This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft
File:                     gfOofhE2a1RaWhJ7gyh2U7GMilY.mft (raw, json)
Hash identifier:          PVoskP6xe8gatodoComxjiyUVH02/B/IzkI3ykKs4zQ=
Subject key identifier:   88:93:D1:88:91:4C:AC:17:26:A6:DD:27:94:AD:D8:98:A4:35:F8:DB
Authority key identifier: 81:F3:A8:7E:11:36:6B:54:5A:5A:12:7B:83:28:76:53:B1:8C:8A:56
Certificate issuer:       /CN=81f3a87e11366b545a5a127b83287653b18c8a56
Certificate serial:       019C427DBA6A1C1BD5D98D8F9FE82F2DB9B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft
Manifest number:          01F6
Signing time:             Mon 09 Feb 2026 13:01:01 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:01 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:01 +0000
Files and hashes:         1: eB3uPlbhT9tEDY5qNe0tIWTsTWY.roa (hash: zKY7/TDIQJUuidUGqhY09n7E2V88zvDbW+XuMaOB4/g=)
                          2: gfOofhE2a1RaWhJ7gyh2U7GMilY.crl (hash: G4IBYFKjSz9ENckMfEIbekV68gBaZ4g+BcoG0aa5pSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:ba:6a:1c:1b:d5:d9:8d:8f:9f:e8:2f:2d:b9:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81f3a87e11366b545a5a127b83287653b18c8a56
        Validity
            Not Before: Feb  9 13:01:01 2026 GMT
            Not After : Feb 10 13:01:01 2026 GMT
        Subject: CN=8893d188914cac1726a6dd2794add898a435f8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:db:9d:a2:38:de:64:aa:d5:22:2b:0f:df:51:
                    85:e8:5f:09:10:2c:8d:5f:61:02:d8:9f:3f:47:d0:
                    f7:1e:e1:d9:59:91:52:cc:60:f7:c0:9d:db:b3:4f:
                    3f:f0:a6:0b:08:de:24:4b:73:ca:19:43:c1:67:43:
                    fc:bb:c0:4a:4e:f1:c7:07:47:58:05:b6:aa:d9:83:
                    fe:01:da:54:d4:db:ab:67:b0:c0:ba:07:3c:a8:38:
                    1a:c6:9f:49:ce:b3:47:cf:97:65:8e:04:78:0a:b8:
                    4c:e5:0d:a9:f2:64:c3:57:ba:1d:63:ee:9f:60:fe:
                    c5:40:9c:5d:f7:e1:9e:42:6f:c8:11:96:c5:67:41:
                    b8:61:29:d9:5f:5c:56:5a:df:38:ef:1c:78:8f:6a:
                    33:dd:ae:f5:f6:b3:56:6b:70:8e:c0:c9:97:f8:f6:
                    bb:4e:4b:bc:63:0a:9c:e8:99:69:96:28:27:3f:74:
                    7d:91:53:dd:99:87:85:97:f2:ff:95:de:b9:fa:f1:
                    0c:20:69:88:7d:f3:d3:ce:9f:dc:80:39:ad:28:6a:
                    3c:5b:e3:53:b4:4e:2c:42:40:04:26:81:16:46:da:
                    7e:f4:ed:10:7e:40:d7:6d:8f:82:e3:46:d8:d3:a3:
                    7b:fa:3a:30:86:7d:79:36:7b:ec:44:85:42:10:e9:
                    21:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:93:D1:88:91:4C:AC:17:26:A6:DD:27:94:AD:D8:98:A4:35:F8:DB
            X509v3 Authority Key Identifier:
                keyid:81:F3:A8:7E:11:36:6B:54:5A:5A:12:7B:83:28:76:53:B1:8C:8A:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:68:00:f4:b2:51:1a:fb:64:ec:73:25:d5:e6:44:41:fa:17:
         6e:b8:7c:89:8a:34:f5:ae:b5:46:c0:0f:5c:68:4a:e9:ae:41:
         b2:b0:6e:57:42:09:a4:38:26:32:b9:d7:89:29:cc:f3:78:50:
         56:4a:a2:44:2e:03:e8:2b:9f:28:88:ed:b5:8d:6f:15:22:cd:
         8a:a3:36:82:83:02:9e:a1:d6:f6:9f:89:b5:b5:22:94:26:35:
         78:91:f4:4d:be:8f:2b:00:a8:f1:b5:17:3c:e2:52:47:21:a2:
         13:4c:7c:f2:fc:b5:94:c3:be:46:5b:56:55:c3:0c:87:46:eb:
         f7:7f:18:30:96:25:9a:2d:39:e5:3a:f0:fb:1a:be:e4:19:fb:
         38:09:c6:5f:95:5a:53:95:72:27:1b:ee:68:38:28:bd:ee:8e:
         58:3a:61:0f:99:22:f0:51:39:fb:b5:94:c6:13:0e:ce:5c:4f:
         3f:e1:03:bf:1f:be:83:90:76:74:41:b5:a2:54:57:1b:fa:71:
         db:5f:9d:ea:60:71:55:35:03:e5:97:0f:ea:63:3f:47:52:3e:
         b7:45:a4:69:14:ab:fc:00:e5:4b:82:42:3d:99:54:e7:8b:42:
         35:45:f5:dd:2b:5e:f5:d2:6f:52:da:26:44:9c:28:06:41:22:
         00:be:df:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:24 2026 by rpki-client