This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
File:                     GPkZTU3X1Le3d8kgB55AHTolM7Y.mft (raw, json)
Hash identifier:          J5sQQTtnq4UD1uoileQzPFxNontlSc55RT3EpcryW4A=
Subject key identifier:   E9:0C:4D:5D:2E:A5:5B:48:CF:11:42:01:29:88:EA:98:D0:4C:E7:F1
Authority key identifier: 18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6
Certificate issuer:       /CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6
Certificate serial:       019C454745A787F220C1780C8573CDE465E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
Manifest number:          0477
Signing time:             Tue 10 Feb 2026 02:00:24 +0000
Manifest this update:     Tue 10 Feb 2026 02:00:24 +0000
Manifest next update:     Wed 11 Feb 2026 02:00:24 +0000
Files and hashes:         1: GPkZTU3X1Le3d8kgB55AHTolM7Y.crl (hash: kTHbun/ugTSqbKaPn0ZAi+/ETw/1mzxwLKqrwneDfFE=)
                          2: UFE842JQ7HXlV4O8ypyYJqZjKxo.roa (hash: d4GAUahRXjgUNYF+NjmfLkIgWSJGMgXblr9oMS3knEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:47:45:a7:87:f2:20:c1:78:0c:85:73:cd:e4:65:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6
        Validity
            Not Before: Feb 10 02:00:24 2026 GMT
            Not After : Feb 11 02:00:24 2026 GMT
        Subject: CN=e90c4d5d2ea55b48cf1142012988ea98d04ce7f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:38:3b:8b:de:2b:56:5d:b6:78:c1:ef:1e:58:
                    c1:48:e9:fb:65:a7:ce:38:54:2d:7c:86:6d:db:b1:
                    a1:07:67:3c:7e:7e:bc:d2:f0:d8:25:73:92:c9:d3:
                    45:26:1a:c7:e8:ea:c1:10:38:00:63:a2:3c:a5:57:
                    2c:5e:a7:fa:49:03:9e:ef:39:03:c9:5a:a1:f7:c4:
                    ac:59:94:52:9b:9a:e0:36:22:e7:82:00:e7:a7:58:
                    e8:da:48:48:dc:8d:7b:aa:5a:87:0d:06:e3:6e:27:
                    52:05:f9:1a:3f:34:84:f5:87:18:00:42:d1:06:ac:
                    d5:62:e5:c5:4e:ca:ce:d2:b3:f1:69:c4:ca:f0:e6:
                    bc:4a:2e:bc:29:8a:ae:f2:76:e6:97:09:9e:11:c1:
                    d2:be:0d:8c:80:18:50:b3:86:28:8b:23:f3:88:f3:
                    30:46:66:f9:39:df:f5:95:01:d9:58:27:96:b1:94:
                    be:ac:f8:a1:80:b4:81:e6:30:73:90:9d:f3:32:38:
                    82:33:62:a6:fd:36:78:60:34:b2:da:8d:58:ab:64:
                    88:59:60:b5:45:ec:0d:49:53:5c:f3:36:6f:e3:b7:
                    0a:7c:ca:96:74:c9:37:9b:20:83:38:90:6c:c0:90:
                    79:df:43:a3:46:22:f2:f2:f8:59:c6:f3:e7:99:6d:
                    93:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0C:4D:5D:2E:A5:5B:48:CF:11:42:01:29:88:EA:98:D0:4C:E7:F1
            X509v3 Authority Key Identifier:
                keyid:18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:c4:00:fb:5c:2d:cf:cb:95:ed:68:d8:30:e4:3d:59:18:4d:
         5a:e4:e6:ff:4d:9f:d2:c2:c6:bd:29:6f:8e:de:62:52:39:b2:
         cf:1d:b4:36:8a:c9:ea:2b:10:71:2f:db:9b:73:c5:b1:f2:81:
         a5:cc:20:86:3e:f3:7d:7d:b9:a9:df:cb:c0:f3:4d:c2:84:25:
         73:4a:cf:67:a9:11:98:b1:55:c2:ba:eb:a1:f5:0b:0c:c2:e7:
         fc:66:cb:1e:5e:66:24:8c:10:12:5b:6f:4a:6e:db:6b:17:8d:
         1d:52:9d:6f:69:6e:2c:c1:2c:bd:31:1d:5f:24:7b:9b:b6:47:
         72:77:2c:50:85:a5:4b:1e:85:b3:2d:1c:7e:14:91:2e:51:bd:
         04:61:c7:a0:20:32:c2:19:4d:77:28:c9:d4:69:0e:89:f2:8b:
         91:05:df:57:e9:09:4d:c7:c3:89:57:64:3b:c0:d5:ef:43:38:
         04:3a:7a:ec:79:cb:1a:53:64:46:fd:4e:22:12:af:29:3b:10:
         47:b8:aa:84:e3:c4:c3:56:fb:1c:f9:8b:f0:bc:7e:af:df:83:
         bb:5a:b2:84:5f:b8:cf:75:66:d1:dc:f4:31:e2:79:15:b9:9f:
         41:ca:6b:52:79:3e:18:22:6d:88:df:03:dc:83:62:04:75:f1:
         0e:b9:1f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:51:29 2026 by rpki-client