This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft
File:                     G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft (raw, json)
Hash identifier:          IZ9C6SY5u/7XLuZBT071RfA7vMedB67VsSxXjr5CcEo=
Subject key identifier:   57:6D:5A:3D:E2:BA:19:D6:1D:3A:36:C2:7E:4C:CC:E9:64:38:79:AD
Authority key identifier: 1B:54:43:7C:92:C1:E0:8B:06:E0:77:61:87:C7:88:4D:D5:1C:0E:38
Certificate issuer:       /CN=1b54437c92c1e08b06e0776187c7884dd51c0e38
Certificate serial:       019C4322184857B280759C88C538377DDD06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft
Manifest number:          08F6
Signing time:             Mon 09 Feb 2026 16:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:33 +0000
Files and hashes:         1: 5N0vtDieER6JLHXCItm0SSiMncg.roa (hash: SGCzDUwLAus0ZQKT3w7xorMqefRunoszLUQViV8By+o=)
                          2: G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl (hash: ta1E3HQld47iqE9M78cOsojIpUoh2vBZUvvGYWF7S7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 16:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:18:48:57:b2:80:75:9c:88:c5:38:37:7d:dd:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b54437c92c1e08b06e0776187c7884dd51c0e38
        Validity
            Not Before: Feb  9 16:00:33 2026 GMT
            Not After : Feb 10 16:00:33 2026 GMT
        Subject: CN=576d5a3de2ba19d61d3a36c27e4ccce9643879ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f5:91:ea:22:a3:16:d8:5b:98:d4:7e:f3:2f:
                    93:51:ee:e1:07:a1:e4:92:22:2c:52:a0:e6:04:bb:
                    2b:b0:ba:b6:13:77:bc:91:b9:c5:f7:51:42:b2:67:
                    4c:8e:9a:d6:e2:27:f6:2c:3f:fd:25:99:2a:44:20:
                    2e:f6:f8:f2:78:8f:86:8e:17:ce:0f:a0:8b:27:25:
                    98:08:26:97:62:d0:04:e9:09:12:91:c8:2e:31:0c:
                    7c:e3:65:8d:cc:4c:81:06:cc:1b:4d:7d:c3:c8:63:
                    64:c4:07:23:3d:7f:34:b1:a6:fe:9a:0d:f9:5b:61:
                    6d:8b:4d:2a:9f:17:e1:18:51:02:24:e8:91:32:ed:
                    fe:17:04:b9:4d:7c:d2:d6:04:f9:22:f6:75:75:7c:
                    3a:46:e1:03:ec:9d:3d:ff:c1:61:6a:4c:bf:94:2b:
                    d5:11:a5:a6:85:27:81:b8:b8:0b:e7:09:87:78:a7:
                    08:83:ff:de:42:7b:8d:5c:e6:eb:ad:ea:2c:cb:d2:
                    99:5b:17:d3:a5:d6:b1:73:d2:ed:18:2f:6f:28:c2:
                    3b:cd:89:06:93:0a:77:d4:8c:34:00:49:f1:65:48:
                    9b:f6:67:86:eb:af:33:52:b7:a9:ac:94:12:cd:7e:
                    62:c4:72:73:2e:0f:a4:93:03:b4:a6:15:60:98:bf:
                    3b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6D:5A:3D:E2:BA:19:D6:1D:3A:36:C2:7E:4C:CC:E9:64:38:79:AD
            X509v3 Authority Key Identifier:
