This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
File:                     GrXCK_U7cFx6K7JzunPj8MBZW3s.mft (raw, json)
Hash identifier:          /Lp7CXEO6/GbARwouRRPE0iG1xvzThtEp8hcNZaPy3k=
Subject key identifier:   43:D1:46:F7:87:B1:13:CD:A8:F8:D6:DE:80:50:60:C6:26:66:3A:03
Authority key identifier: 1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
Certificate issuer:       /CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Certificate serial:       019C438FDF735829395B621FA2FA44B1F45F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
Manifest number:          1818
Signing time:             Mon 09 Feb 2026 18:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:28 +0000
Files and hashes:         1: FjlUOZvW96ADTmmnM6L72d8iARo.roa (hash: kIe35Th4NAZk6eCGw7Pep7yHHgIezVmLRC6I4uCSvTI=)
                          2: GrXCK_U7cFx6K7JzunPj8MBZW3s.crl (hash: PGDioPuHaXh6N0nxPOiXtQ3frXqsKdeia9Pl5No8sFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:df:73:58:29:39:5b:62:1f:a2:fa:44:b1:f4:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
        Validity
            Not Before: Feb  9 18:00:28 2026 GMT
            Not After : Feb 10 18:00:28 2026 GMT
        Subject: CN=43d146f787b113cda8f8d6de805060c626663a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:61:33:17:29:2c:be:22:a5:d9:8d:19:e2:d8:
                    43:96:d6:2b:f3:db:f2:a6:8b:9c:60:77:59:29:ac:
                    9d:31:fb:d1:7f:41:fd:c9:16:95:ec:0b:cc:2f:74:
                    19:05:8c:b6:48:15:7e:21:af:74:fa:df:1f:25:8f:
                    48:ce:2a:68:ae:d8:26:e8:27:59:83:e0:af:ad:f8:
                    c3:d9:d2:34:44:60:54:ba:05:61:32:e8:00:46:9c:
                    e6:67:04:60:3d:9e:37:9b:f6:a7:99:28:15:46:bc:
                    c6:eb:9e:e7:f7:62:fa:54:bf:6a:e3:e9:cd:1c:53:
                    fa:7d:d7:7e:a0:c8:f3:0f:73:f7:8e:83:94:50:43:
                    96:f0:15:e1:46:9b:81:6f:4c:1f:ff:45:f2:6b:82:
                    1a:d0:b1:4a:f7:44:80:ce:11:01:05:cd:aa:e7:47:
                    f4:0a:f1:a3:13:23:65:67:96:db:bd:7c:db:d0:cb:
                    e8:3e:28:d7:21:e9:d2:4e:11:9d:26:8b:83:ce:b6:
                    6d:94:df:22:95:97:55:55:3a:a4:76:42:64:d6:39:
                    4b:82:0f:c6:f3:79:2c:1e:c0:1e:79:65:6b:88:b6:
                    27:42:ec:77:59:19:62:54:13:ec:f0:d5:d3:f6:2c:
                    05:d7:ae:f5:64:72:02:3f:82:5c:d0:c7:62:f4:6d:
                    c0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D1:46:F7:87:B1:13:CD:A8:F8:D6:DE:80:50:60:C6:26:66:3A:03
            X509v3 Authority Key Identifier:
