This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
File:                     GU4QqVb6UlFuj9O5MY6EpVOD1is.mft (raw, json)
Hash identifier:          FTfMMR+u+Fo0QMOJ7/wHt31LdSHVMXA5DiqJKYtGyw8=
Subject key identifier:   CF:1D:3C:AA:E7:D8:2C:9D:E6:03:BA:95:F1:B2:84:7C:A4:92:1D:C9
Authority key identifier: 19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
Certificate issuer:       /CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Certificate serial:       019BFC8991719790E9611AEACE26A2F747AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
Manifest number:          0292
Signing time:             Mon 26 Jan 2026 23:00:32 +0000
Manifest this update:     Mon 26 Jan 2026 23:00:32 +0000
Manifest next update:     Tue 27 Jan 2026 23:00:32 +0000
Files and hashes:         1: GU4QqVb6UlFuj9O5MY6EpVOD1is.crl (hash: a06BZe/+01bt+9aHS6ThKUIIWZkuQSVTmYl8dmNGO9I=)
                          2: L6IkYa1mFzPLtO5LIkQRCCe9jl4.roa (hash: Ld5O0t2bBeigoCJRn7m3gG44EpWV7A+830bMM7yTOtE=)
                          3: oyVzd1gmTKT17jlRmnyP0pEMzFs.roa (hash: pAXNP3pz+CMOZzVz6ZojLzDHfBZZpShriq/ea0S+BHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 23:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:89:91:71:97:90:e9:61:1a:ea:ce:26:a2:f7:47:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194e10a956fa52516e8fd3b9318e84a55383d62b
        Validity
            Not Before: Jan 26 23:00:32 2026 GMT
            Not After : Jan 27 23:00:32 2026 GMT
        Subject: CN=cf1d3caae7d82c9de603ba95f1b2847ca4921dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:52:cd:6f:5e:76:ad:25:3a:04:0d:a5:d2:51:
                    dd:48:87:df:02:53:aa:9d:5e:e8:65:c8:5b:81:48:
                    9a:70:b0:a2:ce:05:cf:ae:2d:31:2b:ad:8b:b3:97:
                    be:d0:cc:7a:7a:99:d1:07:d9:b7:bd:8e:78:8f:22:
                    fd:68:de:0f:7e:53:65:09:66:2e:ee:53:24:6d:f8:
                    98:73:1e:03:f0:46:39:fd:20:bd:5c:6b:45:82:3f:
                    c0:7c:c3:2e:e6:ba:3f:20:6e:39:14:2e:2e:7d:2e:
                    5b:62:a2:1b:db:e1:33:6e:ee:e9:16:b2:8b:c0:a8:
                    4f:dd:2c:b3:14:aa:6f:f3:84:7e:f9:30:e9:fc:ec:
                    6c:29:55:fd:20:99:90:b1:d7:ed:15:4a:6e:00:0f:
                    1a:0d:5e:2b:81:fa:35:cc:3b:b7:fe:6a:1a:37:7a:
                    49:05:ba:e1:f5:ee:85:89:9a:72:a3:47:88:41:b6:
                    ed:1b:c6:47:ee:40:79:93:71:98:18:8c:bd:5d:ac:
                    7b:2c:cb:af:0a:3a:57:ee:84:f3:40:f7:cf:58:67:
                    11:3e:c3:bc:1c:68:67:fe:e0:d6:1e:9c:38:fd:0a:
                    58:4e:75:f3:92:e2:11:e2:68:5c:7c:85:6f:4b:03:
                    b8:55:8e:7a:9d:e0:ac:e8:5f:91:bf:43:a9:f6:82:
                    27:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1D:3C:AA:E7:D8:2C:9D:E6:03:BA:95:F1:B2:84:7C:A4:92:1D:C9
            X509v3 Authority Key Identifier:
                keyid:19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:d1:cb:7a:e7:87:10:ca:79:dd:9b:e7:86:de:68:83:09:bd:
         df:89:cc:6e:ce:d1:48:d3:32:90:fb:19:dd:83:38:3f:69:e3:
         3a:7b:4a:be:20:73:a6:c4:5d:57:42:b1:07:8f:e5:48:43:33:
         2f:25:2e:c7:4b:31:e9:38:e7:22:5e:30:2c:96:f0:f3:0c:44:
         72:cf:3d:72:aa:9f:d5:7e:42:d7:b7:b8:b0:05:d7:b6:81:45:
         aa:f0:e0:af:0c:cf:eb:22:8a:3a:fc:84:3d:e4:7c:f1:93:08:
         a0:fe:36:4b:85:4e:ef:fe:c9:51:19:7b:57:c6:07:89:72:ff:
         df:45:3c:de:d4:e6:3b:40:33:33:cf:7c:08:a9:37:1d:e4:01:
         19:0a:51:e4:de:f8:3a:81:61:90:31:6f:ee:13:20:d1:c8:38:
         9d:78:96:8a:ce:7f:d6:7d:6f:fe:de:fd:ff:04:fc:ba:62:16:
         6e:1a:12:cb:e4:d2:c4:8b:38:72:f4:93:78:60:37:0b:f9:09:
         53:c4:2d:25:f4:01:e8:5d:79:44:21:81:da:e8:cc:2b:f1:7a:
         c6:97:22:0f:f2:7f:b5:2c:38:7b:35:f6:51:ad:d5:d9:8c:ff:
         a6:85:34:9f:44:d5:be:a0:da:ff:7d:1c:c7:13:17:e1:52:57:
         3e:fc:bb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 08:29:13 2026 by rpki-client