This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
File:                     GR7jr4IFY0lGR1UaUgbvDEXPlck.mft (raw, json)
Hash identifier:          wjlwGhO5/MZp1iXVmsq+WWzTEirsWQq6o0kecyEnawk=
Subject key identifier:   86:FF:06:01:64:4C:53:EA:63:4B:88:CC:A6:07:4A:5A:E0:63:BB:50
Authority key identifier: 19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9
Certificate issuer:       /CN=191ee3af820563494647551a5206ef0c45cf95c9
Certificate serial:       019C438FE4692F2AA69337AC0CB719F966B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 18:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:29 +0000
Files and hashes:         1: GR7jr4IFY0lGR1UaUgbvDEXPlck.crl (hash: arMrEr5UlFP6EPrpDGZE8IE49kR2meegboPEWZzPT6A=)
                          2: ToG3fqXyy5d5Ca1p5NmDib0lvZI.roa (hash: oyYGCSqaAaDI1i5xJfDf0vsTp+UTW82dEmnGT90lSos=)
                          3: aLohr_CjNJaf_OCGCYUirDRs1Mc.roa (hash: BdAfbqtdeH1oK0lMhwivyNJCFGk02pluiC+NvbWmuzc=)
                          4: eye1En_Mp6FRxtfoP5Oj5VBibbo.roa (hash: asGncJIHjRIOGa0QDEKb+Wt6+ba0g195yHdWF434LME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:e4:69:2f:2a:a6:93:37:ac:0c:b7:19:f9:66:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191ee3af820563494647551a5206ef0c45cf95c9
        Validity
            Not Before: Feb  9 18:00:29 2026 GMT
            Not After : Feb 10 18:00:29 2026 GMT
        Subject: CN=86ff0601644c53ea634b88cca6074a5ae063bb50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:59:c7:5d:1e:37:20:ee:7b:5a:a8:4f:48:4e:
                    06:cd:6c:73:21:47:2f:54:cd:94:01:a9:b0:92:e9:
                    f1:fc:bc:4d:7b:47:e4:e8:49:98:6b:40:1e:9e:12:
                    aa:0b:24:85:1b:79:1d:a0:40:78:44:60:19:70:02:
                    9c:e1:b7:32:4c:9c:ce:49:3d:81:9a:bd:14:2a:11:
                    12:6e:70:09:ee:ba:10:40:a7:1a:9f:cf:14:00:c9:
                    95:74:af:af:58:5b:03:72:d4:3b:8f:67:f4:dc:e1:
                    0e:ca:a9:1a:a0:11:e0:cd:07:f6:b9:10:9e:5e:1a:
                    cd:16:19:a1:37:67:34:ae:e9:84:34:c1:34:e4:0d:
                    38:7b:39:5e:7a:ad:a0:ea:7e:2b:f7:fb:c7:94:0d:
                    8e:a1:d7:57:26:f3:76:45:bf:e1:c8:fa:94:4e:11:
                    28:3f:52:c9:c4:02:37:f5:07:20:03:7b:a9:c9:1d:
                    a6:51:4a:5c:9d:3d:a3:ed:3b:9d:ea:0b:8a:80:f6:
                    68:ad:80:79:0c:23:74:22:8d:38:a2:3a:d2:a7:b0:
                    e9:fa:7e:13:10:16:1c:17:f7:3a:84:92:39:22:45:
                    f1:47:0f:64:81:bd:71:46:bb:71:59:bf:d8:68:54:
                    29:7d:3c:29:07:5c:60:3f:57:e9:78:5e:73:ce:d0:
                    46:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FF:06:01:64:4C:53:EA:63:4B:88:CC:A6:07:4A:5A:E0:63:BB:50
            X509v3 Authority Key Identifier:
                keyid:19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:fc:95:a2:e8:05:03:b0:a7:0c:86:9c:14:56:25:2c:30:d9:
         ce:2b:60:fb:e4:c9:b3:f1:09:56:64:5e:0a:42:c8:7c:e0:96:
         53:5c:33:d3:57:e1:02:de:09:bf:3b:e7:d2:ae:e4:78:ce:c3:
         d3:30:2a:74:51:92:c0:69:2d:26:6b:4c:9f:fc:d2:86:17:e2:
         f3:17:51:75:c4:b3:28:fb:76:1c:15:29:8e:85:e8:52:23:6b:
         cb:06:95:9d:0a:f7:bc:01:67:60:12:e7:51:e3:63:1c:fe:fd:
         39:d7:05:42:55:da:bd:25:30:e4:b5:dd:9e:6b:2f:29:01:72:
         3b:c8:44:5e:21:21:4e:b4:d7:3f:d9:fd:7b:1a:54:09:8d:06:
         26:4f:74:b9:69:ff:27:76:03:97:87:66:fa:93:e8:03:60:98:
         f1:35:a6:e8:78:64:fd:44:3f:36:23:31:92:97:ce:0c:50:63:
         c6:14:d6:e0:eb:09:a9:4d:8f:91:db:be:b0:ea:36:08:b4:0c:
         78:cb:08:c0:1c:0d:47:4c:75:12:fb:80:53:2f:84:04:3c:ba:
         cf:c9:b7:eb:46:77:c9:d8:ea:51:b9:d1:b3:ab:50:f1:c3:a5:
         b3:4d:03:d2:0d:90:ff:14:58:b8:65:fb:b3:f0:5c:2d:de:80:
         9a:53:ae:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:15 2026 by rpki-client