This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
File:                     GtTMzv5VxeIjqbMgW5OKPRyehtU.mft (raw, json)
Hash identifier:          WaytBQuXZz3eUJmpEw3RAFkVhlPs0VmlZFEkR5MjCYk=
Subject key identifier:   0F:8A:E1:DB:0C:AF:22:14:23:7C:03:99:13:86:F5:70:ED:33:D1:50
Authority key identifier: 1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
Certificate issuer:       /CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Certificate serial:       019C42EAD8A76330430F70455C6F252A7340
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
Manifest number:          14F1
Signing time:             Mon 09 Feb 2026 15:00:12 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:12 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:12 +0000
Files and hashes:         1: GtTMzv5VxeIjqbMgW5OKPRyehtU.crl (hash: QJL2v43JIJ4BrkjlQhVNmmUPQwXedEOHGxu5U7kreqU=)
                          2: k7oeIV7HgF0MdSr9wY7QH1nk1Po.roa (hash: H0UiWZoHXbQKY5PjSSEja9oJ63puQn0Ebtq8jzm98zU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:ea:d8:a7:63:30:43:0f:70:45:5c:6f:25:2a:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
        Validity
            Not Before: Feb  9 15:00:12 2026 GMT
            Not After : Feb 10 15:00:12 2026 GMT
        Subject: CN=0f8ae1db0caf2214237c03991386f570ed33d150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:4e:25:08:07:4f:fb:04:2a:6f:b0:5b:df:9a:
                    ec:6a:55:fa:78:2d:4d:77:f6:31:ac:e7:86:2e:2e:
                    8f:4a:74:d1:94:78:05:d7:29:22:76:7e:a5:af:8e:
                    90:6c:46:63:f7:58:5f:6e:6a:a6:ae:c8:7e:4e:7c:
                    b7:9c:84:d9:0f:d0:ca:b5:32:c0:b1:4a:bb:15:fd:
                    fc:09:92:a5:cf:45:7d:bb:a8:cb:e6:9f:d1:ed:f2:
                    f8:98:bb:6d:e8:a3:83:52:58:a7:2d:55:fa:14:1a:
                    39:99:6b:14:d8:3e:85:4e:10:3b:bb:02:39:85:c1:
                    25:11:bc:8e:0d:d2:8e:1f:71:80:bb:9b:ec:76:0c:
                    72:53:5d:33:31:73:c5:0d:f6:9e:e2:8f:49:8f:95:
                    1b:09:6f:10:f6:29:af:70:9e:de:02:4b:c9:fe:1a:
                    9c:81:7d:51:4d:49:ff:51:d9:ba:c1:57:b3:45:91:
                    55:7d:d0:4f:83:ae:80:75:30:af:56:7b:13:3c:4e:
                    e1:8a:6d:a8:28:a1:53:5c:15:13:68:ef:1c:f5:ff:
                    be:1f:02:f1:f1:9e:a4:0c:3b:af:89:0d:ca:d4:1b:
                    98:0f:61:7e:49:58:a0:b4:06:74:f4:51:4b:4e:ad:
                    cd:91:8f:0c:26:17:2b:cb:1c:be:95:e2:bd:df:58:
                    25:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8A:E1:DB:0C:AF:22:14:23:7C:03:99:13:86:F5:70:ED:33:D1:50
            X509v3 Authority Key Identifier:
                keyid:1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:08:e5:f9:93:17:59:9b:58:dd:f0:b4:cc:49:60:8c:a3:87:
         4f:b7:1b:8d:1d:4c:00:28:56:4c:a1:51:cb:c2:df:50:76:d0:
         d6:f6:b7:a9:3b:50:d1:a7:86:ed:7c:cd:6c:cd:ad:10:de:d2:
         62:31:61:b9:e0:fa:85:fe:8d:73:12:31:cb:f5:f2:2a:0a:cb:
         d5:28:c6:3c:d1:1d:20:25:bf:3c:dd:66:45:dc:8f:68:a9:16:
         d5:14:46:b2:fe:22:2b:dc:e6:be:1a:0c:b5:1c:a6:a4:03:de:
         95:1c:f1:10:e5:eb:b0:30:ed:27:d5:ae:2f:94:fa:5d:68:88:
         08:07:56:45:da:51:9c:1e:15:e0:14:40:89:8e:59:76:b9:b3:
         d3:b6:bc:1b:cf:77:19:01:5e:09:9b:d6:49:c6:45:d8:b9:41:
         dc:9f:e5:35:75:8d:ac:b4:54:97:c0:81:19:c6:bd:6b:a8:53:
         b7:c5:15:4a:15:2d:3f:a5:88:2b:9c:e9:2f:4c:8e:e5:26:f7:
         8b:ca:c6:a7:b1:3d:32:bc:35:0c:78:89:ea:30:51:82:3b:5d:
         f4:11:7f:ec:d3:0e:ec:5a:80:0d:4c:db:92:28:27:97:59:22:
         7e:1e:66:24:ba:cb:ef:2b:58:5b:28:a2:58:da:09:12:8e:d2:
         22:41:6a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:40 2026 by rpki-client