This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
File:                     GKuuDh8hajIZc8zJxlN-xhl9qxg.mft (raw, json)
Hash identifier:          /0u3iZcXPdoRXZYLJoGiYAxlYXMGPisOUWgsqTOTmos=
Subject key identifier:   02:C8:1F:DC:81:BF:3C:5E:53:9D:73:24:92:AD:C5:16:20:D3:95:6E
Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
Certificate issuer:       /CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Certificate serial:       019C427D5F14ADAA1C3660181BDDCD940274
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
Manifest number:          0FC1
Signing time:             Mon 09 Feb 2026 13:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:38 +0000
Files and hashes:         1: 9PZjCn76gwRRUpq9MvbclVXkdOU.roa (hash: CaqNlJNQ1Ni2aWKqDPfoQcAYDuSQhepNqZ+uo297E2U=)
                          2: GKuuDh8hajIZc8zJxlN-xhl9qxg.crl (hash: jkFH3uIpgtkxXosdqM7dqS1UgyIei5G3WQTg4qLbHVY=)
                          3: ur76ehndzl2-pGTHmrbh1qcAWBI.roa (hash: Sb+oNrAUwZsJERFHDlGdgS7sblzKLRz12cNiy1csEgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:5f:14:ad:aa:1c:36:60:18:1b:dd:cd:94:02:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18
        Validity
            Not Before: Feb  9 13:00:38 2026 GMT
            Not After : Feb 10 13:00:38 2026 GMT
        Subject: CN=02c81fdc81bf3c5e539d732492adc51620d3956e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c2:35:03:d0:93:5d:a2:8d:63:02:67:cc:dc:
                    4a:8d:bc:fe:30:c0:92:e5:fe:b6:22:25:02:ad:93:
                    92:26:6b:f4:da:6d:3c:98:44:eb:c1:af:42:0c:b4:
                    3f:2c:3d:e0:4c:49:99:4d:aa:d4:7f:1f:b9:0a:a9:
                    e6:e3:f0:13:cd:8d:bf:4a:52:6a:8a:b4:e0:dc:58:
                    0e:a0:08:d6:c9:5f:08:37:d8:c9:4e:86:88:97:1d:
                    97:b2:8b:d6:94:17:dd:28:1f:0a:bc:12:de:e6:aa:
                    be:4e:60:60:73:58:bd:d9:1d:53:87:3d:22:21:88:
                    08:49:ba:89:31:ef:b5:42:f9:5f:1d:d5:3c:88:56:
                    26:c5:4b:c2:d8:b8:4f:9b:0b:b4:45:b5:a8:52:d5:
                    ff:2a:2a:6a:bc:6f:4e:fa:ff:c9:d5:c1:51:b1:2c:
                    69:e4:5e:5d:84:6a:8b:c8:b4:23:c0:d5:57:6f:28:
                    22:a2:4c:d6:b1:fb:3c:f5:bc:54:8e:dc:e9:80:0a:
                    b2:3d:c3:3b:6b:8e:bc:0a:56:4f:cc:e4:b2:e3:22:
                    0c:66:39:87:e9:ae:0a:6a:38:90:11:5d:46:44:d2:
                    87:2e:ea:f4:4f:fa:e9:f6:dc:d7:45:63:6e:67:42:
                    0d:88:47:5b:40:4e:0a:ce:82:d5:91:77:98:55:55:
                    83:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C8:1F:DC:81:BF:3C:5E:53:9D:73:24:92:AD:C5:16:20:D3:95:6E
            X509v3 Authority Key Identifier:
                keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:d1:8e:64:3f:f6:a8:98:43:3b:7a:67:47:45:4c:a6:b6:8b:
         bd:b2:bb:e7:2b:cc:b2:17:f8:f7:59:36:3e:73:88:17:7d:6c:
         64:c1:c3:75:89:25:51:78:30:21:99:41:ef:76:3f:41:b6:65:
         dd:90:3a:e5:c5:e9:24:2f:f4:d6:95:d0:0c:29:33:94:fa:a4:
         02:e1:92:9c:0e:d8:af:cb:e3:9f:16:1c:99:6e:b3:85:aa:13:
         7d:5a:64:f0:7a:a5:eb:b4:6a:2a:13:24:92:81:6d:a2:8d:60:
         f3:c7:b8:de:4a:13:a0:f6:40:89:e0:1f:68:7f:3a:2d:bd:d7:
         f2:b9:1b:d5:3b:41:fe:83:7b:7e:4c:2b:27:98:c7:b1:29:27:
         eb:6a:7c:ce:a3:91:18:a4:a1:ac:c6:8e:b4:69:c5:12:e4:11:
         91:cd:ae:88:f6:44:84:59:7d:97:61:3a:16:0f:a3:50:42:93:
         db:44:15:08:69:1b:01:48:7d:c4:dd:7f:d6:0b:90:05:14:71:
         94:5a:ea:92:5c:a7:33:4a:ae:ff:59:90:2c:49:17:ce:49:6d:
         01:44:b3:20:13:19:07:7a:d4:e7:21:98:7c:de:46:11:1d:2c:
         c9:f1:83:c3:3c:a2:a3:61:31:65:cc:4f:03:b1:3a:e7:1a:80:
         f6:ba:5d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:38 2026 by rpki-client