This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
File:                     GQAdVXoGmNrXfEs-3fKn02tyqwA.mft (raw, json)
Hash identifier:          cWnRLqJNO2pyNkcs6b8YNSTRyWI6DMx2MXOdmTKaw+E=
Subject key identifier:   31:29:95:78:99:B2:39:58:A8:82:0C:B2:29:5F:16:51:81:57:B6:BE
Authority key identifier: 19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00
Certificate issuer:       /CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
Certificate serial:       019C427DFA0C000648C4BA1A2E5E6482EFAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
Manifest number:          0750
Signing time:             Mon 09 Feb 2026 13:01:18 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:18 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:18 +0000
Files and hashes:         1: Eys2Ik6QwcMqS5oYowJ39Y4tApA.roa (hash: aSyimbddYxO7HaNx1/afIBXAYjryZMy8bo7wf/HuaA8=)
                          2: GQAdVXoGmNrXfEs-3fKn02tyqwA.crl (hash: WXKhJbe0XpWq6jqQzpkdClw0JuERncm6lARGVZusZjc=)
                          3: N64gyRV3fyLEotYnOGpZXANVQTY.roa (hash: usaMJ60NvDnxkMJGfw4/sj/B9kuu+SgaBjkVvUD8MA4=)
                          4: ZhZfvojxtl0-1Vh8VOJ7rtKsO9U.roa (hash: rjeMgEmIzmO/qtzh5+aQsiRfqkpS/wbdwFYJRmTLpUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:fa:0c:00:06:48:c4:ba:1a:2e:5e:64:82:ef:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
        Validity
            Not Before: Feb  9 13:01:18 2026 GMT
            Not After : Feb 10 13:01:18 2026 GMT
        Subject: CN=3129957899b23958a8820cb2295f16518157b6be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5c:66:86:43:57:9f:c6:03:58:e8:fa:e7:ef:
                    c2:49:0e:ed:ce:b8:52:c9:8a:90:8f:47:15:66:38:
                    d2:a9:76:98:57:ca:24:92:8b:35:65:5d:37:50:25:
                    56:45:fb:12:d4:fd:f4:6d:7d:67:4e:bf:13:44:00:
                    ca:43:27:c0:05:3f:af:a1:ab:1e:50:29:99:65:d9:
                    6f:11:cb:2e:18:f9:93:64:b7:bb:41:0a:7c:72:12:
                    ee:ce:59:4f:7d:d8:6b:9a:01:bd:cf:21:3a:71:c8:
                    ff:b8:ba:71:f1:05:66:04:9b:68:c8:6e:7b:39:e0:
                    a4:0c:82:ab:f9:f4:47:b7:f9:11:d2:35:32:c8:22:
                    15:b5:0b:b5:60:cf:a3:f2:a3:83:fe:21:57:30:79:
                    8d:d0:b9:3c:3b:b4:58:38:dc:88:2c:c2:a5:6e:96:
                    7a:7e:cc:04:0f:23:b6:3d:87:38:ec:37:8a:85:31:
                    15:fe:f2:5c:3b:cc:9a:fb:01:de:6d:3a:77:13:2b:
                    61:49:70:b6:6e:73:42:65:45:43:de:39:94:55:22:
                    6b:44:13:62:7c:cf:db:78:6b:b3:dd:8c:85:3c:85:
                    97:0c:32:da:de:bb:eb:50:84:77:10:19:6a:d9:72:
                    3a:82:fb:69:99:f9:d5:3f:a6:30:af:b0:75:15:09:
                    81:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:29:95:78:99:B2:39:58:A8:82:0C:B2:29:5F:16:51:81:57:B6:BE
            X509v3 Authority Key Identifier:
                keyid:19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:44:47:12:98:9e:0e:28:d7:c6:56:5f:f7:3d:34:12:aa:bb:
         48:06:f7:a9:e1:8c:96:91:0a:1b:6a:08:d2:96:bd:46:b9:4c:
         2a:56:4a:ec:08:c5:db:75:76:6f:d8:78:97:ea:ad:5f:24:5f:
         15:3a:1a:44:5e:a1:e9:d5:ae:d4:07:2a:08:e5:a2:7c:42:de:
         38:57:f8:14:2a:b9:b7:3c:92:c0:be:11:86:ca:ff:0d:20:ff:
         70:64:27:9a:65:88:dd:5e:b7:58:1d:00:a2:b4:99:2d:4d:e0:
         c8:fe:36:59:c3:14:9a:70:b3:0a:e3:0f:2f:89:ce:c1:9b:16:
         77:fc:a5:0c:88:ac:38:d3:b6:0a:f1:e2:10:52:92:ef:72:d8:
         f6:d3:d8:29:44:02:e2:29:b2:0c:f6:67:fb:c3:28:1a:e0:45:
         b4:52:70:f9:fc:64:de:ff:5f:c1:ba:bc:97:6b:8f:98:03:1c:
         49:c5:23:27:a2:bf:22:c0:f4:8b:1c:06:45:21:bc:35:56:d5:
         40:60:f0:a7:81:c4:b3:9e:9f:af:82:e6:d5:af:e3:e0:88:d3:
         8b:c4:dc:94:55:61:7f:e7:ee:62:94:18:0e:f9:68:4a:9d:5e:
         24:5a:73:d2:18:46:15:22:c6:53:2c:82:d6:08:f5:3a:4b:a7:
         3d:63:89:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:34 2026 by rpki-client