This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
File:                     GmoUZyI70xUQwU8hvTPX12mCnSg.mft (raw, json)
Hash identifier:          WCkyK1o/KaRKWATR18mvuFzm3CsLGsz895n7rrwldBg=
Subject key identifier:   AA:EA:51:C2:A8:61:BE:4B:5B:DC:E0:84:F3:CE:69:CF:52:56:C2:C0
Authority key identifier: 1A:6A:14:67:22:3B:D3:15:10:C1:4F:21:BD:33:D7:D7:69:82:9D:28
Certificate issuer:       /CN=1a6a1467223bd31510c14f21bd33d7d769829d28
Certificate serial:       019C44D97783BBBE460A7F8839EE44745246
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
Manifest number:          020C
Signing time:             Tue 10 Feb 2026 00:00:28 +0000
Manifest this update:     Tue 10 Feb 2026 00:00:28 +0000
Manifest next update:     Wed 11 Feb 2026 00:00:28 +0000
Files and hashes:         1: GmoUZyI70xUQwU8hvTPX12mCnSg.crl (hash: LJ2sqrCBH9OlvJxuPp396rk0QdkVjhjh2Z3/mbjrVG4=)
                          2: yMHe_AcZ7t0DOCfavN3ISgqxc3c.roa (hash: 9DwkTaaH9QdGqF+hvGsRneF8svXbKCB6hQgeZ0/mVuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:d9:77:83:bb:be:46:0a:7f:88:39:ee:44:74:52:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a6a1467223bd31510c14f21bd33d7d769829d28
        Validity
            Not Before: Feb 10 00:00:28 2026 GMT
            Not After : Feb 11 00:00:28 2026 GMT
        Subject: CN=aaea51c2a861be4b5bdce084f3ce69cf5256c2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:10:43:02:be:d6:e6:db:4b:ca:5d:a0:ac:64:
                    c7:29:b5:f0:19:28:71:cc:d6:24:03:e2:16:c3:a7:
                    0c:e1:24:f7:1e:3e:ea:e5:93:1c:70:3f:be:fa:1b:
                    a5:17:fe:bd:7e:8f:4e:38:87:32:21:6a:7c:fd:fc:
                    cb:f4:5b:b9:36:5f:bc:7b:03:a7:02:3a:5f:54:c4:
                    a3:eb:05:89:9c:a4:e8:28:3a:24:69:7a:1e:10:7e:
                    0f:ec:0d:af:03:c4:9b:99:14:9b:ee:b0:c5:58:36:
                    da:ed:b5:57:c6:bd:42:d3:c2:94:c6:03:aa:a6:41:
                    8f:83:f6:10:54:7a:a9:c8:1b:7e:2a:03:4e:46:f0:
                    1d:a6:aa:6b:35:0f:85:2e:7b:c9:d5:bc:fa:be:24:
                    ba:cd:8e:30:b7:b0:5d:64:0a:68:b6:a3:3a:50:bb:
                    e0:b9:6c:9e:e7:4e:7b:c7:c9:5a:5b:f0:02:1b:f3:
                    42:49:1a:8b:64:5c:da:6b:b9:e7:af:37:34:05:45:
                    22:70:41:b7:c8:c4:0f:bd:c8:bd:25:aa:59:e2:1d:
                    7f:df:e6:d7:7c:30:65:7b:a1:c8:46:57:39:0e:c4:
                    06:7a:59:03:81:00:75:1c:19:88:f3:62:73:ef:d1:
                    da:c0:3a:b5:c6:83:a2:06:04:7c:1f:df:5b:43:b1:
                    4f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EA:51:C2:A8:61:BE:4B:5B:DC:E0:84:F3:CE:69:CF:52:56:C2:C0
            X509v3 Authority Key Identifier:
