This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
File:                     GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft (raw, json)
Hash identifier:          fr2Wk0F6B7Nd9pt/HoNB+0puFDwIau6A5/x8wJ6MMQA=
Subject key identifier:   0B:D3:5D:EC:D4:B1:0F:6B:FE:BA:F6:84:8A:6B:30:58:44:8B:6E:5B
Authority key identifier: 1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
Certificate issuer:       /CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Certificate serial:       019C42EBB5DE26292D7FE7639BC0A8300AC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 15:01:09 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:09 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:09 +0000
Files and hashes:         1: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl (hash: LeI3jijWT5HLFPKtmOeFWnJ3IIiAWtAfHCawrN/Yd9E=)
                          2: NYfYWYZMa_439o1QRYF0WdRM5MM.roa (hash: 8UO+Z6kVQhD/teXdacx0W8x4zMZ5SdEkPaLtrfrmHy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:b5:de:26:29:2d:7f:e7:63:9b:c0:a8:30:0a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
        Validity
            Not Before: Feb  9 15:01:09 2026 GMT
            Not After : Feb 10 15:01:09 2026 GMT
        Subject: CN=0bd35decd4b10f6bfebaf6848a6b3058448b6e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e7:b0:97:e3:05:f4:a3:6a:57:ca:0c:89:81:
                    f0:a5:04:6e:05:2f:d1:3a:11:26:8c:87:3d:10:ef:
                    95:03:9c:bb:91:be:54:e3:45:94:9a:48:f8:ed:57:
                    b0:14:f5:87:10:a5:68:8c:76:ea:ba:6a:a3:2b:ad:
                    28:99:6b:aa:bd:78:69:4b:6b:ce:15:a0:cb:b5:62:
                    dc:fe:94:a6:a6:07:d4:c3:7e:59:8e:1c:03:10:4c:
                    24:f0:8a:b3:f9:29:fb:5d:78:9d:a3:1b:6f:85:6b:
                    0d:81:2b:41:f4:51:a2:5c:69:22:2f:05:98:df:cc:
                    ef:88:58:f7:f3:3b:7f:57:14:e1:8a:c0:fe:d5:86:
                    b4:c3:e0:5f:e4:94:4b:d6:b2:bb:a7:d8:79:f7:76:
                    34:70:5c:e2:a0:50:b2:e9:e6:9a:9a:c9:9e:6b:9b:
                    b4:12:0a:6e:b3:89:c4:16:c9:32:14:10:f2:b9:65:
                    7b:a7:e3:2c:db:fe:05:a9:91:ed:73:bf:89:52:38:
                    b6:a0:65:85:46:51:31:24:82:d6:03:85:5f:e2:d7:
                    ff:a9:ad:e3:4f:1b:fd:1f:9b:3a:5b:bc:43:74:43:
                    c5:8b:c5:ef:aa:ff:f7:d1:db:10:1d:fe:b7:6e:55:
                    f6:e5:08:86:7d:44:f0:99:ce:d3:c9:35:f0:d4:bd:
                    0d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D3:5D:EC:D4:B1:0F:6B:FE:BA:F6:84:8A:6B:30:58:44:8B:6E:5B
            X509v3 Authority Key Identifier:
                keyid:1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c2:34:98:86:be:65:50:c9:6b:4e:e4:ba:8b:bf:aa:d7:bd:
         92:aa:5d:89:18:75:b6:f8:78:69:ab:1d:2c:ec:13:4c:82:31:
         e8:c2:81:8d:d6:56:67:a4:b9:91:c4:30:eb:8b:c4:b0:30:f3:
         6d:e1:c5:bb:42:99:55:be:9b:20:f1:7f:da:68:bc:3e:44:be:
         13:1f:a4:0f:9f:4d:43:fa:f9:37:f1:68:ad:b7:ea:e7:c9:65:
         74:b2:b3:a9:9c:65:1e:6f:a4:4e:66:1c:51:54:eb:01:bd:54:
         64:cb:89:89:4c:e4:e3:2f:f4:69:d5:1b:5f:05:65:42:83:fe:
         0b:0a:e9:e6:22:20:23:0b:c6:2a:f9:56:66:3a:a2:00:b0:28:
         ed:cf:1c:db:5a:83:bf:b0:ea:de:fc:71:07:aa:a2:42:e3:5c:
         d2:0d:b3:15:92:ed:ef:c9:05:f8:dd:7a:ad:ca:17:e3:eb:05:
         3e:d9:07:70:99:2e:23:8d:42:7b:f0:07:8a:89:1b:e6:77:87:
         37:dd:d4:3e:18:0e:bb:31:bc:30:54:4e:32:5a:7b:8c:d7:8b:
         32:26:e7:30:70:cf:95:1d:fb:c4:62:2d:f5:c9:c7:47:67:d3:
         6e:43:48:d8:39:16:72:b7:a5:00:47:f7:81:15:0a:03:19:92:
         13:28:fd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:17 2026 by rpki-client