                keyid:1B:54:43:7C:92:C1:E0:8B:06:E0:77:61:87:C7:88:4D:D5:1C:0E:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:67:51:9a:c1:bc:58:d4:b6:2f:b7:53:75:fa:8c:e3:ab:9c:
         c9:2f:77:1c:c8:06:38:05:b5:80:67:f6:17:61:02:f6:aa:8b:
         52:f4:de:3b:20:87:d3:3b:2a:91:40:f3:5c:7e:41:f0:4d:af:
         8d:8d:b8:2c:36:07:d4:58:19:9e:ad:c2:26:40:68:5a:5b:ed:
         a7:a1:31:21:51:da:b2:a4:a0:45:7a:4c:b8:47:01:12:e9:e1:
         30:6b:74:0a:63:98:2b:b7:dc:a5:89:ee:9e:5d:fe:af:e3:8e:
         74:74:fe:1b:30:46:f5:06:59:a9:e8:f7:c7:c0:8e:20:4f:6b:
         7a:ca:2e:b2:9a:77:30:8a:bd:25:39:76:74:d4:98:bb:24:e0:
         a5:66:86:b2:64:9a:82:9b:a2:cf:9b:c2:aa:35:8b:b2:3f:6a:
         1a:b5:1b:4a:7f:15:23:24:da:62:e1:30:fe:28:b2:32:0b:44:
         4f:84:a1:d3:c1:ee:da:9f:08:6d:8f:6e:80:4c:f6:84:3d:d1:
         95:a2:5e:82:f0:5a:ad:85:6c:df:11:f7:60:55:07:d6:1f:60:
         41:b4:90:e2:de:9d:45:b0:cd:a5:33:26:07:ae:6e:38:e3:e0:
         5c:ef:b6:75:c1:d2:40:06:52:a5:27:21:ef:e4:75:b7:cf:93:
         1c:da:e5:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIhhIV7KAdZyIxTg3fd0GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNTQ0MzdjOTJjMWUwOGIwNmUwNzc2MTg3Yzc4ODRkZDUx
YzBlMzgwHhcNMjYwMjA5MTYwMDMzWhcNMjYwMjEwMTYwMDMzWjAzMTEwLwYDVQQD
Eyg1NzZkNWEzZGUyYmExOWQ2MWQzYTM2YzI3ZTRjY2NlOTY0Mzg3OWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/WR6iKjFthbmNR+8y+TUe7hB6Hk
kiIsUqDmBLsrsLq2E3e8kbnF91FCsmdMjprW4if2LD/9JZkqRCAu9vjyeI+GjhfO
D6CLJyWYCCaXYtAE6QkSkcguMQx842WNzEyBBswbTX3DyGNkxAcjPX80sab+mg35
W2Fti00qnxfhGFECJOiRMu3+FwS5TXzS1gT5IvZ1dXw6RuED7J09/8Fhaky/lCvV
EaWmhSeBuLgL5wmHeKcIg//eQnuNXObrreosy9KZWxfTpdaxc9LtGC9vKMI7zYkG
kwp31Iw0AEnxZUib9meG668zUreprJQSzX5ixHJzLg+kkwO0phVgmL877QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdtWj3iuhnWHTo2wn5MzOlkOHmtMB8GA1UdIwQY
MBaAFBtUQ3ySweCLBuB3YYfHiE3VHA44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzFSRGZKTEI0SXNHNEhkaGg4ZUlUZFVjRGpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9mMWRiMzYtNjY1ZC00ZDgwLWExYjIt
NTE1ZWUxNTcwMjU5LzEvRzFSRGZKTEI0SXNHNEhkaGg4ZUlUZFVjRGpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9mMWRiMzYtNjY1ZC00ZDgwLWExYjItNTE1ZWUxNTcwMjU5
LzEvRzFSRGZKTEI0SXNHNEhkaGg4ZUlUZFVjRGpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGdRmsG8
WNS2L7dTdfqM46ucyS93HMgGOAW1gGf2F2EC9qqLUvTeOyCH0zsqkUDzXH5B8E2v
jY24LDYH1FgZnq3CJkBoWlvtp6ExIVHasqSgRXpMuEcBEunhMGt0CmOYK7fcpYnu
nl3+r+OOdHT+GzBG9QZZqej3x8COIE9resouspp3MIq9JTl2dNSYuyTgpWaGsmSa
gpuiz5vCqjWLsj9qGrUbSn8VIyTaYuEw/iiyMgtET4Sh08Hu2p8IbY9ugEz2hD3R
laJegvBarYVs3xH3YFUH1h9gQbSQ4t6dRbDNpTMmB65uOOPgXO+2dcHSQAZSpSch
7+R1t8+THNrlOw==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:41:23 2026 by rpki-client