                keyid:1A:6A:14:67:22:3B:D3:15:10:C1:4F:21:BD:33:D7:D7:69:82:9D:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:a7:94:f1:4a:01:d1:af:07:61:0e:f1:63:68:b7:f9:24:49:
         92:f6:20:5b:f1:4b:ab:08:c0:d8:29:4e:a8:d1:bc:b8:e8:ad:
         e1:7e:86:db:52:8f:89:aa:f6:0a:c7:c6:48:b0:23:24:39:d9:
         06:20:b1:90:3a:90:a0:83:42:4c:e3:a2:f8:50:9f:e6:c1:92:
         3a:cf:03:05:bd:2a:e4:30:9f:5b:e9:03:42:24:97:cf:58:2d:
         87:4e:e8:ba:6a:2c:be:0f:2b:03:96:e4:b2:4c:62:66:6a:c4:
         d6:46:8e:d0:64:6d:ec:13:e3:cb:34:0a:a9:a6:bf:6a:e5:8f:
         d4:36:ed:1f:8e:a7:58:88:53:a2:1f:48:47:75:e8:56:ff:ae:
         e2:d6:28:a0:81:4b:26:6f:70:d6:1d:52:12:1e:19:49:02:c5:
         86:7f:19:da:7d:38:57:1b:d5:88:cb:f3:e7:57:1c:36:3b:36:
         f2:cd:6e:08:01:f6:42:82:48:79:0d:9b:cd:43:fb:cc:0b:cd:
         34:24:85:fb:f1:93:9a:80:a4:ba:8e:be:53:de:aa:cf:e1:c5:
         4a:94:6c:a7:0e:72:9f:ca:59:e2:6d:31:3f:94:58:41:61:0d:
         9d:94:dd:ab:0e:cd:68:c9:d8:4b:67:c2:f5:07:34:f3:fe:10:
         f9:e6:96:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxE2XeDu75GCn+IOe5EdFJGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNmExNDY3MjIzYmQzMTUxMGMxNGYyMWJkMzNkN2Q3Njk4
MjlkMjgwHhcNMjYwMjEwMDAwMDI4WhcNMjYwMjExMDAwMDI4WjAzMTEwLwYDVQQD
EyhhYWVhNTFjMmE4NjFiZTRiNWJkY2UwODRmM2NlNjljZjUyNTZjMmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxBDAr7W5ttLyl2grGTHKbXwGShx
zNYkA+IWw6cM4ST3Hj7q5ZMccD+++hulF/69fo9OOIcyIWp8/fzL9Fu5Nl+8ewOn
AjpfVMSj6wWJnKToKDokaXoeEH4P7A2vA8SbmRSb7rDFWDba7bVXxr1C08KUxgOq
pkGPg/YQVHqpyBt+KgNORvAdpqprNQ+FLnvJ1bz6viS6zY4wt7BdZApotqM6ULvg
uWye5057x8laW/ACG/NCSRqLZFzaa7nnrzc0BUUicEG3yMQPvci9JapZ4h1/3+bX
fDBle6HIRlc5DsQGelkDgQB1HBmI82Jz79HawDq1xoOiBgR8H99bQ7FP3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrqUcKoYb5LW9zghPPOac9SVsLAMB8GA1UdIwQY
MBaAFBpqFGciO9MVEMFPIb0z19dpgp0oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR21vVVp5STcweFVRd1U4aHZUUFgxMm1DblNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84N2VhZmMtMTdhNi00OTAzLWI5NTEt
NGQyMGRhMGM1MzBlLzEvR21vVVp5STcweFVRd1U4aHZUUFgxMm1DblNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS84N2VhZmMtMTdhNi00OTAzLWI5NTEtNGQyMGRhMGM1MzBl
LzEvR21vVVp5STcweFVRd1U4aHZUUFgxMm1DblNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKeU8UoB
0a8HYQ7xY2i3+SRJkvYgW/FLqwjA2ClOqNG8uOit4X6G21KPiar2CsfGSLAjJDnZ
BiCxkDqQoINCTOOi+FCf5sGSOs8DBb0q5DCfW+kDQiSXz1gth07oumosvg8rA5bk
skxiZmrE1kaO0GRt7BPjyzQKqaa/auWP1DbtH46nWIhToh9IR3XoVv+u4tYooIFL
Jm9w1h1SEh4ZSQLFhn8Z2n04VxvViMvz51ccNjs28s1uCAH2QoJIeQ2bzUP7zAvN
NCSF+/GTmoCkuo6+U96qz+HFSpRspw5yn8pZ4m0xP5RYQWENnZTdqw7NaMnYS2fC
9Qc08/4Q+eaWQw==
-----END CERTIFICATE-----
Generated at Tue Feb 10 07:16:24 2026 by rpki-client