This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
File:                     GkIazkbF3ViinUbNkfso_DnFb-4.mft (raw, json)
Hash identifier:          TOVkCePXNpeDbzx2Z6Pt+RsuGQn8KHIwdLzNF11Ew9Q=
Subject key identifier:   C7:D9:35:B0:2B:77:EE:9E:0B:9D:F9:05:7F:C5:FA:B3:DA:5C:33:0E
Authority key identifier: 1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE
Certificate issuer:       /CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee
Certificate serial:       019C4358FE91C979DDC419EE264032D5E780
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 17:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:31 +0000
Files and hashes:         1: GkIazkbF3ViinUbNkfso_DnFb-4.crl (hash: cV4ynsmNNiscJvN1aIdcJ8DI1UUp72ywXTh3VNrxeLY=)
                          2: yKhioiAI6-4jdwcerEQCLkvTbbQ.roa (hash: AKG0EdZvwdWd5/g3X8141KYxu5/oFF9spVOegmiaXd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:fe:91:c9:79:dd:c4:19:ee:26:40:32:d5:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee
        Validity
            Not Before: Feb  9 17:00:31 2026 GMT
            Not After : Feb 10 17:00:31 2026 GMT
        Subject: CN=c7d935b02b77ee9e0b9df9057fc5fab3da5c330e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8f:b9:10:38:b0:96:44:cf:b1:03:4f:06:0b:
                    8f:89:d1:1c:9d:69:31:82:d0:39:ca:d9:e4:68:70:
                    80:f4:31:85:3d:7b:5d:0c:00:67:ad:60:a5:bd:c3:
                    30:de:68:01:34:ea:bd:d3:b0:26:f6:21:01:fc:7d:
                    00:fe:22:5c:c7:52:79:88:03:fd:9c:5c:7b:e9:32:
                    9a:80:81:47:81:ed:fa:68:e3:c2:9c:d3:ca:4e:44:
                    ed:92:51:1c:06:fd:85:10:ee:cf:72:fe:88:31:ab:
                    f0:59:09:1e:49:78:d4:2b:98:f1:23:43:af:2d:80:
                    19:1e:3d:dd:b0:f1:92:ff:97:ff:d1:da:a2:36:6d:
                    dc:30:c0:50:bf:19:da:dd:b2:ee:59:da:52:3f:6a:
                    32:2d:a5:5b:a7:ff:c7:50:d2:a9:2e:4a:4f:f6:3b:
                    66:32:b6:5b:dd:d4:9e:47:93:fb:1f:5b:49:e2:59:
                    39:84:15:05:d4:a1:22:fe:a4:93:6e:b2:1b:6f:8a:
                    be:0d:d5:8d:64:bb:01:f7:3f:52:b3:dc:04:fe:2b:
                    2c:14:c6:c9:7b:cb:73:6f:d2:8f:d5:3a:67:61:38:
                    ed:d0:7c:5f:6d:4e:4b:49:ca:cb:7b:64:05:05:67:
                    5e:da:d4:8c:d5:3b:5f:21:bf:2f:41:29:a5:77:1f:
                    88:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D9:35:B0:2B:77:EE:9E:0B:9D:F9:05:7F:C5:FA:B3:DA:5C:33:0E
            X509v3 Authority Key Identifier:
