This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File:                     Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier:          MM0bk+d28bLcv9oorvr+dtcdhUr509OQN48V3T152N4=
Subject key identifier:   05:2B:6F:45:2D:EB:1F:0B:3D:10:7C:8B:02:04:F4:06:2E:ED:A7:E9
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer:       /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial:       019C2C99F8065291203B388009E1F91EA337
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number:          1052
Signing time:             Thu 05 Feb 2026 07:00:13 +0000
Manifest this update:     Thu 05 Feb 2026 07:00:13 +0000
Manifest next update:     Fri 06 Feb 2026 07:00:13 +0000
Files and hashes:         1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=)
                          2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=)
                          3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=)
                          4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=)
                          5: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=)
                          6: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: yVhkA7eAODJC17RV1OI1tOkrTieXYyMYtpPnh8fzeGQ=)
                          7: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=)
                          8: _bCrFb7VC4CCd9K-Wcu_5V2bR1U.roa (hash: 43+13/xiT3wMEpfoLe4Sy/ExJmNhgvNKxVgEkujyVA8=)
                          9: byxTcbn0R_ABtndiznyuziTHgi8.roa (hash: T2sYxuovHiigJvci2db9Vhz7uwGqQKQmouYx6Ud5yM0=)
                          10: hPKkrsj0FX97l8P5hhDoNCNjeqE.roa (hash: pR+tDQOXzEiJ05cgUzQGiwCXhXXy4kL5jERdGJNHgJ4=)
                          11: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=)
                          12: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 07:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2c:99:f8:06:52:91:20:3b:38:80:09:e1:f9:1e:a3:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
        Validity
            Not Before: Feb  5 07:00:13 2026 GMT
            Not After : Feb  6 07:00:13 2026 GMT
        Subject: CN=052b6f452deb1f0b3d107c8b0204f4062eeda7e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a5:14:a1:53:67:0a:62:4c:de:bd:62:ad:3d:
                    ae:8c:9a:0c:ee:d9:ae:7d:6d:8d:61:60:f6:3d:52:
                    dd:e1:c0:15:52:e9:42:c9:f8:9c:f0:c8:6a:28:da:
                    d2:de:a0:e7:19:b0:73:ab:af:57:a8:0d:7e:ef:e3:
                    89:73:d6:b3:e0:ef:cc:bf:49:9f:02:73:d3:bd:9d:
                    29:08:52:ec:9c:09:56:42:c2:1f:b0:64:a2:0f:f0:
                    bd:51:2f:d5:0e:ae:ef:e4:3d:c7:8d:ae:0f:0b:e1:
                    9a:d3:f7:02:30:06:ad:39:57:ad:29:56:ed:5a:24:
                    fe:43:97:10:7f:73:df:b9:25:89:9c:8f:ee:75:05:
                    6d:a7:eb:0a:88:5d:48:11:64:eb:3d:10:5e:f4:1c:
                    43:97:4c:bb:31:ce:0c:78:a4:e5:7e:2b:a8:47:26:
                    65:20:d9:aa:81:60:19:8d:91:ac:62:dc:4c:13:e4:
                    cc:a5:9d:bf:60:a1:82:cd:ab:4d:2b:fb:ba:3b:35:
                    95:b1:82:5c:90:2d:02:84:21:3d:14:d6:0e:f9:1b:
                    c7:31:61:37:e8:42:a4:3e:f4:b0:47:af:2a:5a:2a:
                    8e:41:e1:e4:c2:85:a8:47:3b:fb:cd:aa:79:e3:44:
                    c9:46:da:e5:29:13:1a:3d:f3:71:86:08:3e:92:f5:
                    a9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2B:6F:45:2D:EB:1F:0B:3D:10:7C:8B:02:04:F4:06:2E:ED:A7:E9
            X509v3 Authority Key Identifier:
                keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:3d:19:cd:09:87:d9:1f:fd:dc:45:bb:9c:dd:db:50:bc:66:
         35:c7:86:c1:ae:ca:c1:75:39:25:3d:91:7c:ac:44:ba:2b:b2:
         c3:6f:e7:df:7c:5f:ae:08:c0:cc:35:bb:e7:26:da:98:ed:71:
         cd:a7:4f:c1:72:4c:ca:e0:4f:c7:4d:76:19:b1:10:b1:06:41:
         9d:a3:8f:6a:9d:cb:b7:5c:9b:8b:db:29:e0:eb:ba:6f:9c:13:
         0c:a1:e0:ef:0b:21:94:38:8a:76:4c:2f:d7:13:d7:0d:5b:37:
         ad:43:ba:3d:d6:e8:55:70:87:d6:f3:bd:39:54:9d:d2:95:f4:
         4c:f1:4f:ee:ad:71:2a:66:19:13:92:dd:db:85:06:b6:ab:26:
         26:98:59:c3:96:93:ae:36:10:d1:17:c0:c1:4f:8b:77:20:88:
         4e:65:34:e9:19:d2:3c:91:8d:5f:78:7d:d1:d1:75:76:15:8e:
         8f:0e:9f:87:10:bb:e9:39:8d:a5:78:bb:49:77:54:ef:18:db:
         bb:d3:75:2d:fc:2a:b1:23:06:25:ef:2e:af:53:c0:36:b6:02:
         a4:03:90:89:c4:18:c3:18:fa:27:ed:93:54:92:54:ce:bf:75:
         43:ee:bb:b0:7f:0a:9f:31:c2:f7:1a:b8:b3:5e:99:fe:cd:f8:
         9f:f3:e7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 15:12:57 2026 by rpki-client