This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
File:                     GdZfozzls_e9tJfl_KUJ1_wDxpM.mft (raw, json)
Hash identifier:          NH9QyO9PRYjV7G9v+byCxyTkd2IqV3+xC0DcQ4obnIM=
Subject key identifier:   A9:84:EA:F4:10:DE:1F:CD:85:F2:C5:19:7B:58:AC:9E:5E:55:E6:9E
Authority key identifier: 19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93
Certificate issuer:       /CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
Certificate serial:       019C420FB08A1F0A1CF893FC4B77B3C6F197
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 11:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:50 +0000
Files and hashes:         1: 3V9wiUwvfamuLVADXY0C4Wev7bI.roa (hash: l+RFmyKJ2p1Pn5PCTCrdi1at5JyBh4SapJ5re9I2vYw=)
                          2: GdZfozzls_e9tJfl_KUJ1_wDxpM.crl (hash: Zekjupqit1KIZtCkrDQqEHs0xuQ65B8YPpOOHuEuhSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:b0:8a:1f:0a:1c:f8:93:fc:4b:77:b3:c6:f1:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
        Validity
            Not Before: Feb  9 11:00:50 2026 GMT
            Not After : Feb 10 11:00:50 2026 GMT
        Subject: CN=a984eaf410de1fcd85f2c5197b58ac9e5e55e69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d6:6a:7b:5e:d7:86:60:99:5d:cc:7b:ef:1e:
                    0f:f7:ef:82:bf:b2:b2:d8:0f:3d:f2:b5:fe:9a:5e:
                    eb:82:e7:e2:4b:b8:02:e5:ad:31:bc:aa:f3:5f:c8:
                    52:9b:13:31:af:2f:f3:c8:9f:f8:4c:0c:88:9a:6c:
                    e4:e4:a7:85:bc:c4:42:f9:45:fc:1e:7f:27:79:ba:
                    80:1f:61:6e:cc:4a:59:2c:25:f0:0d:9c:d7:19:ac:
                    26:66:57:b8:93:56:c5:a5:37:38:45:24:d0:c8:ec:
                    f3:a5:42:fd:94:c5:09:b0:ed:0e:f5:06:f5:02:85:
                    19:ad:04:24:5c:c2:df:e9:14:98:84:5f:26:10:1e:
                    32:de:06:0b:04:79:35:04:f2:d7:56:c1:23:e0:10:
                    6b:9d:f7:c5:d6:cc:c2:6b:6d:bb:87:82:2a:ee:90:
                    42:cf:cb:40:5e:ce:73:2c:2f:f9:07:e3:9a:2d:c0:
                    a1:45:4f:84:7f:9d:69:8a:88:be:48:a7:6a:c3:5b:
                    df:d8:82:e6:74:3e:c0:01:8e:87:df:ff:4a:f7:bd:
                    a1:55:18:5d:f1:1d:4c:1c:a0:c2:42:e1:03:b3:2a:
                    f8:be:3a:6e:dc:6f:79:6e:b2:c5:82:f6:32:4a:e5:
                    5a:9a:f5:05:9d:1c:1c:1c:9a:0a:69:20:8e:80:e5:
                    86:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:84:EA:F4:10:DE:1F:CD:85:F2:C5:19:7B:58:AC:9E:5E:55:E6:9E
            X509v3 Authority Key Identifier:
                keyid:19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b6:29:ca:b9:0f:53:95:27:3f:8b:ff:ef:5f:27:1a:c0:4a:
         57:b3:e2:7e:8c:83:0d:d4:15:9b:a1:11:9a:1f:a5:bf:bd:a0:
         4d:cc:15:5e:fb:8b:c4:15:a5:70:48:54:ab:ea:ac:61:16:a7:
         ea:a3:0a:83:5f:61:3b:bc:87:d1:1d:cc:be:4f:7e:84:f2:f9:
         b8:1c:88:7a:75:5b:2b:a3:1a:be:e4:cc:4d:c1:15:c5:33:fc:
         f2:44:2f:de:45:36:ac:0c:fc:26:12:6c:2a:b8:16:54:3e:27:
         e4:9d:bd:e7:e4:9f:c7:de:d0:da:aa:0e:4d:0c:66:68:8e:f2:
         a7:c4:e4:3b:af:28:e1:42:b2:2c:0f:7a:9b:0f:95:7c:7c:7c:
         d1:72:d6:5d:16:65:f8:64:c8:ab:e1:70:1f:29:f1:15:67:a0:
         ed:cb:fb:5c:cb:e0:99:6a:0b:38:cf:47:85:ad:3a:87:7f:21:
         b2:4f:c9:f1:1b:74:1d:39:39:73:35:90:1c:52:fa:bf:c1:12:
         52:67:3a:38:d2:34:4e:4d:e5:58:d2:dd:ef:6d:b6:88:3f:ea:
         0c:23:3b:7c:e6:78:6a:48:9c:fb:5f:5e:ee:01:d9:4e:6a:04:
         0e:52:cd:56:bf:76:26:ce:20:95:b6:c5:7d:df:3c:69:31:d5:
         7a:3f:8a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:17 2026 by rpki-client