This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
File:                     GNo6QLEX-yVyzPekwnLS7GklKRw.mft (raw, json)
Hash identifier:          S3ONkkMkzoGAR6fjLhc42GUL1nUTQKpLUJPDfmnINZg=
Subject key identifier:   F9:36:10:18:98:C8:62:08:FA:B7:90:B7:1E:1E:2D:73:47:08:34:FB
Authority key identifier: 18:DA:3A:40:B1:17:FB:25:72:CC:F7:A4:C2:72:D2:EC:69:25:29:1C
Certificate issuer:       /CN=18da3a40b117fb2572ccf7a4c272d2ec6925291c
Certificate serial:       019C42B3FF52D6BD9D508E49FD74BA7C8786
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
Manifest number:          180D
Signing time:             Mon 09 Feb 2026 14:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:18 +0000
Files and hashes:         1: GNo6QLEX-yVyzPekwnLS7GklKRw.crl (hash: 03YvRjaoN1KpFkiWNvKdblSPzNUXEnKBU2hoXr0U7zw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b3:ff:52:d6:bd:9d:50:8e:49:fd:74:ba:7c:87:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18da3a40b117fb2572ccf7a4c272d2ec6925291c
        Validity
            Not Before: Feb  9 14:00:18 2026 GMT
            Not After : Feb 10 14:00:18 2026 GMT
        Subject: CN=f936101898c86208fab790b71e1e2d73470834fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:61:6e:2d:e1:1e:df:34:03:97:af:a3:53:89:
                    1f:5b:e9:76:31:53:00:da:b4:3c:54:ee:f9:6d:3a:
                    bb:85:7e:5f:65:59:f8:87:09:3b:60:e5:d1:7e:61:
                    83:01:96:44:df:4a:dd:f9:8e:05:e9:a6:b6:b5:f1:
                    13:77:21:e2:4f:6c:e6:8e:7b:07:01:2a:8d:5d:9e:
                    b2:6a:fa:57:2d:73:21:40:25:51:c4:32:e7:d1:28:
                    dc:a5:b8:ca:8d:7c:f3:fa:72:36:47:f1:15:0b:6a:
                    0a:3f:21:e0:e8:d7:5d:09:c1:fa:18:ad:ea:57:02:
                    61:6b:a0:f7:4d:dd:dc:a5:1d:a2:e5:10:a2:2b:95:
                    3f:2f:0b:fd:99:af:77:37:9c:80:e7:7b:0e:48:72:
                    af:34:0d:d9:20:f1:aa:13:ba:7a:f9:f7:a6:88:f1:
                    a9:8e:f1:73:82:b1:3d:44:83:c8:7b:92:99:cf:3f:
                    90:65:9e:c2:95:6f:3a:8b:e9:13:ee:f2:44:7c:c3:
                    11:3f:6c:ae:c3:e8:a7:a9:ba:c2:61:29:00:4c:23:
                    46:c0:3b:7d:ad:8c:3a:51:d0:27:45:b6:a0:68:04:
                    e9:cd:ae:15:03:50:9e:4d:ff:9f:c6:12:d9:b1:14:
                    d4:ac:23:c5:02:d8:32:14:7e:fe:7c:9e:4e:47:af:
                    3b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:36:10:18:98:C8:62:08:FA:B7:90:B7:1E:1E:2D:73:47:08:34:FB
            X509v3 Authority Key Identifier:
                keyid:18:DA:3A:40:B1:17:FB:25:72:CC:F7:A4:C2:72:D2:EC:69:25:29:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b5:0f:27:38:38:c7:87:de:db:90:2f:b0:fd:12:9b:7a:1f:
         a9:3e:b0:f6:40:26:ad:75:fd:7b:42:f7:28:98:00:70:72:31:
         c3:ee:8f:7c:b2:90:51:0f:68:14:5a:62:dc:e4:de:20:71:7a:
         bb:d0:e0:0b:d4:52:7e:d5:c0:35:6e:01:70:12:b7:45:6b:e9:
         60:01:1d:99:53:55:8d:2a:07:ec:3d:a0:ee:cd:a2:c7:a9:8f:
         ea:3d:79:09:27:ae:b2:d6:60:a3:6c:93:17:a6:49:2e:e4:62:
         3c:a1:3a:ba:75:2f:a7:ad:02:b7:e3:eb:22:be:76:ce:e2:dc:
         c5:23:64:4b:61:be:cc:41:dc:5b:0d:76:15:8d:ed:3c:ab:74:
         7e:06:64:0c:3c:55:22:f3:09:cb:97:d4:98:19:cf:27:43:72:
         de:03:d9:22:59:27:04:d5:2c:8b:b4:4e:c1:65:26:d5:fa:4f:
         f8:a1:03:0a:22:82:87:2e:a2:15:f8:2d:c4:a3:be:3d:a4:cb:
         f1:94:29:ba:42:a3:c5:4e:bc:26:8a:8c:f3:c8:98:3d:58:26:
         bc:30:4d:5e:e1:ce:b4:29:1f:bc:e0:58:ff:6b:1c:0f:72:7d:
         a6:85:17:08:95:f7:33:fc:5c:ca:74:da:96:a9:ce:62:78:48:
         c4:5e:6e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:09 2026 by rpki-client