This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
File:                     GjHcqIfYvmBgGdChWToW_9Of1pI.mft (raw, json)
Hash identifier:          OJjaaq0R0S1wnJgLYh9ydhgasCgDUour8lmkurHhvtA=
Subject key identifier:   CA:AE:59:60:F0:E5:2C:BD:C7:D3:52:F9:49:67:EF:90:53:4B:FF:EF
Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
Certificate issuer:       /CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Certificate serial:       019C2999EE72CDB8C42FC3A6A96805FAF004
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
Manifest number:          09E8
Signing time:             Wed 04 Feb 2026 17:01:19 +0000
Manifest this update:     Wed 04 Feb 2026 17:01:19 +0000
Manifest next update:     Thu 05 Feb 2026 17:01:19 +0000
Files and hashes:         1: GQ44FZo45uadx5xa67VPxM3MWOc.roa (hash: uTq3D6bK0frbt9f5N6hf9Vhq6zN5k3gerfpDd5Jzok8=)
                          2: GjHcqIfYvmBgGdChWToW_9Of1pI.crl (hash: QLk899VKbz4UX/w5T10pzwX17yewpiGAnaMcToNSWT0=)
                          3: gBNRmzSrEizMbcJUH5GuHVirsuc.roa (hash: CTTPqsoELtrrnKPCDm5NIDhaVqO6sNQ6f6XzK5l53dY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 17:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:29:99:ee:72:cd:b8:c4:2f:c3:a6:a9:68:05:fa:f0:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692
        Validity
            Not Before: Feb  4 17:01:19 2026 GMT
            Not After : Feb  5 17:01:19 2026 GMT
        Subject: CN=caae5960f0e52cbdc7d352f94967ef90534bffef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:81:c3:e4:57:7e:e7:a5:5e:fe:56:b2:1b:93:
                    c3:c7:52:ed:e9:3a:4b:31:78:71:52:e1:bf:a9:8e:
                    87:32:a8:5d:02:ac:10:3d:e3:1d:13:30:49:91:28:
                    b7:9d:18:77:b2:46:5c:c9:a2:ad:b4:2d:f7:03:95:
                    e5:e5:d2:30:58:2f:0c:a3:84:6e:76:fb:f2:ee:c7:
                    12:b1:94:82:93:82:fe:02:68:f8:9f:81:15:e0:38:
                    4c:ef:98:f6:7c:d2:dc:e7:47:73:cf:c1:de:3e:a0:
                    38:1f:c7:4f:c1:df:a9:8d:43:86:86:70:1d:51:a5:
                    03:f0:57:72:12:d6:42:f7:29:c3:6f:cd:ac:c6:18:
                    36:27:54:89:9e:27:31:0f:24:78:5a:e0:ad:c9:e7:
                    b5:19:2e:47:fc:a4:dc:f5:da:c0:7e:fc:b3:94:2b:
                    f1:84:ef:84:8e:fe:7d:46:d2:d5:f9:4a:5f:27:98:
                    c8:1e:14:ca:dd:0a:20:b5:31:43:4a:dd:53:70:c8:
                    6e:00:74:f7:b0:53:4d:e3:c4:4d:42:f2:4b:16:f9:
                    38:aa:e5:37:a9:57:09:02:7a:ea:78:99:0d:8d:b8:
                    1e:c6:a0:89:f6:f5:8f:b5:42:99:61:37:26:65:5c:
                    f9:cd:67:c1:5b:8b:75:51:36:09:b6:b7:66:8d:e6:
                    4d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AE:59:60:F0:E5:2C:BD:C7:D3:52:F9:49:67:EF:90:53:4B:FF:EF
            X509v3 Authority Key Identifier:
                keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:81:3e:2e:ed:5b:ef:a7:07:2a:83:25:1a:b2:2a:ea:e1:ea:
         d7:e5:7a:db:65:74:bd:d4:9d:0f:a9:aa:84:59:ae:4f:7e:0b:
         66:47:06:4f:99:37:66:be:8a:9b:95:2e:34:f1:ac:b8:78:44:
         e8:e1:f5:de:56:1d:20:de:bf:52:b1:12:7f:7e:25:da:2c:61:
         9e:3f:7c:63:67:25:9b:15:63:05:ae:a1:86:cf:f1:78:18:0a:
         ff:cb:d4:04:73:0d:79:b2:20:15:ec:63:48:74:93:2d:c5:db:
         30:a4:e7:0a:f8:df:dd:10:5b:41:0b:a7:a4:f2:ac:23:eb:6f:
         b5:55:b2:70:1b:75:fa:54:98:e9:3a:aa:07:21:89:c2:e0:30:
         2d:df:de:8c:52:75:39:4b:e0:b2:b8:06:08:f8:82:d4:cf:0e:
         bc:c0:2e:d3:f8:ae:54:1b:22:87:5b:43:ac:a3:17:ea:10:f7:
         ab:ae:cd:eb:9b:a0:b3:30:96:31:0b:92:b3:2d:12:78:a8:dc:
         cd:9f:49:d8:49:c1:34:52:a1:0a:fa:33:23:6c:3b:e7:18:a1:
         9f:29:bb:83:6e:65:90:c5:83:db:b3:fd:9b:9b:13:4a:35:88:
         ff:5a:14:86:e0:c0:0b:a4:b1:c4:b2:59:e4:88:91:02:59:0d:
         50:4d:8f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 21:57:21 2026 by rpki-client