This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
File:                     GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft (raw, json)
Hash identifier:          Ia+XWqLISha2Gu6/J3RPo8zzD5b5JEdvZOPF8qXYPSo=
Subject key identifier:   1D:95:02:2C:16:1A:D3:50:3C:65:D3:B9:3E:5A:B8:8E:0C:C0:40:8C
Authority key identifier: 19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
Certificate issuer:       /CN=194f0b272e243acfaf36346094e58395cc1383b4
Certificate serial:       019C43FE292AD33FFBF3806112F4E46D54E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
Manifest number:          1387
Signing time:             Mon 09 Feb 2026 20:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:55 +0000
Files and hashes:         1: GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl (hash: t/E6vbovHRb4/AC0ft5GVNcJKRg19Mi2UZ3SLpkRETY=)
                          2: WssjpVtFq9SbbTrTZ-iHVvx9vP0.roa (hash: 8JmzB8yBULopBubbEFm3Pf3YeySRdQmevymiDMry08o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:29:2a:d3:3f:fb:f3:80:61:12:f4:e4:6d:54:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194f0b272e243acfaf36346094e58395cc1383b4
        Validity
            Not Before: Feb  9 20:00:55 2026 GMT
            Not After : Feb 10 20:00:55 2026 GMT
        Subject: CN=1d95022c161ad3503c65d3b93e5ab88e0cc0408c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1a:f6:da:2d:13:9e:bc:26:db:e4:08:87:19:
                    08:7c:15:19:03:c0:47:bd:0a:37:a7:85:4d:eb:67:
                    01:90:f0:2b:f9:67:1c:bf:9f:fa:94:3a:a2:b5:4a:
                    af:87:a8:07:74:7b:7a:5c:a0:cb:4f:da:1a:58:d8:
                    40:cd:7b:32:f0:d7:d4:e5:7c:96:a9:42:10:54:d8:
                    3b:4c:04:6c:43:e6:d2:a3:44:ec:f6:04:ef:67:68:
                    41:93:6f:a0:0f:5f:a0:fa:16:98:43:e0:4a:b0:93:
                    c2:04:b5:00:35:64:0c:14:9b:fe:ea:aa:b3:21:74:
                    a4:c2:24:e7:54:56:36:23:3f:72:e0:d4:61:61:6e:
                    4a:a5:6f:fe:a7:2e:ac:69:b4:88:25:eb:4e:5a:ac:
                    6c:07:c3:e9:04:04:4f:47:19:78:f5:3b:7d:33:f1:
                    2c:e9:f7:0d:57:a9:4c:78:f2:34:9a:fd:f4:1f:c0:
                    f5:f8:a2:be:84:f4:5b:5e:ff:c3:fe:60:5c:39:46:
                    52:83:fb:8a:20:f2:d1:dc:4a:ab:0f:bf:e7:fa:9f:
                    5f:a0:a4:b3:f7:51:18:12:c8:86:84:eb:71:2e:ed:
                    1c:98:84:dd:4a:27:dd:f0:72:90:25:da:7d:fb:10:
                    95:66:4b:3f:37:c0:53:fd:eb:93:fd:41:09:15:d0:
                    15:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:95:02:2C:16:1A:D3:50:3C:65:D3:B9:3E:5A:B8:8E:0C:C0:40:8C
            X509v3 Authority Key Identifier:
                keyid:19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:74:8b:a0:c7:3d:cd:87:8e:90:79:2c:41:a3:ba:47:13:9e:
         eb:27:be:c4:58:72:5b:ba:08:c8:a2:c1:b5:8b:8f:15:16:1e:
         ce:e5:94:f5:ba:e2:84:82:c0:ba:71:71:5c:35:16:d1:fe:01:
         30:13:76:cb:2c:a5:76:6b:64:e6:e8:bf:92:1d:87:9c:65:97:
         71:4d:91:64:01:fb:66:25:ba:45:22:80:f9:2f:ca:32:72:f2:
         8b:29:6c:e3:87:9a:0f:24:25:ab:93:ed:9c:f5:5b:2b:6a:b0:
         74:96:2b:aa:23:e0:75:fc:6c:f9:94:2b:30:7e:1f:10:62:b3:
         be:4c:8d:e9:a1:ad:db:c7:50:3a:ef:fb:74:e6:65:85:22:4c:
         b7:6e:37:9b:0a:e5:c8:97:04:5d:66:11:eb:28:85:fb:63:d8:
         80:04:eb:83:02:78:da:e7:fe:e3:ad:16:d8:d4:98:1c:e9:cf:
         b9:1b:d1:b5:77:ac:6e:75:70:3c:92:ec:e2:b8:80:51:10:98:
         e4:d4:f6:29:6c:5e:a6:8e:e4:33:46:69:ef:ed:c2:54:7a:f2:
         5d:ea:e5:be:e1:9a:13:9a:c3:03:ba:f5:68:10:f2:f5:7f:21:
         6c:73:48:9c:02:ee:92:e3:37:70:f7:3e:e2:bd:13:22:16:54:
         a5:cf:f7:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/ikq0z/784BhEvTkbVThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NGYwYjI3MmUyNDNhY2ZhZjM2MzQ2MDk0ZTU4Mzk1Y2Mx
MzgzYjQwHhcNMjYwMjA5MjAwMDU1WhcNMjYwMjEwMjAwMDU1WjAzMTEwLwYDVQQD
EygxZDk1MDIyYzE2MWFkMzUwM2M2NWQzYjkzZTVhYjg4ZTBjYzA0MDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxr22i0Tnrwm2+QIhxkIfBUZA8BH
vQo3p4VN62cBkPAr+Wccv5/6lDqitUqvh6gHdHt6XKDLT9oaWNhAzXsy8NfU5XyW
qUIQVNg7TARsQ+bSo0Ts9gTvZ2hBk2+gD1+g+haYQ+BKsJPCBLUANWQMFJv+6qqz
IXSkwiTnVFY2Iz9y4NRhYW5KpW/+py6sabSIJetOWqxsB8PpBARPRxl49Tt9M/Es
6fcNV6lMePI0mv30H8D1+KK+hPRbXv/D/mBcOUZSg/uKIPLR3EqrD7/n+p9foKSz
91EYEsiGhOtxLu0cmITdSifd8HKQJdp9+xCVZks/N8BT/euT/UEJFdAVawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2VAiwWGtNQPGXTuT5auI4MwECMMB8GA1UdIwQY
MBaAFBlPCycuJDrPrzY0YJTlg5XME4O0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1U4TEp5NGtPcy12TmpSZ2xPV0RsY3dUZzdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hNTNkMzQtYzNkNi00OWRiLWFiN2Yt
YTljY2U1NmEwNjY4LzEvR1U4TEp5NGtPcy12TmpSZ2xPV0RsY3dUZzdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hNTNkMzQtYzNkNi00OWRiLWFiN2YtYTljY2U1NmEwNjY4
LzEvR1U4TEp5NGtPcy12TmpSZ2xPV0RsY3dUZzdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXSLoMc9
zYeOkHksQaO6RxOe6ye+xFhyW7oIyKLBtYuPFRYezuWU9brihILAunFxXDUW0f4B
MBN2yyyldmtk5ui/kh2HnGWXcU2RZAH7ZiW6RSKA+S/KMnLyiyls44eaDyQlq5Pt
nPVbK2qwdJYrqiPgdfxs+ZQrMH4fEGKzvkyN6aGt28dQOu/7dOZlhSJMt243mwrl
yJcEXWYR6yiF+2PYgATrgwJ42uf+460W2NSYHOnPuRvRtXesbnVwPJLs4riAURCY
5NT2KWxepo7kM0Zp7+3CVHryXerlvuGaE5rDA7r1aBDy9X8hbHNInALukuM3cPc+
4r0TIhZUpc/3sg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:57 2026 by rpki-client