This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File:                     Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier:          vsjQutvIpXPp923jqxkFAIQbNgPSwfcrNcldbhHvv6Q=
Subject key identifier:   E9:60:EF:25:62:56:2E:94:69:EF:9B:10:FF:9E:20:6A:16:B1:84:3B
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer:       /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial:       019C1D27C3847CF406DE2AD05898A6B33338
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number:          104A
Signing time:             Mon 02 Feb 2026 07:01:10 +0000
Manifest this update:     Mon 02 Feb 2026 07:01:10 +0000
Manifest next update:     Tue 03 Feb 2026 07:01:10 +0000
Files and hashes:         1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=)
                          2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=)
                          3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=)
                          4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=)
                          5: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=)
                          6: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: wB6zPhrLbXZrr2+roggvGRzjvC+RqhgttLeqXxhxACo=)
                          7: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=)
                          8: _bCrFb7VC4CCd9K-Wcu_5V2bR1U.roa (hash: 43+13/xiT3wMEpfoLe4Sy/ExJmNhgvNKxVgEkujyVA8=)
                          9: byxTcbn0R_ABtndiznyuziTHgi8.roa (hash: T2sYxuovHiigJvci2db9Vhz7uwGqQKQmouYx6Ud5yM0=)
                          10: hPKkrsj0FX97l8P5hhDoNCNjeqE.roa (hash: pR+tDQOXzEiJ05cgUzQGiwCXhXXy4kL5jERdGJNHgJ4=)
                          11: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=)
                          12: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:27:c3:84:7c:f4:06:de:2a:d0:58:98:a6:b3:33:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
        Validity
            Not Before: Feb  2 07:01:10 2026 GMT
            Not After : Feb  3 07:01:10 2026 GMT
        Subject: CN=e960ef2562562e9469ef9b10ff9e206a16b1843b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:92:43:72:74:69:1d:a9:e1:76:79:8d:4e:99:
                    79:3c:9f:4a:7c:70:98:60:82:97:af:14:4a:15:f4:
                    9d:1a:f0:3b:29:be:33:37:88:81:8d:50:bc:57:20:
                    f2:bf:2e:91:63:af:32:c8:bf:c2:fd:19:aa:bb:d7:
                    ca:7e:2c:81:ca:ce:01:b7:3e:f7:4c:80:68:db:b7:
                    c4:d6:de:5a:31:db:d8:27:7a:57:c1:fa:5c:7f:bc:
                    93:03:fb:01:a5:92:fc:c9:9a:c6:a1:1d:9a:38:6f:
                    29:30:78:8b:ff:f6:c9:48:db:7d:53:11:0b:c3:f5:
                    6a:c8:cc:f0:8f:83:53:24:52:2f:07:5a:d2:37:78:
                    cc:5f:59:5c:c5:43:91:24:d4:83:55:5b:cf:b9:72:
                    23:f1:16:dc:83:af:82:38:1a:d8:95:28:c6:9c:d6:
                    24:dc:82:d2:a5:00:ab:11:36:f7:93:83:47:6f:2a:
                    7e:a1:95:1e:bc:f0:ec:2e:93:fe:30:17:a5:c4:69:
                    f6:f1:33:a4:4c:2d:e2:eb:98:1f:3a:41:3d:6e:07:
                    81:5d:24:ed:38:09:96:f0:49:ae:84:36:a2:61:a1:
                    9f:49:eb:5e:3f:ea:f0:b7:23:b8:a0:2a:43:67:52:
                    e4:c4:ad:d3:d3:b2:91:be:c7:7a:58:99:68:1a:9b:
                    4f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:60:EF:25:62:56:2E:94:69:EF:9B:10:FF:9E:20:6A:16:B1:84:3B
            X509v3 Authority Key Identifier:
                keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f0:f3:91:95:1b:06:99:34:1e:25:30:1e:23:4f:26:a6:2a:
         27:fe:c9:c0:d5:b2:35:b8:86:48:3d:02:84:13:4d:5f:a2:2b:
         87:ac:57:7e:02:3e:b4:a9:4c:5b:8f:a0:15:7f:16:bc:49:67:
         03:c2:e1:d8:a5:65:80:b7:9c:03:b0:07:a8:a9:fd:aa:ea:4d:
         cf:e1:16:ef:15:db:d5:f4:1b:b4:fd:aa:86:01:37:8f:bc:de:
         cf:7f:01:48:db:ab:85:43:90:dc:98:da:7e:a8:f2:77:5a:04:
         b3:61:7f:6b:ae:87:f3:f2:7c:e3:24:27:e4:83:3f:e1:f7:d4:
         d4:22:83:36:0d:fc:65:3c:9b:4f:96:cc:1d:57:67:f9:e8:c3:
         2b:fc:ba:d3:96:54:b0:37:44:73:90:d3:f9:b1:7f:21:24:72:
         cd:0a:78:66:28:38:92:b3:ed:f6:67:e5:5c:2d:a5:22:09:b8:
         ef:fa:30:a0:dd:a9:e1:70:e1:27:75:ee:e1:66:b7:c4:86:17:
         0f:78:81:43:50:47:4f:de:b2:f5:66:78:a5:3c:83:1a:64:4d:
         2b:4e:e4:b9:8c:e9:50:34:7f:ae:ca:57:8e:e4:b0:2c:ca:e7:
         fd:54:89:ea:09:3c:ba:ed:d6:23:89:59:7b:05:28:70:16:28:
         60:56:39:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwdJ8OEfPQG3irQWJimszM4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2
OTczY2YwHhcNMjYwMjAyMDcwMTEwWhcNMjYwMjAzMDcwMTEwWjAzMTEwLwYDVQQD
EyhlOTYwZWYyNTYyNTYyZTk0NjllZjliMTBmZjllMjA2YTE2YjE4NDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopJDcnRpHanhdnmNTpl5PJ9KfHCY
YIKXrxRKFfSdGvA7Kb4zN4iBjVC8VyDyvy6RY68yyL/C/Rmqu9fKfiyBys4Btz73
TIBo27fE1t5aMdvYJ3pXwfpcf7yTA/sBpZL8yZrGoR2aOG8pMHiL//bJSNt9UxEL
w/VqyMzwj4NTJFIvB1rSN3jMX1lcxUORJNSDVVvPuXIj8Rbcg6+COBrYlSjGnNYk
3ILSpQCrETb3k4NHbyp+oZUevPDsLpP+MBelxGn28TOkTC3i65gfOkE9bgeBXSTt
OAmW8EmuhDaiYaGfSeteP+rwtyO4oCpDZ1LkxK3T07KRvsd6WJloGptPjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlg7yViVi6Uae+bEP+eIGoWsYQ7MB8GA1UdIwQY
MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It
MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh
LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfDzkZUb
Bpk0HiUwHiNPJqYqJ/7JwNWyNbiGSD0ChBNNX6Irh6xXfgI+tKlMW4+gFX8WvEln
A8Lh2KVlgLecA7AHqKn9qupNz+EW7xXb1fQbtP2qhgE3j7zez38BSNurhUOQ3Jja
fqjyd1oEs2F/a66H8/J84yQn5IM/4ffU1CKDNg38ZTybT5bMHVdn+ejDK/y605ZU
sDdEc5DT+bF/ISRyzQp4Zig4krPt9mflXC2lIgm47/owoN2p4XDhJ3Xu4Wa3xIYX
D3iBQ1BHT96y9WZ4pTyDGmRNK07kuYzpUDR/rspXjuSwLMrn/VSJ6gk8uu3WI4lZ
ewUocBYoYFY53w==
-----END CERTIFICATE-----
Generated at Mon Feb 2 14:05:44 2026 by rpki-client