This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
File:                     GYe7aFnJOMi2PlqqVtkHvQRE484.mft (raw, json)
Hash identifier:          t8U/mh8KXfYyedR4WHfQiC7wU70Sf3qOlUwXXZWx41s=
Subject key identifier:   B2:E6:1B:59:B0:A2:29:04:7C:3F:AB:59:3E:70:9F:B8:10:CF:C1:3D
Authority key identifier: 19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE
Certificate issuer:       /CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
Certificate serial:       019C427D2A082F44DA784DA78CA59612A52E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
Manifest number:          174E
Signing time:             Mon 09 Feb 2026 13:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:24 +0000
Files and hashes:         1: GYe7aFnJOMi2PlqqVtkHvQRE484.crl (hash: yO0ep2Qt/YslHgdSuBoX2Qd2EJmoQ7xmry4X597513A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:2a:08:2f:44:da:78:4d:a7:8c:a5:96:12:a5:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
        Validity
            Not Before: Feb  9 13:00:24 2026 GMT
            Not After : Feb 10 13:00:24 2026 GMT
        Subject: CN=b2e61b59b0a229047c3fab593e709fb810cfc13d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d2:a0:35:8f:08:79:c7:3b:3e:42:f3:9a:a6:
                    a7:ca:b1:a1:1c:60:b2:dd:42:50:f6:e1:4d:01:22:
                    8f:cc:0f:9a:36:e7:63:f1:c3:2e:cb:42:85:c5:bd:
                    f5:e7:bb:74:d9:4e:51:11:34:59:cb:bb:c3:30:3c:
                    c0:48:e9:ef:a9:ba:f5:9e:fe:c0:dc:fd:de:a4:84:
                    a1:c9:d8:32:46:8f:85:56:23:60:03:bf:ac:0c:77:
                    24:3f:91:21:d8:dc:ea:74:f9:87:4c:44:97:eb:f0:
                    e0:71:9a:51:b8:cc:35:18:4d:70:1c:d2:d8:1e:90:
                    48:b0:28:77:be:52:8a:ca:db:e2:09:91:a6:6a:3c:
                    2a:05:c8:a4:93:5e:9e:88:c2:c1:35:9f:8c:6e:22:
                    1b:05:c5:ed:38:74:96:f2:97:98:d1:17:b6:7d:81:
                    0e:63:df:c4:35:5a:3e:58:4e:59:32:d4:29:ae:c5:
                    76:a0:bc:9b:3b:b6:ca:84:05:de:04:98:5a:91:70:
                    26:d8:31:b5:b5:bf:d5:99:99:ee:0f:d6:26:c9:d7:
                    bc:01:5b:7d:22:3b:08:f1:c2:92:b7:ad:cf:65:78:
                    70:3d:f3:41:96:52:1f:03:c2:ce:2e:ae:bc:12:bc:
                    98:f7:3b:b9:d9:46:73:28:cb:78:db:62:ae:b8:cf:
                    6f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E6:1B:59:B0:A2:29:04:7C:3F:AB:59:3E:70:9F:B8:10:CF:C1:3D
            X509v3 Authority Key Identifier:
                keyid:19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ef:01:c6:98:cf:b2:59:c3:96:ec:d3:44:10:02:79:b3:95:
         13:35:76:da:91:6f:d0:f5:de:d3:8a:29:6e:42:49:b2:3b:79:
         b4:74:a4:87:e7:ea:3d:c5:d5:0d:50:e8:61:f2:e2:56:fe:ca:
         e1:99:61:c0:bf:8f:7d:f7:59:86:20:6e:8e:8d:1a:ce:ad:20:
         38:35:75:ae:37:8e:31:52:fc:8e:11:c3:f7:7d:56:6f:eb:ae:
         49:47:23:96:0f:cb:61:1c:aa:8c:7a:69:e8:3f:e1:35:6b:b2:
         ef:b5:1e:65:54:55:15:b2:6d:04:65:b3:94:ee:0c:de:a1:ea:
         96:85:aa:f7:79:db:72:f1:a8:62:b9:47:b4:2b:33:41:46:59:
         42:f3:25:92:65:6c:23:1b:27:f9:c7:c9:bd:9a:5f:b4:44:5e:
         75:24:48:a2:01:9e:54:d1:c5:cb:42:1b:2e:69:a6:fc:f2:3b:
         a2:f6:32:05:4b:d7:2a:cc:02:47:d5:0c:83:df:88:95:68:c4:
         0a:c7:e8:b5:0a:7f:cd:2a:60:de:bb:bb:ab:f0:0b:a4:4d:ba:
         96:3f:f3:3d:16:f3:ed:54:68:13:56:4e:2a:90:70:34:a7:3f:
         a4:ad:05:c5:e9:70:02:b8:73:6e:84:88:1e:ed:7e:b1:f4:d2:
         d0:f1:f4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:30 2026 by rpki-client