This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
File:                     GZdiXDlfuGf12AjVNZehHOfzxMs.mft (raw, json)
Hash identifier:          wcLc5AubrNB793KGhXJ5GhNGdDVeqY8HZqfMfGQFVvY=
Subject key identifier:   7B:74:42:81:13:98:C9:DB:D7:9A:4D:91:4B:93:E2:E7:01:B5:8D:9F
Authority key identifier: 19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
Certificate issuer:       /CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Certificate serial:       019C432245CB02612976852BCFB1B6145742
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 16:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:45 +0000
Files and hashes:         1: 9PJJMzY2oUycU8l8cSSelJBMcWc.roa (hash: oL+z5SaUyU8viR3KBSssNRDGEAldy3Dx3YEcED4SCvw=)
                          2: GZdiXDlfuGf12AjVNZehHOfzxMs.crl (hash: tnAUqAT1G4vffYTVBx2bIHzsvTHGS36GnIv8YQvFAa8=)
                          3: sPW3SqhXQFkvyEdUczVqCrMoZZM.roa (hash: PP/JgUlM59r8wR9R5R4QZCwoOfZzBFE/FyC4nN3GGNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:45:cb:02:61:29:76:85:2b:cf:b1:b6:14:57:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
        Validity
            Not Before: Feb  9 16:00:45 2026 GMT
            Not After : Feb 10 16:00:45 2026 GMT
        Subject: CN=7b7442811398c9dbd79a4d914b93e2e701b58d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:17:91:bc:77:25:97:80:b5:c3:4a:fd:ae:36:
                    eb:59:a6:cf:4b:62:d4:64:57:a1:18:39:12:df:76:
                    85:57:d1:70:51:ad:8a:ab:bd:53:47:a5:28:25:6b:
                    97:e0:5f:3e:d8:70:50:b6:fc:f3:98:1b:70:e7:03:
                    01:33:ac:ce:56:bb:d4:78:d6:e3:b1:dd:43:30:88:
                    5c:77:09:1a:2f:f9:44:5a:e6:28:94:c4:4b:66:7c:
                    97:00:27:64:57:5f:da:68:24:8d:44:21:05:d2:27:
                    88:e8:b5:ba:cd:0f:7f:4c:2f:05:96:8f:6a:04:f1:
                    58:6a:db:72:3b:64:81:52:ee:d1:1a:ce:53:27:32:
                    92:76:db:e6:76:4e:a1:3c:c6:af:d1:10:11:69:1c:
                    a2:10:6e:8e:5d:1e:97:ad:58:ed:da:fe:fe:ec:67:
                    09:f1:d2:7b:d6:5a:57:a1:d4:06:66:72:c1:b6:55:
                    61:97:e5:77:69:98:5e:57:36:c7:50:87:e2:24:0d:
                    bf:ce:8a:35:24:04:20:9f:3f:58:de:ef:eb:61:c6:
                    b7:4e:55:73:12:d9:1e:18:fc:b2:c9:2e:71:dd:09:
                    9b:3a:95:8b:e4:2d:19:b7:08:d0:c0:22:41:22:92:
                    dd:7f:74:a7:16:4f:f8:d7:7a:07:b6:df:00:59:ad:
                    18:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:74:42:81:13:98:C9:DB:D7:9A:4D:91:4B:93:E2:E7:01:B5:8D:9F
            X509v3 Authority Key Identifier:
                keyid:19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:00:b2:a3:be:1d:dc:74:0f:ec:25:96:44:d0:73:3a:38:22:
         b0:06:1b:36:33:fb:3e:d5:3f:92:bc:49:60:a0:b1:e0:28:9a:
         ae:44:24:4d:74:fb:8b:8f:4e:ea:99:2a:41:01:24:54:b7:98:
         71:ff:e7:bd:b9:d5:f7:be:df:23:64:62:f7:76:4f:80:b8:98:
         a8:03:5c:2a:13:48:6a:86:b2:89:6f:03:71:dd:bf:f4:9f:5a:
         32:87:e6:0f:52:64:7c:54:17:fd:87:ae:7e:97:ad:4b:c2:8a:
         72:c3:30:b7:6d:94:5d:6d:70:72:75:71:40:c8:e2:23:f1:d7:
         0c:ef:e7:7c:5b:f7:ab:e4:66:e6:24:be:43:30:33:9c:d7:c9:
         8d:fb:15:47:5e:36:6e:45:19:fe:7f:e4:dd:4f:75:e9:f2:4a:
         3a:78:97:11:4e:f3:8a:ff:8b:0f:cf:49:ff:b3:08:a7:5f:8b:
         ea:c8:2b:94:96:7b:9e:ee:4f:e1:8a:21:e2:7a:69:0e:21:3f:
         ae:bb:14:06:a6:b9:ee:db:06:a9:e5:84:be:6e:cd:1e:f1:5d:
         87:b7:3b:58:d7:58:5b:ba:69:68:de:ca:a8:33:11:7c:87:ed:
         e2:d8:e9:32:3a:c5:0b:ce:fa:ee:b8:6d:39:3b:83:3a:f3:64:
         05:db:ba:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:58 2026 by rpki-client