDYWRjp0nPe0uzUMCv2AassoiwccQm9jYSF+i2c=)
                          2: goiQPZDAHi1c4YeIBa1KktKK7ck.crl (hash: tFhqoB/wo+KWsOqHUwfFNs79d3/pxN59worugP4rQhM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/goiQPZDAHi1c4YeIBa1KktKK7ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:83:4d:47:ac:32:36:be:fd:12:f8:08:93:f4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8288903d90c01e2d5ce1878805ad4a92d28aedc9
        Validity
            Not Before: Feb  9 15:00:56 2026 GMT
            Not After : Feb 10 15:00:56 2026 GMT
        Subject: CN=156255cf3c6d2b92c70d32fde29efba12440237a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c7:0f:e2:b8:4a:e4:b2:70:7e:6e:30:e1:d1:
                    34:6a:eb:d8:b9:f6:82:f7:e2:57:14:6d:27:7c:eb:
                    91:90:d8:8f:0f:0b:5a:eb:e2:c7:dd:6a:69:45:83:
                    07:7b:f4:8f:57:d1:60:4c:b3:d2:24:ba:04:1b:9c:
                    69:9f:6b:bd:9e:f8:e0:08:11:8d:e4:9d:26:cc:ab:
                    27:73:e6:81:2a:b7:d0:c1:c8:9e:a4:04:54:c2:61:
                    ee:d2:14:cc:b7:bc:e3:86:06:b9:8a:ed:99:a4:08:
                    e9:4f:cb:73:9f:d0:c4:9a:d4:db:34:45:6e:8b:c2:
                    9f:50:9f:d1:ce:89:d6:09:13:78:7b:73:51:6c:70:
                    17:4a:59:c6:41:7c:74:07:71:23:86:df:52:23:9b:
                    66:59:5c:84:17:61:e8:7b:f3:da:d1:c8:1a:8c:e6:
                    6f:18:8e:79:29:ab:50:e1:41:62:5a:a7:12:fd:52:
                    b5:2a:91:03:61:13:d5:59:10:79:72:d3:f9:77:ec:
                    60:52:1e:74:17:a8:61:c2:c5:92:47:52:5f:7e:e6:
                    ab:1a:1e:ca:76:33:ca:64:7a:09:da:f6:b6:76:9e:
                    fb:60:bd:0e:ee:a5:7e:64:c2:37:1b:61:a0:d1:78:
                    b1:3c:b3:03:53:72:b3:d9:fb:6e:1e:64:b8:62:02:
                    cf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:62:55:CF:3C:6D:2B:92:C7:0D:32:FD:E2:9E:FB:A1:24:40:23:7A
            X509v3 Authority Key Identifier:
                keyid:82:88:90:3D:90:C0:1E:2D:5C:E1:87:88:05:AD:4A:92:D2:8A:ED:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/goiQPZDAHi1c4YeIBa1KktKK7ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:0a:81:06:8a:b5:45:ff:a1:f2:94:92:6b:b8:a5:98:c7:72:
         36:8d:b0:b3:51:3f:f4:00:c3:ab:72:91:02:d7:8d:4b:99:e6:
         a4:ed:84:8e:28:da:90:a7:16:63:33:f5:82:37:fb:1a:a1:37:
         24:44:1a:3e:68:de:37:7a:8b:80:44:3c:e8:43:a6:54:74:99:
         6a:d6:c2:8c:ea:20:3a:2d:41:a3:eb:c1:cc:c9:17:6c:b7:92:
         da:fc:50:01:d5:2d:e9:5d:ba:e6:b3:8f:9c:ee:f5:b7:3d:e4:
         61:91:2e:fa:9c:94:1f:11:8c:8c:ba:1f:d8:36:f1:95:1e:14:
         00:1a:d1:82:8c:7e:37:61:a8:10:57:90:d1:be:42:20:26:79:
         a7:b5:e3:8d:9e:17:55:53:d2:01:59:b1:09:32:0b:96:89:3b:
         0d:7d:8b:b8:80:21:50:e0:f9:65:8f:b7:86:25:58:8e:67:da:
         1b:db:6d:a3:c7:c3:a6:c2:9d:b6:db:a4:6d:17:e6:c4:c4:4f:
         4e:28:bf:a2:87:fb:f9:be:b6:f2:e7:f7:4c:70:e0:a7:63:6e:
         41:4d:e5:90:f7:44:54:5f:9b:be:9e:96:63:7f:4f:d5:1b:04:
         da:d2:f0:aa:b2:89:90:be:8d:30:ab:77:e8:a5:59:e7:82:b5:
         0b:c2:db:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:41 2026 by rpki-client