This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
File:                     Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft (raw, json)
Hash identifier:          r8zTaFaDUG3tAEo/GBilMGNWS2jvwrplanWPiHu8Qcg=
Subject key identifier:   83:98:1E:C7:9A:B7:1B:63:B9:DF:05:54:40:F9:86:04:67:CB:0E:12
Authority key identifier: 1A:5B:7D:43:BB:4C:83:E7:C7:D9:7C:E0:75:43:A9:6D:74:C6:9F:DA
Certificate issuer:       /CN=1a5b7d43bb4c83e7c7d97ce07543a96d74c69fda
Certificate serial:       019C427DC4112E553D3AAD3C8BDDDB210840
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
Manifest number:          124E
Signing time:             Mon 09 Feb 2026 13:01:04 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:04 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:04 +0000
Files and hashes:         1: Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl (hash: xlXjlooA/iHGA8BaPxGfauy68tXT3Ks1rJOB9a67Xlk=)
                          2: w-zK3gICwu0tZ5BpaCsJ-LEyh_4.roa (hash: MaoF3Nxzc8V8R020ySbLtYOSWWBezqUdqr7TNLevqTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:c4:11:2e:55:3d:3a:ad:3c:8b:dd:db:21:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5b7d43bb4c83e7c7d97ce07543a96d74c69fda
        Validity
            Not Before: Feb  9 13:01:04 2026 GMT
            Not After : Feb 10 13:01:04 2026 GMT
        Subject: CN=83981ec79ab71b63b9df055440f9860467cb0e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:75:c7:d2:5d:d4:6b:40:3a:de:ce:2d:78:6a:
                    90:a6:39:ec:37:32:86:d7:eb:2e:52:e1:b3:9b:8e:
                    2a:b0:84:84:7a:9f:97:8e:2f:36:19:db:af:08:ef:
                    72:de:bc:24:4e:1d:57:16:7c:63:eb:bf:e1:a7:cc:
                    03:80:8e:0e:c6:66:c5:95:2a:d6:2e:0a:40:dc:6f:
                    de:1b:10:01:8f:da:89:d0:bc:45:0f:f8:18:35:53:
                    40:28:2e:0d:cd:73:2c:c7:8f:6c:b3:15:0c:a0:fe:
                    64:b4:54:2c:4a:53:29:72:b8:2e:49:9d:d8:98:f2:
                    d2:20:8a:8d:a6:b3:b6:d8:aa:0b:c4:c1:16:57:c2:
                    cf:e8:4d:60:05:b2:0b:ec:a9:8b:9e:3a:15:69:18:
                    2e:4f:4f:5b:84:dc:fc:3a:2b:29:f3:92:f5:05:f4:
                    a1:88:cb:a0:fa:e1:b4:11:b8:f3:eb:92:3a:4d:90:
                    f5:dd:d6:ba:c0:78:8b:46:ec:ec:fa:f1:87:76:56:
                    78:12:e2:53:b2:d5:f8:0a:35:30:fe:25:11:d1:de:
                    2c:31:e0:38:e6:3d:01:e9:89:53:58:d2:9a:e3:9e:
                    e6:25:b7:c4:56:2e:26:9d:9c:95:6d:08:06:78:d5:
                    4f:23:a5:63:dd:2e:06:36:01:5b:34:15:44:36:68:
                    d3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:98:1E:C7:9A:B7:1B:63:B9:DF:05:54:40:F9:86:04:67:CB:0E:12
            X509v3 Authority Key Identifier:
                keyid:1A:5B:7D:43:BB:4C:83:E7:C7:D9:7C:E0:75:43:A9:6D:74:C6:9F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:c0:33:db:4a:a7:d0:05:c1:10:a2:21:b5:c8:35:b5:57:d0:
         99:66:54:a5:b9:50:6a:24:99:6a:d4:5a:88:60:f7:ff:17:4b:
         ba:9f:cd:e3:d9:31:cc:2f:0e:7f:75:24:41:4a:c9:be:76:6c:
         e7:2c:ed:fe:bf:68:19:40:c1:3a:99:77:c8:06:f7:bd:01:4e:
         03:a8:25:3b:23:61:dd:d2:47:e3:56:66:a6:20:6e:0a:d6:66:
         65:b8:44:cc:2e:cc:b4:e6:97:92:a1:cf:ed:54:75:8e:78:8d:
         4c:fa:bb:02:d6:e6:63:67:76:a2:37:1e:b1:44:38:a3:21:ea:
         b3:8d:11:e0:99:cf:1f:42:30:2b:56:e8:d2:2d:84:f8:28:02:
         9e:bb:ef:6f:49:e5:d4:5d:06:41:f3:53:15:ad:73:76:d6:bc:
         a1:9f:0f:73:2b:5e:9c:6c:b5:bf:8e:09:93:5a:8d:b2:40:1a:
         46:a4:24:e7:9e:9b:b1:c8:1c:aa:a9:3c:dd:65:db:94:0c:5a:
         4b:be:5a:53:ef:66:a2:2c:ce:ca:9d:67:11:69:33:2f:fe:15:
         08:f8:5a:b2:62:d6:e5:2e:57:31:92:dc:bf:0f:81:14:cf:62:
         dd:1d:ba:af:b1:98:dd:ff:26:b5:7d:76:a9:f8:b3:e0:4d:bb:
         2a:a2:bd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:50 2026 by rpki-client