This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
File:                     gs1f087z4cqiC7ph-i1RtrlOtU0.mft (raw, json)
Hash identifier:          Sy8Qshk29KEo42EL4eZQu2V0RmBGEp8jG8yxqkjrqL4=
Subject key identifier:   FF:D1:7D:BE:A8:09:7B:00:F5:68:10:D7:FD:8A:09:D1:CC:FA:FD:58
Authority key identifier: 82:CD:5F:D3:CE:F3:E1:CA:A2:0B:BA:61:FA:2D:51:B6:B9:4E:B5:4D
Certificate issuer:       /CN=82cd5fd3cef3e1caa20bba61fa2d51b6b94eb54d
Certificate serial:       019C43906BE38CB89C368BC0A381FCB9D955
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
Manifest number:          098D
Signing time:             Mon 09 Feb 2026 18:01:04 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:04 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:04 +0000
Files and hashes:         1: 18OuO3YLBaVeqqlU-R18PjcKR2o.roa (hash: NlnhsswwnMpwMkpGryqI6bDof76aAgmGxVw0Adxc50I=)
                          2: gs1f087z4cqiC7ph-i1RtrlOtU0.crl (hash: dLy9vl5X71nofHHjSEtzrYtLqXp/q068uSiooYnAVkE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:6b:e3:8c:b8:9c:36:8b:c0:a3:81:fc:b9:d9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82cd5fd3cef3e1caa20bba61fa2d51b6b94eb54d
        Validity
            Not Before: Feb  9 18:01:04 2026 GMT
            Not After : Feb 10 18:01:04 2026 GMT
        Subject: CN=ffd17dbea8097b00f56810d7fd8a09d1ccfafd58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7e:04:e4:25:83:f9:d8:59:7b:01:cc:8b:a2:
                    65:8b:12:c5:aa:2e:a5:03:c2:46:c1:e9:a6:47:2e:
                    aa:e8:ee:41:22:cd:17:2d:63:b7:35:4f:f8:e7:5f:
                    b4:ae:ae:b7:6f:ae:57:db:55:41:b8:56:b2:cd:93:
                    97:e6:26:3c:d7:af:70:98:30:74:c5:22:46:b5:b9:
                    3e:c9:60:cf:61:a3:25:0a:ad:03:63:92:7f:2f:b1:
                    24:c0:52:28:c6:32:37:1e:9b:61:86:bd:b7:6f:02:
                    b2:25:2f:bb:be:e6:54:b4:d6:c6:0a:f1:58:2f:ee:
                    6e:37:ca:ec:cb:bb:00:0a:0b:92:9f:ce:9f:81:8f:
                    7c:43:36:6c:54:2e:8d:d4:90:f4:bd:ee:ff:96:d0:
                    bc:f8:0f:0d:1a:8e:b9:5c:0c:c9:29:fa:76:87:03:
                    14:8e:a7:11:35:6c:ba:c2:70:ec:fc:db:d4:70:d5:
                    04:63:72:10:a8:4a:a8:38:cf:2c:15:eb:0f:1e:8a:
                    f5:ba:9c:d4:56:82:b2:cf:c6:43:8a:a8:eb:fe:7c:
                    15:5f:58:62:d5:ac:13:89:83:bd:69:9b:17:01:f6:
                    d9:08:f9:68:bf:84:7d:5d:3e:d5:ca:7f:24:f9:18:
                    0e:03:f6:47:d4:7e:9a:5d:db:74:72:74:09:71:ca:
                    87:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D1:7D:BE:A8:09:7B:00:F5:68:10:D7:FD:8A:09:D1:CC:FA:FD:58
            X509v3 Authority Key Identifier:
