This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
File:                     gXFLKnOMo96ukVr4fDqRxhPhvEk.mft (raw, json)
Hash identifier:          AJgZAbnxbleIm5P+thFvN4xsQJZkdJt5+eeHcX4Eek0=
Subject key identifier:   1F:8D:0C:C2:2C:70:C2:C8:49:13:42:CD:D8:62:51:03:BD:96:C3:7C
Authority key identifier: 81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
Certificate issuer:       /CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Certificate serial:       019C40FD370B0461F32B96AA19AF700F3231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
Manifest number:          0897
Signing time:             Mon 09 Feb 2026 06:01:02 +0000
Manifest this update:     Mon 09 Feb 2026 06:01:02 +0000
Manifest next update:     Tue 10 Feb 2026 06:01:02 +0000
Files and hashes:         1: gXFLKnOMo96ukVr4fDqRxhPhvEk.crl (hash: qKISw8LgHHwzHvMbkJO6/M0uXUT/OTaFWFGVvNuA4kU=)
                          2: iNGJGnpRp8AcxHMxmP8wegfWCeU.roa (hash: ya12mt8QfVnZ29wP+KlJW9WEehxF6+N/fh0r/gblNNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:37:0b:04:61:f3:2b:96:aa:19:af:70:0f:32:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81714b2a738ca3deae915af87c3a91c613e1bc49
        Validity
            Not Before: Feb  9 06:01:02 2026 GMT
            Not After : Feb 10 06:01:02 2026 GMT
        Subject: CN=1f8d0cc22c70c2c8491342cdd8625103bd96c37c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:32:86:58:5b:2c:85:ad:75:4d:9c:e1:13:ae:
                    44:1a:97:cf:90:30:50:02:80:be:1a:5e:e7:1f:30:
                    f1:2d:15:04:2c:f4:57:40:83:61:11:ba:1d:2b:16:
                    15:00:10:18:a2:0a:01:b8:f7:21:df:18:a7:83:92:
                    87:e1:f2:d4:7f:d0:7d:81:35:81:ef:33:69:4d:69:
                    a4:b3:17:57:1e:ca:5e:0e:41:1e:6f:97:e2:57:ab:
                    c9:de:7a:db:7b:ed:0e:8d:0e:2e:51:81:f1:87:1d:
                    53:d9:39:ba:23:27:27:59:c9:88:34:cf:91:e7:d4:
                    f8:41:f7:80:d1:c7:08:e6:85:25:42:8b:ed:ce:33:
                    07:51:3c:69:ac:38:62:7c:82:41:e7:61:3f:26:85:
                    2a:af:69:2a:e5:e9:83:6b:d1:1a:2c:2f:af:2f:3b:
                    4c:9d:79:ed:e9:ab:2e:2f:42:98:42:6f:ee:54:82:
                    5d:b0:c2:7e:07:23:f0:43:0c:df:a3:a5:b2:26:86:
                    0d:a0:95:cb:64:b6:1c:c3:53:bc:26:18:a9:c2:a6:
                    52:bf:89:cd:68:c9:01:d7:82:f1:da:45:9e:a8:e7:
                    37:14:4f:5a:83:f4:b4:9a:0c:b5:6f:84:e6:9f:87:
                    69:28:47:ae:81:10:06:e6:8b:b8:8b:de:49:a2:93:
                    0a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8D:0C:C2:2C:70:C2:C8:49:13:42:CD:D8:62:51:03:BD:96:C3:7C
            X509v3 Authority Key Identifier:
                keyid:81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:db:72:39:b8:39:2b:68:94:02:f7:40:bd:a4:b0:5c:2b:6e:
         95:43:16:d6:25:b9:9c:3a:84:92:cd:8b:a4:d8:1e:d9:ae:2e:
         3a:59:ef:44:19:43:9c:25:00:d0:fc:c0:cb:f6:bc:9c:15:a5:
         0d:51:85:5a:97:55:cd:e4:b6:7e:97:31:af:07:0c:1e:d9:e7:
         77:df:38:7e:d8:57:93:1e:7c:65:24:7d:e1:c0:e2:4f:93:d1:
         57:a4:43:43:92:87:62:c9:87:8b:be:4e:80:70:c2:70:c9:d9:
         d9:e2:26:61:40:47:32:93:91:a7:74:31:4f:15:a4:fe:d2:37:
         e0:f2:72:78:4d:af:6a:3e:50:70:d0:e6:78:78:f1:6e:f4:76:
         fb:38:cf:26:6d:cd:9c:9a:b0:35:c4:78:6c:bd:18:fd:18:69:
         5f:f8:52:da:56:f1:3e:bd:2c:b4:c3:80:1e:d6:67:d8:00:6f:
         9e:65:e6:dd:2c:1c:2b:8e:4d:5e:6b:61:79:e1:69:93:5f:6b:
         b8:39:12:cd:d3:30:4d:66:31:13:0b:7d:42:10:f5:fd:e6:d6:
         95:88:47:67:6e:41:1e:6c:0b:28:76:93:62:60:8d:50:c4:93:
         59:19:54:a4:ef:fc:6d:f3:6f:55:e0:2c:b3:0f:f0:1e:c9:4b:
         2a:b0:1c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:47 2026 by rpki-client