This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
File:                     GMpt4aSKToxbivHq6bXoC_z5LEU.mft (raw, json)
Hash identifier:          hfRYz91lsbow6dST9YyXtnglMEo3moTcMkjmopZ85UY=
Subject key identifier:   99:74:5A:B2:B2:20:80:31:96:CA:D9:21:40:89:E8:CD:81:4A:9E:F3
Authority key identifier: 18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
Certificate issuer:       /CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Certificate serial:       019C1DCCE69B3608685E43FD3FAB15DA08B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
Manifest number:          06F1
Signing time:             Mon 02 Feb 2026 10:01:33 +0000
Manifest this update:     Mon 02 Feb 2026 10:01:33 +0000
Manifest next update:     Tue 03 Feb 2026 10:01:33 +0000
Files and hashes:         1: GMpt4aSKToxbivHq6bXoC_z5LEU.crl (hash: GSVqRFRA0DWiA80TWUEkkOlgSQEBl/kMCNWhNwyb0bw=)
                          2: nZoO22NOlzzLttq20LfxDoJMdQg.roa (hash: s7xmgKi+9ZabhreTnecVdCUPnnVuLBbgQA+8atVMyO4=)
                          3: o0mi1ecW1qDQy0JOYUzQEq3UCno.roa (hash: hV2jBoTpFaaL+UTs/7eomqtU5upO4Ya9tPbfPL2XyYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 10:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:cc:e6:9b:36:08:68:5e:43:fd:3f:ab:15:da:08:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
        Validity
            Not Before: Feb  2 10:01:33 2026 GMT
            Not After : Feb  3 10:01:33 2026 GMT
        Subject: CN=99745ab2b220803196cad9214089e8cd814a9ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:29:34:eb:9a:c4:97:f4:15:93:98:79:da:0e:
                    5c:69:35:22:e9:a1:a5:cc:70:16:d1:ac:b0:2e:17:
                    9b:26:7b:86:70:af:d9:8b:6a:95:20:85:25:2c:c7:
                    22:af:a7:99:43:e3:be:43:bb:bb:b1:db:b0:fa:45:
                    b1:67:c2:e7:34:27:ba:5e:f6:4f:86:b5:e0:49:54:
                    fe:d5:d3:51:67:50:4e:6c:b0:05:79:d3:f0:5d:47:
                    19:85:19:24:67:99:60:0f:58:d0:44:a6:8e:50:fa:
                    11:ec:21:47:d6:a7:7c:55:84:e6:5b:b5:23:2d:30:
                    1d:81:97:e3:5e:87:f1:05:1c:00:51:f9:a0:bb:21:
                    8f:c6:c3:a0:17:15:b3:73:d3:65:9b:2e:8c:7a:d1:
                    15:c5:cc:1e:c5:2f:db:55:df:59:5e:cf:25:d8:7e:
                    db:11:04:31:ba:40:70:29:e7:50:c6:76:72:8a:aa:
                    5a:c8:12:d8:d6:59:76:ff:89:80:0e:83:c2:a3:25:
                    e7:a9:95:23:23:06:6a:44:eb:a4:05:9d:34:97:dc:
                    9b:7f:f0:7e:00:ab:38:a1:39:d8:d9:a5:95:66:eb:
                    78:da:23:81:90:d9:e1:26:89:63:98:a2:ac:45:c4:
                    73:d9:b0:8b:59:4c:b3:c2:2a:3b:d7:ee:ee:9c:75:
                    26:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:74:5A:B2:B2:20:80:31:96:CA:D9:21:40:89:E8:CD:81:4A:9E:F3
            X509v3 Authority Key Identifier:
                keyid:18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:90:a0:cb:b0:99:08:f9:1c:ee:ea:7c:90:fd:19:e7:36:69:
         bb:11:63:b9:04:22:bf:23:b6:0e:7d:d3:1a:67:88:cb:9f:e8:
         fe:cb:ee:c3:cb:c2:c4:ff:e6:05:ec:03:c5:d0:43:9a:99:f2:
         9d:6d:5b:93:af:75:53:df:ec:f4:48:4a:a9:05:8d:d9:a9:7a:
         e9:a5:48:bd:01:6c:fc:ab:40:e7:43:86:76:6b:23:c4:89:0b:
         78:63:e0:81:4e:e5:bf:40:a9:10:c4:26:2c:22:98:a4:8b:24:
         cc:82:f9:2a:3c:b6:38:e7:4e:41:4f:77:c0:09:4f:8b:72:d6:
         e3:63:2e:8a:d9:a3:70:7b:66:18:85:25:55:33:ed:af:ad:1c:
         3b:49:df:ca:ae:18:0f:1c:ee:df:4b:8f:08:00:69:3e:46:d8:
         d5:1a:a1:83:aa:d5:74:7e:60:12:9f:cc:24:00:ae:a0:1a:6c:
         b7:c2:95:05:e2:5e:4b:03:67:73:53:69:f2:e2:9e:5f:88:b6:
         16:f5:d9:37:8c:15:20:99:c9:7e:60:fe:c3:88:82:51:53:a2:
         35:72:2c:21:7e:9c:3a:06:68:41:41:96:16:d2:c0:68:e6:65:
         4c:1d:1b:a9:b2:e5:a2:0e:a5:06:82:4a:1f:7e:21:89:d8:f4:
         e6:42:a1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 20:44:54 2026 by rpki-client