                keyid:1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c1:59:55:1e:7d:25:f4:2c:f8:a4:52:b6:c9:49:18:1a:88:
         82:65:f5:c0:af:dc:1d:2f:3b:c5:1c:c6:71:3e:f3:f2:db:e5:
         d9:59:9e:0e:10:bd:1d:0b:f4:a7:0f:10:1d:8e:c3:09:6a:e0:
         21:02:35:25:c1:9a:8b:5d:75:a9:50:df:e0:90:af:2b:7a:b0:
         b3:15:b0:44:a1:e1:7f:1a:b3:06:74:4c:6b:3e:06:5f:02:ce:
         4c:f9:a9:f4:78:53:64:9a:36:a0:7e:c4:f5:20:9b:6d:d8:f3:
         e8:58:ce:1e:97:4d:66:36:b1:07:36:65:bf:df:06:08:d7:e7:
         8e:35:81:6e:91:27:52:d9:e8:cd:76:f1:52:fd:08:bf:7b:91:
         a0:99:da:d3:4b:8a:fb:e2:db:cc:2f:ed:7f:35:57:da:ce:90:
         b2:7b:e6:81:e3:70:38:c6:ce:7d:02:ff:3f:3c:40:71:f1:1d:
         de:da:73:68:81:8f:cb:7f:db:b1:f9:0e:d0:f4:d9:79:95:90:
         c3:de:02:a4:8a:bd:58:1e:c7:b8:bb:f9:8a:9d:b8:2d:f4:ce:
         2b:7f:04:db:10:66:a4:3f:74:c6:90:51:27:39:e1:2b:36:d4:
         72:bd:03:82:a4:e1:ba:af:b6:13:b2:42:b9:a1:92:66:bf:53:
         04:31:dc:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDj99zWCk5W2IfovpEsfRfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYjVjMjJiZjUzYjcwNWM3YTJiYjI3M2JhNzNlM2YwYzA1
OTViN2IwHhcNMjYwMjA5MTgwMDI4WhcNMjYwMjEwMTgwMDI4WjAzMTEwLwYDVQQD
Eyg0M2QxNDZmNzg3YjExM2NkYThmOGQ2ZGU4MDUwNjBjNjI2NjYzYTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52EzFyksviKl2Y0Z4thDltYr89vy
poucYHdZKaydMfvRf0H9yRaV7AvML3QZBYy2SBV+Ia90+t8fJY9Iziportgm6CdZ
g+CvrfjD2dI0RGBUugVhMugARpzmZwRgPZ43m/anmSgVRrzG657n92L6VL9q4+nN
HFP6fdd+oMjzD3P3joOUUEOW8BXhRpuBb0wf/0Xya4Ia0LFK90SAzhEBBc2q50f0
CvGjEyNlZ5bbvXzb0MvoPijXIenSThGdJouDzrZtlN8ilZdVVTqkdkJk1jlLgg/G
83ksHsAeeWVriLYnQux3WRliVBPs8NXT9iwF1671ZHICP4Jc0Mdi9G3ABQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPRRveHsRPNqPjW3oBQYMYmZjoDMB8GA1UdIwQY
MBaAFBq1wiv1O3Bceiuyc7pz4/DAWVt7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3JYQ0tfVTdjRng2SzdKenVuUGo4TUJaVzNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi83YzhiZjQtNmFiNi00MTk5LWIzYTct
YjRiMWY2Zjk4YTkwLzEvR3JYQ0tfVTdjRng2SzdKenVuUGo4TUJaVzNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi83YzhiZjQtNmFiNi00MTk5LWIzYTctYjRiMWY2Zjk4YTkw
LzEvR3JYQ0tfVTdjRng2SzdKenVuUGo4TUJaVzNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsFZVR59
JfQs+KRStslJGBqIgmX1wK/cHS87xRzGcT7z8tvl2VmeDhC9HQv0pw8QHY7DCWrg
IQI1JcGai111qVDf4JCvK3qwsxWwRKHhfxqzBnRMaz4GXwLOTPmp9HhTZJo2oH7E
9SCbbdjz6FjOHpdNZjaxBzZlv98GCNfnjjWBbpEnUtnozXbxUv0Iv3uRoJna00uK
++LbzC/tfzVX2s6QsnvmgeNwOMbOfQL/PzxAcfEd3tpzaIGPy3/bsfkO0PTZeZWQ
w94CpIq9WB7HuLv5ip24LfTOK38E2xBmpD90xpBRJznhKzbUcr0DgqThuq+2E7JC
uaGSZr9TBDHcNw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:00 2026 by rpki-client