This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File:                     Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier:          gaMRFeXvwfsOs1qz8GuqscLqUlDYLBA7yzXVcjerBMc=
Subject key identifier:   11:69:8F:77:4E:8F:85:0F:05:D3:C1:5D:D9:D4:B7:C6:F5:9E:C1:89
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer:       /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial:       019C24E12C9324630133BD7C2CADA00A08CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number:          104E
Signing time:             Tue 03 Feb 2026 19:01:02 +0000
Manifest this update:     Tue 03 Feb 2026 19:01:02 +0000
Manifest next update:     Wed 04 Feb 2026 19:01:02 +0000
Files and hashes:         1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=)
                          2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=)
                          3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=)
                          4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=)
                          5: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=)
                          6: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: prHXPD3K0ud6llZ2S0L3UNtM25zddnt2Dkr2vOnRkfE=)
                          7: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=)
                          8: _bCrFb7VC4CCd9K-Wcu_5V2bR1U.roa (hash: 43+13/xiT3wMEpfoLe4Sy/ExJmNhgvNKxVgEkujyVA8=)
                          9: byxTcbn0R_ABtndiznyuziTHgi8.roa (hash: T2sYxuovHiigJvci2db9Vhz7uwGqQKQmouYx6Ud5yM0=)
                          10: hPKkrsj0FX97l8P5hhDoNCNjeqE.roa (hash: pR+tDQOXzEiJ05cgUzQGiwCXhXXy4kL5jERdGJNHgJ4=)
                          11: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=)
                          12: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 19:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:24:e1:2c:93:24:63:01:33:bd:7c:2c:ad:a0:0a:08:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
        Validity
            Not Before: Feb  3 19:01:02 2026 GMT
            Not After : Feb  4 19:01:02 2026 GMT
        Subject: CN=11698f774e8f850f05d3c15dd9d4b7c6f59ec189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:ec:fb:26:0d:a5:f6:ae:71:1d:dd:40:a4:
                    03:c7:b2:cd:22:ea:bf:20:29:44:f8:82:f5:c8:3d:
                    50:a1:d8:27:8a:38:86:bd:dd:c8:68:fc:c1:dc:22:
                    c6:47:d2:49:ea:aa:25:da:79:ea:47:26:12:1e:7b:
                    c4:8e:2b:66:7e:f7:ef:70:68:9d:7c:57:c1:9d:8b:
                    a7:c7:bb:86:51:f8:d6:99:2e:30:29:01:c1:22:31:
                    97:ea:93:dd:82:09:33:36:4b:86:48:2c:5c:b4:e4:
                    51:8c:77:ca:6a:b4:d5:f1:23:66:30:6b:8d:89:ca:
                    d7:94:18:50:ea:67:dd:e2:d8:7a:08:40:db:62:38:
                    9c:5b:f6:dd:e3:6b:ba:dc:c1:44:b0:25:87:8f:4b:
                    8f:a6:64:93:de:34:b2:a0:90:b7:3f:80:98:87:8f:
                    d8:e9:55:fa:8c:77:82:ea:9d:a4:04:b0:eb:9f:a9:
                    5d:6c:a9:bc:8f:b9:59:29:5b:ae:9e:b4:8c:e5:0d:
                    cb:52:48:ab:f4:ce:85:25:65:bc:d4:f8:73:df:55:
                    84:ff:2c:78:74:fd:b4:32:2f:00:eb:db:29:b6:3a:
                    1a:5c:0b:bd:00:d3:6f:1d:73:b8:3d:c5:8a:c5:4e:
                    a3:78:6b:2a:31:3a:d0:61:ce:b4:0b:a3:97:9b:6d:
                    bb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:69:8F:77:4E:8F:85:0F:05:D3:C1:5D:D9:D4:B7:C6:F5:9E:C1:89
            X509v3 Authority Key Identifier:
                keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:48:00:39:53:26:22:b1:5b:22:1e:21:af:8d:0e:7f:a3:5e:
         d1:c4:2c:96:d4:d2:2c:8b:d0:f5:ff:0c:c1:8c:54:ba:d2:34:
         49:5d:03:08:e9:69:c4:f6:b1:00:6f:91:98:29:bc:40:e4:8a:
         6f:9f:26:fc:3f:d7:9c:b6:8f:b5:83:b7:54:68:72:6d:fe:ee:
         3b:3d:31:b0:45:3b:9d:24:1c:12:6d:04:4b:8e:2f:b9:49:54:
         5e:a5:68:63:c8:db:c0:82:3c:df:17:27:10:64:6a:d2:34:db:
         14:54:51:0b:b5:fa:f4:60:d9:4a:c3:6f:f9:55:ad:82:b2:aa:
         95:c1:0c:11:cc:13:64:bc:25:6a:1f:86:47:88:dc:56:54:46:
         1e:35:ae:d1:4b:e7:92:d0:3d:67:38:1d:aa:ff:93:9d:f2:96:
         9f:6f:8e:19:09:12:c8:c7:5b:70:d7:5b:2d:5a:61:96:35:91:
         7e:64:24:44:07:19:f3:de:9f:6d:2d:4d:cf:44:b9:e8:a5:45:
         0d:28:3d:6c:80:34:7d:72:a9:22:5e:61:48:77:65:70:77:0e:
         e9:60:50:c1:17:51:f0:6d:82:e3:93:f2:cc:73:03:56:4e:93:
         6d:41:98:7d:05:6b:85:43:dc:fc:18:3e:8e:d8:17:27:09:33:
         48:dd:21:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 05:39:43 2026 by rpki-client