This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File:                     Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier:          LDZZFF7XnCNvZZmY7j47hBqHy00MyS3YcUcIVi5wWX0=
Subject key identifier:   0C:7F:22:5F:E2:2C:AE:43:07:29:30:BF:2E:BB:07:34:0B:5E:D6:96
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer:       /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial:       019C210491591A510D8CD2DADB4F843F66DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number:          104C
Signing time:             Tue 03 Feb 2026 01:01:13 +0000
Manifest this update:     Tue 03 Feb 2026 01:01:13 +0000
Manifest next update:     Wed 04 Feb 2026 01:01:13 +0000
Files and hashes:         1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=)
                          2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=)
                          3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=)
                          4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=)
                          5: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=)
                          6: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: e+mmTix1yUUTFDqPjcQGUKLQGNL9LfyfbPtvegKlmOc=)
                          7: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=)
                          8: _bCrFb7VC4CCd9K-Wcu_5V2bR1U.roa (hash: 43+13/xiT3wMEpfoLe4Sy/ExJmNhgvNKxVgEkujyVA8=)
                          9: byxTcbn0R_ABtndiznyuziTHgi8.roa (hash: T2sYxuovHiigJvci2db9Vhz7uwGqQKQmouYx6Ud5yM0=)
                          10: hPKkrsj0FX97l8P5hhDoNCNjeqE.roa (hash: pR+tDQOXzEiJ05cgUzQGiwCXhXXy4kL5jERdGJNHgJ4=)
                          11: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=)
                          12: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 21:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:21:04:91:59:1a:51:0d:8c:d2:da:db:4f:84:3f:66:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
        Validity
            Not Before: Feb  3 01:01:13 2026 GMT
            Not After : Feb  4 01:01:13 2026 GMT
        Subject: CN=0c7f225fe22cae43072930bf2ebb07340b5ed696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:67:28:90:16:39:c4:b1:29:c4:6e:3d:6c:18:
                    fd:87:d8:9f:52:1f:22:5b:74:28:2d:b4:3a:0d:80:
                    ca:7b:32:68:3d:63:6c:5a:a4:ef:1d:b0:90:09:74:
                    9c:8c:11:db:d4:18:88:0a:9e:19:b7:76:2b:66:3b:
                    b6:61:b6:54:3b:0c:05:ce:c0:61:48:22:2e:29:36:
                    39:95:4e:8f:03:8e:f2:98:c7:a4:eb:25:70:46:b5:
                    9a:52:30:6f:7b:3f:09:1f:fc:e5:b1:30:1e:21:e1:
                    12:b1:02:68:5b:61:2f:49:f5:cb:e3:e8:5b:89:c9:
                    4a:9c:49:16:bf:1e:77:e0:fa:a3:c0:d6:d8:39:72:
                    9d:59:92:a2:30:68:6c:c8:3d:c1:5b:8a:a7:cd:13:
                    4d:fe:6f:5c:9b:be:00:e5:c4:a9:16:19:fa:e2:85:
                    ef:89:fd:95:b5:01:17:bc:4f:b1:26:79:ed:ef:86:
                    bd:15:c0:a5:91:c0:c6:2a:a4:d7:8f:bd:2d:90:b5:
                    ee:27:e6:2f:55:70:51:be:1c:2b:8b:49:9c:b8:9b:
                    48:6b:dd:43:14:1f:fb:d7:32:f3:b3:c0:b0:7d:3c:
                    e3:38:36:07:c1:4b:a0:03:04:ce:bf:bf:e7:8a:0f:
                    4c:ba:a7:16:2f:78:bd:25:27:53:c2:ea:0d:1d:73:
                    16:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7F:22:5F:E2:2C:AE:43:07:29:30:BF:2E:BB:07:34:0B:5E:D6:96
            X509v3 Authority Key Identifier:
                keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:98:b6:93:17:27:0b:4d:3d:38:45:37:63:be:5a:4e:a0:23:
         66:1f:e8:f0:18:94:34:94:0b:c9:fa:f4:07:c7:95:1f:55:5e:
         76:1b:9a:6d:93:1b:37:97:5f:0a:b0:eb:37:29:41:d3:c4:ba:
         ad:aa:17:4b:7d:14:11:71:f9:4c:8f:bd:c1:fa:d1:85:8b:a1:
         21:76:3e:4f:6d:e1:76:a6:7a:b4:c7:03:41:27:da:a9:95:a5:
         c8:2b:02:de:d3:a6:94:eb:44:04:df:96:52:be:5a:1d:a3:a5:
         53:43:dd:99:63:48:1a:39:21:5c:88:28:c9:57:9d:8d:b5:c2:
         b4:fa:7f:da:cb:78:d0:fb:68:81:44:aa:22:0b:f1:03:8e:a7:
         19:98:db:71:d4:17:d0:d4:60:e9:6b:88:22:53:93:4e:99:1e:
         73:03:f2:6a:66:ca:ee:1e:e1:e7:a1:fb:33:e0:df:89:03:7f:
         7b:f1:39:0b:22:2a:a0:31:77:a4:0e:f7:8d:bf:25:1c:8a:82:
         e7:72:6a:84:ee:d6:4f:60:f3:bc:c1:ab:17:03:ab:94:15:06:
         42:ef:27:51:45:85:00:70:ac:5d:7e:ae:a0:b4:e6:93:1e:f5:
         d8:ca:2b:44:17:ef:c1:bf:d4:7b:b4:f6:27:4d:2f:68:f6:03:
         85:73:00:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 04:17:05 2026 by rpki-client