This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
File:                     GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft (raw, json)
Hash identifier:          ufvxumuLROd8EZT4H3Aj44YBE3juCixMIS6VPiAQyfQ=
Subject key identifier:   15:FE:AE:00:CF:B7:74:4C:6E:21:66:DA:26:AE:BB:13:85:8E:A8:28
Authority key identifier: 19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
Certificate issuer:       /CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Certificate serial:       019C416A8898635C26B79CD1AF6163BCE642
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 08:00:26 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:26 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:26 +0000
Files and hashes:         1: GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl (hash: 8iT/8IDKzjTy4k4JNGvGOA2tOgComAewOYPfWa/BeJw=)
                          2: i2X0mHk6bAtPNecvn2NA6zmZj9U.roa (hash: mQLU4VLoVcMKqVZZfsB2FdV3V92h7zVuv01+LCyktYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:88:98:63:5c:26:b7:9c:d1:af:61:63:bc:e6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
        Validity
            Not Before: Feb  9 08:00:26 2026 GMT
            Not After : Feb 10 08:00:26 2026 GMT
        Subject: CN=15feae00cfb7744c6e2166da26aebb13858ea828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b3:5c:3c:29:8b:21:33:f4:f3:36:02:6e:47:
                    46:3f:8a:7b:4f:24:1c:f7:c9:d4:a7:b7:fa:ea:1d:
                    60:bc:c9:9a:51:a2:56:43:9b:e3:c1:41:7b:be:55:
                    22:10:2b:55:2b:f5:94:d3:8b:33:4c:2a:a6:42:fa:
                    33:1b:7e:ac:13:d2:7d:ac:84:63:0b:fc:e2:82:8b:
                    41:ec:75:73:b8:60:38:a1:bd:87:70:e0:11:36:b8:
                    05:e0:fc:49:6c:5d:cf:56:89:4c:93:97:eb:c2:5e:
                    cc:bd:e3:7d:d3:cb:8d:33:c9:f6:94:f3:e2:79:72:
                    00:8b:31:2c:87:89:1e:fc:fe:b1:44:ec:14:ee:38:
                    dc:c8:58:01:e4:15:9a:68:c7:de:62:74:88:ae:a6:
                    b5:74:4b:47:80:1b:3c:4f:11:c5:7a:69:08:e7:01:
                    d6:7c:59:e1:35:43:5a:19:c7:e8:35:9e:03:5e:57:
                    7b:86:4b:2a:95:ce:2d:13:ca:95:80:0a:af:6a:e2:
                    ae:39:c1:97:f5:55:b0:b0:8b:57:19:06:fa:0f:6f:
                    51:09:0b:d8:e7:72:1b:bd:18:02:46:0a:3c:22:88:
                    a0:5b:ca:70:98:cb:31:ab:07:c4:3e:08:13:97:21:
                    7e:91:b0:8d:e4:59:46:46:bf:1d:a5:6f:64:57:2c:
                    d1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:FE:AE:00:CF:B7:74:4C:6E:21:66:DA:26:AE:BB:13:85:8E:A8:28
            X509v3 Authority Key Identifier:
                keyid:19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:78:c8:58:06:42:ef:09:91:ae:fa:cd:01:9e:94:82:1c:3f:
         4d:b9:fd:9f:10:ef:ff:2f:c1:42:09:0f:61:d9:00:81:ae:59:
         55:a1:83:b2:bb:70:d9:31:8a:cf:b7:ff:d6:fd:23:af:37:98:
         9d:7e:35:27:d1:1d:88:1e:a4:f7:18:90:17:6d:ef:30:0b:9d:
         c0:da:7a:1e:74:52:a3:ad:be:1f:63:d6:ac:9d:41:e6:bd:8e:
         2b:d5:e0:17:91:6f:96:05:81:be:c3:2c:9c:08:f6:4b:ba:3c:
         e6:44:75:d9:e4:d5:07:f8:cb:a1:20:d3:96:b4:ec:11:c4:81:
         20:52:f0:7a:aa:de:e3:88:5f:29:6c:32:48:44:71:73:f5:2d:
         ec:6a:ef:1e:8e:a3:13:d0:6b:9a:8e:87:31:fa:c8:f6:76:ad:
         42:39:a1:ef:d8:56:14:6d:fc:09:5c:51:57:76:2d:c0:36:fb:
         d3:54:66:41:93:5b:2b:15:84:79:0b:b5:97:73:80:02:62:d1:
         81:92:f0:e6:fc:1f:92:cf:a8:b6:4f:18:bf:b9:df:12:34:0c:
         ea:ce:b1:f0:1b:a4:34:a6:23:b8:fe:0b:d1:71:b6:97:37:48:
         41:26:18:7c:e6:40:ba:3d:e8:01:43:54:19:f5:d7:65:2d:71:
         3c:36:6d:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBaoiYY1wmt5zRr2FjvOZCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZDE5OWMzZDIwZjQzNGQ4YzBhMGEyZWY1ZTUyMzQ2NjY1
Y2E4NjQwHhcNMjYwMjA5MDgwMDI2WhcNMjYwMjEwMDgwMDI2WjAzMTEwLwYDVQQD
EygxNWZlYWUwMGNmYjc3NDRjNmUyMTY2ZGEyNmFlYmIxMzg1OGVhODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rNcPCmLITP08zYCbkdGP4p7TyQc
98nUp7f66h1gvMmaUaJWQ5vjwUF7vlUiECtVK/WU04szTCqmQvozG36sE9J9rIRj
C/zigotB7HVzuGA4ob2HcOARNrgF4PxJbF3PVolMk5frwl7MveN908uNM8n2lPPi
eXIAizEsh4ke/P6xROwU7jjcyFgB5BWaaMfeYnSIrqa1dEtHgBs8TxHFemkI5wHW
fFnhNUNaGcfoNZ4DXld7hksqlc4tE8qVgAqvauKuOcGX9VWwsItXGQb6D29RCQvY
53IbvRgCRgo8IoigW8pwmMsxqwfEPggTlyF+kbCN5FlGRr8dpW9kVyzRGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBX+rgDPt3RMbiFm2iauuxOFjqgoMB8GA1UdIwQY
MBaAFBnRmcPSD0NNjAoKLvXlI0ZmXKhkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2RHWnc5SVBRMDJNQ2dvdTllVWpSbVpjcUdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81Yjc4ZjQtNzcxZC00NzU2LWEzODkt
YjQyZmEwMGY1N2RlLzEvR2RHWnc5SVBRMDJNQ2dvdTllVWpSbVpjcUdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81Yjc4ZjQtNzcxZC00NzU2LWEzODktYjQyZmEwMGY1N2Rl
LzEvR2RHWnc5SVBRMDJNQ2dvdTllVWpSbVpjcUdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATXjIWAZC
7wmRrvrNAZ6Ughw/Tbn9nxDv/y/BQgkPYdkAga5ZVaGDsrtw2TGKz7f/1v0jrzeY
nX41J9EdiB6k9xiQF23vMAudwNp6HnRSo62+H2PWrJ1B5r2OK9XgF5FvlgWBvsMs
nAj2S7o85kR12eTVB/jLoSDTlrTsEcSBIFLweqre44hfKWwySERxc/Ut7GrvHo6j
E9Brmo6HMfrI9natQjmh79hWFG38CVxRV3YtwDb701RmQZNbKxWEeQu1l3OAAmLR
gZLw5vwfks+otk8Yv7nfEjQM6s6x8BukNKYjuP4L0XG2lzdIQSYYfOZAuj3oAUNU
GfXXZS1xPDZtVg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:55 2026 by rpki-client