This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
File:                     GNtfz9wY74Qh4mUfGybBZaAdU_E.mft (raw, json)
Hash identifier:          ALhj8lAjAPki7q8qnXnLBRkb3g4+ACxPTku3tAsepd4=
Subject key identifier:   8D:B7:F3:AA:C2:ED:3F:2E:B3:23:1E:8A:82:97:1B:07:ED:7F:41:0D
Authority key identifier: 18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1
Certificate issuer:       /CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
Certificate serial:       019C42462B4833E12A28C719F126A9335C0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 12:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:20 +0000
Files and hashes:         1: GNtfz9wY74Qh4mUfGybBZaAdU_E.crl (hash: tvW0+J0xizj30bj64QNJdTXLzIwBJshEmvzuAjKqN2Q=)
                          2: HyBfdHBu-E_xnT2LV4MR8Uj2x2g.roa (hash: ECkHLWD5o4a328xINTv5HTRD82ypaSriGLU8WBsJUfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:2b:48:33:e1:2a:28:c7:19:f1:26:a9:33:5c:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
        Validity
            Not Before: Feb  9 12:00:20 2026 GMT
            Not After : Feb 10 12:00:20 2026 GMT
        Subject: CN=8db7f3aac2ed3f2eb3231e8a82971b07ed7f410d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d5:51:5a:47:d3:70:d3:de:b8:c8:46:9b:55:
                    4c:bd:7c:9f:f3:9d:31:9a:ad:07:6e:0c:84:62:d5:
                    ea:84:42:c8:a1:d0:58:7f:f4:62:47:ad:2b:81:ed:
                    b1:e8:81:03:e8:dc:42:ac:54:4b:0c:f7:4b:e3:62:
                    35:31:fb:e5:d6:6d:83:5c:4f:58:c1:cb:e2:d3:b3:
                    de:e8:25:71:a6:47:14:bc:fd:03:ab:cd:34:3c:5c:
                    2e:e2:dc:59:9c:f6:26:e6:66:75:04:ad:8b:b9:5d:
                    c1:a7:ba:1d:c9:89:ba:79:5f:42:be:13:de:a9:c3:
                    38:81:e5:b1:7a:af:78:97:8a:31:52:4d:b3:1b:c1:
                    41:58:9f:15:8c:63:c3:94:74:07:a3:19:18:2b:fb:
                    ff:47:25:8e:96:6c:5f:06:f5:09:87:50:26:78:c5:
                    83:ee:49:3f:93:f7:cf:90:c7:e8:bb:6c:6d:32:b5:
                    9e:64:52:0a:69:d3:d6:0a:fa:a5:9b:48:ca:c6:16:
                    4c:36:0e:d1:06:da:4b:78:85:04:a9:c8:c1:30:3c:
                    c2:ce:09:66:09:9a:1a:cf:96:87:1c:08:f1:d9:6b:
                    84:ea:b3:e3:8e:b0:c1:5e:95:13:58:69:c6:21:0a:
                    aa:b7:41:fb:cb:05:fe:23:cc:e1:3d:b1:a8:76:b8:
                    e3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B7:F3:AA:C2:ED:3F:2E:B3:23:1E:8A:82:97:1B:07:ED:7F:41:0D
            X509v3 Authority Key Identifier:
                keyid:18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:71:80:b3:4e:b0:3f:c0:53:55:ff:fb:d4:9c:29:62:e3:53:
         24:16:71:19:18:6c:29:2c:c6:10:8d:89:c5:53:71:0f:0a:37:
         3b:70:eb:94:b1:2d:f3:1f:65:55:6e:7e:1e:42:99:44:ce:90:
         53:fb:60:c3:f7:b4:2a:cb:53:12:7d:17:fb:bb:b9:70:dd:66:
         ff:d9:75:10:79:57:c0:36:8a:da:0a:41:cb:9d:d4:a5:70:bb:
         3f:64:a3:36:a8:13:19:f7:33:79:de:76:4a:1e:5d:46:7c:e2:
         82:0f:37:59:bf:d1:18:cc:7e:3c:43:b0:12:04:c5:3d:d4:40:
         5e:e6:89:bb:de:a8:f2:21:57:3a:04:e6:4e:1c:01:da:1f:5c:
         87:4d:9e:1d:92:8f:23:66:9f:73:b8:72:b7:a5:45:14:a2:7e:
         69:54:4a:08:bd:e2:59:7d:ed:d8:e7:76:88:3d:75:2b:ff:d2:
         51:d0:a0:a6:54:d5:38:b6:64:62:95:42:04:62:92:62:7b:d4:
         e0:9d:87:3b:83:6a:36:73:03:69:f1:2d:94:4f:04:f8:0d:16:
         89:36:bd:55:d6:df:47:4c:5f:36:01:cb:9d:6a:e7:af:85:c6:
         dd:03:4b:91:8f:47:07:41:d9:00:d8:e4:3b:f0:56:60:35:43:
         a0:06:da:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:53 2026 by rpki-client