This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
File:                     GhGmY2-M4s71g2xENWXF_jri8gg.mft (raw, json)
Hash identifier:          Wi9NjdolZN3dv3q+QjnDsnVn2dIJZ3wbRDQo/eYG15g=
Subject key identifier:   2C:DE:46:FD:35:51:91:04:AD:AA:CD:E3:D0:46:CD:18:EB:AC:3B:67
Authority key identifier: 1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
Certificate issuer:       /CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Certificate serial:       019C43904B913472BAA829745C449FA9B439
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 18:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:55 +0000
Files and hashes:         1: GhGmY2-M4s71g2xENWXF_jri8gg.crl (hash: osd5KBcSGBvv78DdcnMrktdG6ig1AR2lwXE+eTpb8r4=)
                          2: N_t0iSjnQlMLmJZKqbJJB1AKECI.roa (hash: CLalor9+rY0MRNCFPs5EzzFZ6W1RHuYiyZymjFGnJuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:4b:91:34:72:ba:a8:29:74:5c:44:9f:a9:b4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
        Validity
            Not Before: Feb  9 18:00:55 2026 GMT
            Not After : Feb 10 18:00:55 2026 GMT
        Subject: CN=2cde46fd35519104adaacde3d046cd18ebac3b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f0:a0:76:8a:70:8e:f3:fc:c4:23:e0:e1:73:
                    fd:97:24:d1:97:93:b3:91:de:50:9d:d3:9c:33:09:
                    17:1e:a9:99:8f:07:c4:f3:ac:2f:cb:d0:7b:9a:72:
                    91:80:98:a9:e6:4b:3e:4d:d9:24:80:cb:01:aa:1a:
                    8e:dd:09:a3:d1:a9:04:27:b4:12:25:83:3e:f0:02:
                    2a:34:7f:db:83:09:74:ec:9f:49:f9:30:df:3a:d2:
                    6a:3a:10:43:c0:5f:38:0d:94:be:ec:30:9c:4c:92:
                    5c:a7:7e:8b:81:de:4d:d5:20:37:cc:c5:56:d3:44:
                    3b:03:00:7a:2a:90:ff:40:83:10:83:4d:5b:4f:8b:
                    9a:2f:12:da:f8:9e:a6:26:89:b4:46:cb:bd:c7:b2:
                    0d:a3:04:52:74:01:3a:85:08:4e:51:53:ca:93:12:
                    80:17:ba:ea:59:83:ec:be:a6:d9:f9:ff:61:86:41:
                    ca:80:fa:87:13:75:d2:f6:d8:69:eb:47:72:21:c1:
                    c5:e1:c3:76:d5:7a:73:00:03:45:46:ac:c4:37:7d:
                    d7:3a:07:47:a9:bf:25:18:55:a0:c9:15:74:f2:a9:
                    3c:65:80:61:9f:ea:91:d4:a7:8c:6c:7d:0e:86:9f:
                    24:45:d5:38:3d:6c:e7:2e:52:44:8b:e5:09:1b:66:
                    a7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DE:46:FD:35:51:91:04:AD:AA:CD:E3:D0:46:CD:18:EB:AC:3B:67
            X509v3 Authority Key Identifier:
                keyid:1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:3a:af:16:08:bf:c4:6d:33:d9:9a:e3:33:ee:45:f5:0b:99:
         fd:bb:32:8f:5f:27:3b:e0:46:a4:b9:09:d2:c9:64:70:d8:f0:
         94:89:de:a8:29:4b:25:e2:d8:cd:33:a6:4e:d2:08:a9:eb:6e:
         6d:87:3d:69:07:be:80:6e:ef:61:8c:81:e7:a5:17:0f:66:a0:
         4d:80:15:9e:1f:4b:e8:04:ba:ed:d8:ab:55:6c:42:79:5e:ed:
         0b:ac:a6:be:c3:b0:a2:db:ea:d3:80:75:cc:a6:ca:bd:7a:05:
         57:33:f4:92:01:04:59:d8:f0:13:51:09:3c:62:3e:35:40:b9:
         61:c2:71:73:c4:da:da:00:85:12:56:15:64:cf:4a:42:b8:73:
         55:7a:2e:73:28:fa:3b:4a:50:05:03:65:75:2f:eb:8f:18:82:
         43:ec:01:7d:9c:95:c1:77:a3:13:f9:91:2c:e4:aa:8b:90:fe:
         81:22:ea:64:f9:ee:c5:d5:56:30:b5:09:31:26:ce:f2:c3:a2:
         f2:1d:7c:03:29:a0:2c:94:77:7b:7a:d8:a1:d5:83:07:f0:58:
         87:ab:d9:f5:ab:a8:77:57:1e:00:73:ad:86:4b:4e:b5:e8:4a:
         9e:14:bd:3f:ae:42:ca:4f:f4:79:14:05:01:c0:9f:3a:35:5f:
         dd:94:8b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:58 2026 by rpki-client