This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
File:                     mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft (raw, json)
Hash identifier:          /S472MH4RJHLRTRpF0OKWVIqKqKZLRYbkwCRRac8N9U=
Subject key identifier:   3D:0B:53:39:02:20:2C:9B:29:F0:02:95:37:E5:25:2A:4F:B2:13:74
Authority key identifier: 98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97
Certificate issuer:       /CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
Certificate serial:       019C41D89C24E8636E903230BC15DDE281E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 10:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:40 +0000
Files and hashes:         1: 3uI2T4FscmS1g4BxDBywDIRN1EM.roa (hash: GmArLm5Y723dPyhpNiMZSbQoSTY/TP5XBjOwFVSZTfc=)
                          2: mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl (hash: A6JiyDbO4nr/NnWJvNAmWtiy6OsVw1ro02SrOBQFPDA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:9c:24:e8:63:6e:90:32:30:bc:15:dd:e2:81:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
        Validity
            Not Before: Feb  9 10:00:40 2026 GMT
            Not After : Feb 10 10:00:40 2026 GMT
        Subject: CN=3d0b533902202c9b29f0029537e5252a4fb21374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fc:6e:30:65:9d:89:d9:4e:4f:d1:6f:48:67:
                    53:7f:7c:59:bf:17:99:e9:fb:f7:d1:b4:0d:69:25:
                    db:50:85:1c:0d:d8:2c:40:fb:31:71:e3:1d:fb:40:
                    4c:d4:74:14:4e:1d:9e:29:c1:3d:35:a0:a3:85:ca:
                    f3:d8:88:21:ab:41:f7:42:e5:d3:ce:56:e7:eb:a0:
                    d6:42:58:f9:12:46:3a:7b:5a:1f:c5:c9:73:cd:43:
                    12:79:3e:c3:fa:1e:2f:87:68:ca:54:bd:5b:84:35:
                    25:19:4f:8d:80:b5:46:3a:6d:67:66:ad:90:af:15:
                    e8:23:e3:95:1e:3e:cf:ba:5f:58:f9:ce:fa:95:8d:
                    75:3c:b1:14:71:ae:28:03:bf:95:8e:ab:1c:0e:11:
                    54:2d:ac:cd:29:97:fa:ce:9e:f3:54:0d:48:9f:43:
                    98:34:0a:0e:27:eb:d2:79:75:2c:95:05:dd:a9:16:
                    86:e9:58:d5:00:ba:ba:81:4b:3f:1a:f4:06:ab:7b:
                    96:5b:dd:e7:da:28:d2:82:8d:a1:6d:71:26:9b:d1:
                    39:c5:36:28:27:3c:1a:03:31:38:a6:31:c7:a3:46:
                    ba:25:1f:7d:db:1c:4b:22:ff:dd:1d:06:ab:22:0a:
                    d6:d5:10:e1:f2:4c:64:90:18:4a:f3:3b:8e:e5:94:
                    de:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0B:53:39:02:20:2C:9B:29:F0:02:95:37:E5:25:2A:4F:B2:13:74
            X509v3 Authority Key Identifier:
                keyid:98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:78:1f:0c:11:e0:94:84:19:19:d2:11:a0:53:68:6e:b5:4c:
         a5:6f:cb:f2:29:6c:1d:4e:06:d8:a0:d0:ed:61:28:8d:8f:a5:
         ea:4a:22:0e:77:d9:c3:ef:e4:30:73:03:04:90:4c:bc:5b:17:
         49:af:cb:4b:fb:33:61:ae:d0:4a:1a:61:67:0f:85:3c:73:62:
         33:3d:df:8b:d5:4f:63:ae:ca:08:7d:74:f3:25:de:3c:20:46:
         32:6e:f6:86:92:bd:09:c5:d3:17:ed:af:1a:e8:29:16:63:76:
         d6:e8:17:7a:2b:de:85:7d:54:52:0c:1c:21:f8:60:61:27:ec:
         53:d7:31:9a:bd:73:ed:dd:7f:e2:35:14:35:bd:e6:d0:ec:e0:
         bf:00:b4:c0:61:89:9f:4e:25:90:08:78:57:16:47:24:81:d3:
         2b:b7:4a:5e:23:b6:bc:ba:2b:fe:41:0b:e8:02:3c:b1:8a:08:
         d3:bb:36:f9:3e:94:f7:19:60:25:46:4a:bc:27:a1:22:4e:5e:
         02:f8:09:dd:c5:bd:aa:70:6b:d9:67:08:02:a7:99:ed:5b:e8:
         02:17:cf:e4:d4:d6:29:0e:3d:d3:21:05:56:30:a7:df:98:16:
         7c:f9:df:22:16:79:31:c8:27:76:36:87:81:7c:08:48:d0:70:
         d5:95:35:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:49 2026 by rpki-client