                keyid:1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:9a:2b:76:ed:1f:1e:e3:85:ea:d4:57:0e:73:69:9a:ce:ee:
         c7:fc:51:c8:86:8d:ce:0d:78:72:b2:28:3b:eb:d4:d7:91:db:
         aa:54:d0:a9:9d:03:19:55:7b:0f:d4:b9:f7:5c:80:e3:73:a9:
         50:b4:b2:a3:c2:2b:1b:38:3a:31:f1:21:65:8a:b5:95:d8:f4:
         c1:41:49:e7:3d:94:a1:1a:54:05:a8:bc:43:fa:40:67:2a:f8:
         3c:f4:17:15:a4:a6:7f:c2:21:e2:24:ba:21:e2:3d:e8:6b:1e:
         04:b2:17:74:0e:5a:53:9f:f7:d4:16:75:fb:97:f9:c9:b9:83:
         9d:62:c5:22:84:95:6a:11:b7:36:3f:6e:9b:39:0d:51:54:96:
         d4:a1:60:7a:c4:a0:b3:70:4a:76:31:29:92:48:50:ed:ee:6e:
         78:3e:08:63:31:9b:c9:27:82:e4:5d:cc:02:14:9e:08:c8:6e:
         1e:ba:af:02:b0:74:74:84:be:1d:a6:28:7d:a4:85:0a:8f:74:
         06:f8:e4:fd:fb:36:20:d7:c9:40:8b:29:7b:9f:f1:63:e1:b6:
         d3:2d:d1:ba:79:c5:8c:0c:2b:05:79:2d:56:7a:55:26:3a:a5:
         e6:8e:1e:10:02:5c:2d:0d:87:e2:ac:ab:6f:4b:b0:6b:ac:37:
         76:4c:ff:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWP6RyXndxBnuJkAy1eeAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNDIxYWNlNDZjNWRkNThhMjlkNDZjZDkxZmIyOGZjMzlj
NTZmZWUwHhcNMjYwMjA5MTcwMDMxWhcNMjYwMjEwMTcwMDMxWjAzMTEwLwYDVQQD
EyhjN2Q5MzViMDJiNzdlZTllMGI5ZGY5MDU3ZmM1ZmFiM2RhNWMzMzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY+5EDiwlkTPsQNPBguPidEcnWkx
gtA5ytnkaHCA9DGFPXtdDABnrWClvcMw3mgBNOq907Am9iEB/H0A/iJcx1J5iAP9
nFx76TKagIFHge36aOPCnNPKTkTtklEcBv2FEO7Pcv6IMavwWQkeSXjUK5jxI0Ov
LYAZHj3dsPGS/5f/0dqiNm3cMMBQvxna3bLuWdpSP2oyLaVbp//HUNKpLkpP9jtm
MrZb3dSeR5P7H1tJ4lk5hBUF1KEi/qSTbrIbb4q+DdWNZLsB9z9Ss9wE/issFMbJ
e8tzb9KP1TpnYTjt0HxfbU5LScrLe2QFBWde2tSM1TtfIb8vQSmldx+IUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfZNbArd+6eC535BX/F+rPaXDMOMB8GA1UdIwQY
MBaAFBpCGs5Gxd1Yop1GzZH7KPw5xW/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2tJYXprYkYzVmlpblViTmtmc29fRG5GYi00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YzQ4YTAtZDNjZC00NGIzLTlhZTYt
N2RmZmNlMWQ2ZTJkLzEvR2tJYXprYkYzVmlpblViTmtmc29fRG5GYi00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi85YzQ4YTAtZDNjZC00NGIzLTlhZTYtN2RmZmNlMWQ2ZTJk
LzEvR2tJYXprYkYzVmlpblViTmtmc29fRG5GYi00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo5ordu0f
HuOF6tRXDnNpms7ux/xRyIaNzg14crIoO+vU15HbqlTQqZ0DGVV7D9S591yA43Op
ULSyo8IrGzg6MfEhZYq1ldj0wUFJ5z2UoRpUBai8Q/pAZyr4PPQXFaSmf8Ih4iS6
IeI96GseBLIXdA5aU5/31BZ1+5f5ybmDnWLFIoSVahG3Nj9umzkNUVSW1KFgesSg
s3BKdjEpkkhQ7e5ueD4IYzGbySeC5F3MAhSeCMhuHrqvArB0dIS+HaYofaSFCo90
Bvjk/fs2INfJQIspe5/xY+G20y3RunnFjAwrBXktVnpVJjql5o4eEAJcLQ2H4qyr
b0uwa6w3dkz/3w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:52 2026 by rpki-client