This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
File:                     gvGLgDOdiuY39KAvM1u-x8jCa94.mft (raw, json)
Hash identifier:          Td2eNb9B5+9+klYzPXFDDZyKjZ78GCSlMub5lrcfe8Y=
Subject key identifier:   44:F3:72:2E:C1:5E:BE:FD:90:FB:3E:70:DB:B0:70:35:DE:B1:A7:28
Authority key identifier: 82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE
Certificate issuer:       /CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
Certificate serial:       019C420FE1B475B2B786F7FBA11E9A74F7CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 11:01:02 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:02 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:02 +0000
Files and hashes:         1: HRhnJs0rqSh4-uSE3UR_PKkUZFI.roa (hash: LXksIEwMTfFfnm1hrgpaVNQMLwmyjyLCSI5cjH3cCWM=)
                          2: gvGLgDOdiuY39KAvM1u-x8jCa94.crl (hash: IWn5laZJfqA9p4drQv/i8vdQSd31bIC3sIFxK0B+4FE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:e1:b4:75:b2:b7:86:f7:fb:a1:1e:9a:74:f7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
        Validity
            Not Before: Feb  9 11:01:02 2026 GMT
            Not After : Feb 10 11:01:02 2026 GMT
        Subject: CN=44f3722ec15ebefd90fb3e70dbb07035deb1a728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9b:37:53:43:79:32:d6:06:0c:e4:7c:30:be:
                    17:f5:30:bc:2e:b0:5d:28:25:d8:9f:f6:67:da:f3:
                    ed:7c:90:40:85:88:3d:72:10:9a:5d:9b:c0:be:49:
                    0f:b9:a1:e7:98:7d:dc:3a:db:6f:7b:7b:07:53:00:
                    c4:7b:a7:2b:55:56:89:df:eb:86:ab:67:d8:39:ee:
                    84:e9:85:4e:87:2f:9d:2e:88:21:e1:3e:b6:77:f5:
                    69:b4:3d:ac:1d:9c:a0:b6:3d:72:f1:68:d4:2c:9f:
                    93:f6:30:6e:66:b0:65:95:40:19:87:df:16:ec:15:
                    a9:ce:92:d7:a8:50:1b:bf:2e:ea:03:a8:2c:1a:72:
                    98:8b:c7:bb:8d:68:11:d1:71:aa:15:33:fa:19:c6:
                    d3:78:6d:3d:12:8b:0b:37:1b:1b:1b:27:6e:a6:0d:
                    68:3d:eb:ba:36:dd:d3:03:cf:b1:25:64:d7:2a:a9:
                    31:4e:33:ec:13:2b:9c:05:5e:94:68:2d:27:74:0e:
                    22:75:1e:5f:6d:0c:cc:3e:05:1b:7d:f4:88:5c:b5:
                    4e:d0:8a:3d:31:f0:f7:b8:04:64:f8:2a:95:f5:b8:
                    a2:e9:e0:0a:13:bf:17:db:61:60:46:73:01:3f:19:
                    42:3f:b8:ea:73:28:08:d5:e1:83:cf:1d:6f:5d:8a:
                    d4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F3:72:2E:C1:5E:BE:FD:90:FB:3E:70:DB:B0:70:35:DE:B1:A7:28
            X509v3 Authority Key Identifier:
                keyid:82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:d3:7c:7b:9e:2d:f9:68:f1:9a:18:5f:fa:38:8e:d8:9f:4f:
         ec:b8:61:99:b7:92:9d:16:ea:80:af:89:35:82:84:7f:93:96:
         4b:04:b7:9e:2b:36:50:38:9d:9b:c6:7d:60:40:0b:a6:08:3c:
         ce:51:7e:5a:22:1e:6a:e0:c0:3d:f8:4c:e7:5d:55:f7:56:6c:
         91:8c:08:43:21:63:39:d2:5f:f3:e4:c1:06:a6:cc:76:bb:5a:
         53:5e:2c:cf:c8:3f:cd:7e:aa:67:4f:9e:4e:08:ac:9f:a9:7b:
         62:a3:11:fa:79:54:8f:4d:11:de:ca:f2:09:2c:73:8f:79:dd:
         62:52:ab:a7:5a:fc:e8:b4:a5:1e:86:ee:7e:0a:c1:57:38:45:
         3a:4b:5c:b3:9a:6e:3c:d6:2b:88:d7:15:78:99:1d:35:30:b9:
         cc:f4:ba:de:fc:d5:73:24:34:29:4a:a9:d6:00:96:79:e6:d7:
         9e:9c:e9:9e:dd:61:97:25:ab:02:a5:ad:54:bd:2b:53:8d:db:
         e4:13:05:49:39:ba:aa:39:86:1a:33:6d:f7:61:8f:9f:58:74:
         e6:f6:2a:4e:a6:98:c5:61:0b:8a:7e:8f:3b:7a:31:ab:1d:e0:
         11:cc:83:df:60:2e:07:6e:7b:e0:d8:56:71:10:31:3a:ff:a9:
         a4:39:1f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:53 2026 by rpki-client