This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
File:                     gcAMyMc9EUHIklTtVWqNASypAiY.mft (raw, json)
Hash identifier:          PEkmz3kkrw6b1Avk68K6KR9BuJOjKDL8Nw7pJKGOjTI=
Subject key identifier:   D5:86:1A:4C:90:27:98:30:C4:FF:72:12:51:7B:0D:C7:F9:17:F2:E2
Authority key identifier: 81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26
Certificate issuer:       /CN=81c00cc8c73d1141c89254ed556a8d012ca90226
Certificate serial:       019C43595DB8854388F9EE21261C2C0E7EE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
Manifest number:          0A5E
Signing time:             Mon 09 Feb 2026 17:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:56 +0000
Files and hashes:         1: HughWH6Do-c-ENW-fx99oMeCUqI.roa (hash: 14sSq9ial8O4LgAIGDTRQt5ot4BvdM54tuDwJgopA0M=)
                          2: gcAMyMc9EUHIklTtVWqNASypAiY.crl (hash: 2rVjjis1Jk7JoUJpXNhjxtfCODHyJ/yjssjiK06ziHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:5d:b8:85:43:88:f9:ee:21:26:1c:2c:0e:7e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c00cc8c73d1141c89254ed556a8d012ca90226
        Validity
            Not Before: Feb  9 17:00:56 2026 GMT
            Not After : Feb 10 17:00:56 2026 GMT
        Subject: CN=d5861a4c90279830c4ff7212517b0dc7f917f2e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:36:7d:8e:25:2d:76:31:93:f6:0a:d2:81:29:
                    d3:f0:26:35:ef:42:59:4e:85:3c:62:b6:a6:38:cb:
                    10:20:a7:c5:a2:c0:4e:b3:11:8a:d2:ff:e5:83:2f:
                    7b:ef:b5:a9:03:7d:e0:89:ab:7d:f1:d9:9e:cd:2c:
                    f8:d6:63:18:72:78:94:29:4a:e4:70:4a:6e:32:91:
                    43:fc:6c:5e:8b:97:d4:f0:60:7b:50:e1:be:7f:1d:
                    a3:d6:d5:45:a0:09:42:a4:bd:20:44:38:c5:cc:eb:
                    9e:4a:5f:85:43:7e:c7:f6:7d:54:9d:a2:8d:a0:cb:
                    4f:dc:22:8d:5d:70:1e:67:9e:22:70:3f:54:52:35:
                    ae:1d:4d:bd:fd:31:3d:82:ca:57:af:0d:a5:da:68:
                    87:20:a3:96:0e:6c:84:26:7d:8f:4b:6f:15:67:aa:
                    17:b6:7b:79:c0:c6:56:b8:97:8d:28:f0:7f:8f:b4:
                    6a:ae:b5:3b:63:d5:14:06:ef:ba:94:86:d1:4d:96:
                    84:54:73:cd:a1:e6:a1:8b:51:c0:70:22:d0:d0:ad:
                    74:63:9b:cb:dc:05:07:9a:3f:c1:dc:26:7a:e0:fb:
                    56:0d:24:24:2b:e9:03:d8:01:c8:1e:e1:39:c7:0e:
                    2a:d4:b4:2a:a5:de:08:5d:00:a9:15:d7:2e:35:09:
                    8b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:86:1A:4C:90:27:98:30:C4:FF:72:12:51:7B:0D:C7:F9:17:F2:E2
            X509v3 Authority Key Identifier:
                keyid:81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a5:47:84:f7:f4:45:20:ba:61:62:1a:9e:85:26:ef:c0:5c:
         19:26:6f:de:62:28:9e:43:a1:c9:7d:e2:21:82:5e:7f:e8:86:
         a1:b7:c4:9f:95:f1:1f:1c:48:65:78:97:6e:f8:15:5d:94:35:
         d0:78:f1:4e:28:df:c0:b5:c9:f2:e9:c6:a5:e5:68:95:67:f5:
         aa:49:57:f7:90:8d:04:4a:26:bf:b3:74:e5:97:d4:6b:2a:74:
         45:4d:0f:6e:ee:44:9f:4f:83:aa:f0:f8:2a:52:9f:5b:fb:f0:
         c8:92:e6:0b:6d:a3:8b:99:22:e6:76:5c:5d:f3:33:71:19:ff:
         ed:e9:49:09:0a:a8:94:fb:59:1e:e0:b5:09:fc:9a:5c:05:fc:
         02:da:96:87:ec:ce:c2:a8:f5:ae:60:21:20:9c:72:bc:ea:01:
         59:21:19:86:01:e6:2a:39:85:b1:c2:8e:21:2e:a4:25:6d:1c:
         dd:35:da:1d:f2:de:76:ff:c4:22:19:37:44:7a:ef:e8:cf:e4:
         f7:a0:d7:0d:58:8c:6d:88:85:7f:c9:55:3d:42:6d:c3:a0:f8:
         4b:7b:5b:24:a0:77:50:e8:7e:00:5f:f8:f2:18:e6:fb:23:3f:
         0b:33:2a:24:15:09:62:0a:a9:a3:e0:d9:ed:e8:a0:65:f7:b2:
         40:82:19:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWV24hUOI+e4hJhwsDn7oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYzAwY2M4YzczZDExNDFjODkyNTRlZDU1NmE4ZDAxMmNh
OTAyMjYwHhcNMjYwMjA5MTcwMDU2WhcNMjYwMjEwMTcwMDU2WjAzMTEwLwYDVQQD
EyhkNTg2MWE0YzkwMjc5ODMwYzRmZjcyMTI1MTdiMGRjN2Y5MTdmMmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TZ9jiUtdjGT9grSgSnT8CY170JZ
ToU8YramOMsQIKfFosBOsxGK0v/lgy9777WpA33giat98dmezSz41mMYcniUKUrk
cEpuMpFD/Gxei5fU8GB7UOG+fx2j1tVFoAlCpL0gRDjFzOueSl+FQ37H9n1UnaKN
oMtP3CKNXXAeZ54icD9UUjWuHU29/TE9gspXrw2l2miHIKOWDmyEJn2PS28VZ6oX
tnt5wMZWuJeNKPB/j7RqrrU7Y9UUBu+6lIbRTZaEVHPNoeahi1HAcCLQ0K10Y5vL
3AUHmj/B3CZ64PtWDSQkK+kD2AHIHuE5xw4q1LQqpd4IXQCpFdcuNQmL3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWGGkyQJ5gwxP9yElF7Dcf5F/LiMB8GA1UdIwQY
MBaAFIHADMjHPRFByJJU7VVqjQEsqQImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2NBTXlNYzlFVUhJa2xUdFZXcU5BU3lwQWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iNGQ0ZWEtZjEwYi00YmNkLWEzZjUt
OTA1Mjc2YzVjNDE0LzEvZ2NBTXlNYzlFVUhJa2xUdFZXcU5BU3lwQWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9iNGQ0ZWEtZjEwYi00YmNkLWEzZjUtOTA1Mjc2YzVjNDE0
LzEvZ2NBTXlNYzlFVUhJa2xUdFZXcU5BU3lwQWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKVHhPf0
RSC6YWIanoUm78BcGSZv3mIonkOhyX3iIYJef+iGobfEn5XxHxxIZXiXbvgVXZQ1
0HjxTijfwLXJ8unGpeVolWf1qklX95CNBEomv7N05ZfUayp0RU0Pbu5En0+DqvD4
KlKfW/vwyJLmC22ji5ki5nZcXfMzcRn/7elJCQqolPtZHuC1CfyaXAX8AtqWh+zO
wqj1rmAhIJxyvOoBWSEZhgHmKjmFscKOIS6kJW0c3TXaHfLedv/EIhk3RHrv6M/k
96DXDViMbYiFf8lVPUJtw6D4S3tbJKB3UOh+AF/48hjm+yM/CzMqJBUJYgqpo+DZ
7eigZfeyQIIZyg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:13:23 2026 by rpki-client