                keyid:82:CD:5F:D3:CE:F3:E1:CA:A2:0B:BA:61:FA:2D:51:B6:B9:4E:B5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:47:b8:4c:f8:94:6d:7d:e7:5e:f6:5a:8f:3b:f8:6d:ae:8d:
         0d:6f:ba:42:94:d0:19:af:e1:de:4a:4c:05:e7:c2:d7:d0:13:
         39:93:5b:36:c5:ca:60:59:b2:a8:8b:42:d8:0b:a1:b6:30:20:
         88:d8:1d:3a:c9:04:4d:c6:40:af:f7:93:ca:10:bc:d6:10:a7:
         f6:fe:4a:35:de:14:98:e4:c1:3d:b2:66:e3:43:d9:78:31:5d:
         5d:bf:a4:c9:30:b0:7b:e4:a8:92:b9:aa:63:7b:c6:fe:a5:b7:
         37:9f:74:f2:7f:71:f4:31:1f:df:5a:28:38:0d:f8:e1:7e:aa:
         d6:84:a2:46:26:4b:a5:72:eb:f5:28:6f:51:ba:21:3f:22:9b:
         15:cc:26:ba:b8:dc:6f:56:9e:15:71:99:37:c8:db:c2:b9:f3:
         31:92:9f:25:c1:01:da:42:83:cb:26:40:a1:1e:60:7a:e9:e6:
         52:dc:e3:e2:10:0f:bf:d4:33:e1:e3:65:57:2d:04:9f:fe:c6:
         dc:93:20:00:a8:2d:f7:2a:8c:78:e4:53:54:6c:79:a3:ed:a3:
         b8:62:c7:bb:7a:57:56:83:d1:28:a6:ed:94:61:b6:25:7c:17:
         99:24:ef:3d:72:ff:fa:aa:60:20:1a:e1:b0:d4:9c:03:b3:96:
         ac:d9:f3:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkGvjjLicNovAo4H8udlVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyY2Q1ZmQzY2VmM2UxY2FhMjBiYmE2MWZhMmQ1MWI2Yjk0
ZWI1NGQwHhcNMjYwMjA5MTgwMTA0WhcNMjYwMjEwMTgwMTA0WjAzMTEwLwYDVQQD
EyhmZmQxN2RiZWE4MDk3YjAwZjU2ODEwZDdmZDhhMDlkMWNjZmFmZDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX4E5CWD+dhZewHMi6JlixLFqi6l
A8JGwemmRy6q6O5BIs0XLWO3NU/451+0rq63b65X21VBuFayzZOX5iY8169wmDB0
xSJGtbk+yWDPYaMlCq0DY5J/L7EkwFIoxjI3Hpthhr23bwKyJS+7vuZUtNbGCvFY
L+5uN8rsy7sACguSn86fgY98QzZsVC6N1JD0ve7/ltC8+A8NGo65XAzJKfp2hwMU
jqcRNWy6wnDs/NvUcNUEY3IQqEqoOM8sFesPHor1upzUVoKyz8ZDiqjr/nwVX1hi
1awTiYO9aZsXAfbZCPlov4R9XT7Vyn8k+RgOA/ZH1H6aXdt0cnQJccqHjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/Rfb6oCXsA9WgQ1/2KCdHM+v1YMB8GA1UdIwQY
MBaAFILNX9PO8+HKogu6YfotUba5TrVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3MxZjA4N3o0Y3FpQzdwaC1pMVJ0cmxPdFUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81MzZlNTQtZDhmZC00NWVmLWJlNjAt
ZjUyMzA2ZWViNzIyLzEvZ3MxZjA4N3o0Y3FpQzdwaC1pMVJ0cmxPdFUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81MzZlNTQtZDhmZC00NWVmLWJlNjAtZjUyMzA2ZWViNzIy
LzEvZ3MxZjA4N3o0Y3FpQzdwaC1pMVJ0cmxPdFUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqke4TPiU
bX3nXvZajzv4ba6NDW+6QpTQGa/h3kpMBefC19ATOZNbNsXKYFmyqItC2AuhtjAg
iNgdOskETcZAr/eTyhC81hCn9v5KNd4UmOTBPbJm40PZeDFdXb+kyTCwe+Sokrmq
Y3vG/qW3N5908n9x9DEf31ooOA344X6q1oSiRiZLpXLr9ShvUbohPyKbFcwmurjc
b1aeFXGZN8jbwrnzMZKfJcEB2kKDyyZAoR5geunmUtzj4hAPv9Qz4eNlVy0En/7G
3JMgAKgt9yqMeORTVGx5o+2juGLHu3pXVoPRKKbtlGG2JXwXmSTvPXL/+qpgIBrh
sNScA7OWrNnzlw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:05 2026 by rpki-client