This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
File:                     gYFECjZ6NNMGvA9oWunNhpUvf5U.mft (raw, json)
Hash identifier:          Za0YUSt2X6sXlRgB7Mcld4JykjUXG4/sTlus7zBveKw=
Subject key identifier:   1E:65:3E:1C:9D:98:5F:B9:F1:7C:DD:58:80:43:05:7B:19:E4:CE:5F
Authority key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
Certificate issuer:       /CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Certificate serial:       019C43593690A461B6FC39E4231D163FB832
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
Manifest number:          03B4
Signing time:             Mon 09 Feb 2026 17:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:45 +0000
Files and hashes:         1: gYFECjZ6NNMGvA9oWunNhpUvf5U.crl (hash: fZ/wMc4X5u5VYTk8Kz+6FFtwfGqUSTyE+QAUqyxouhc=)
                          2: qTChY0Kq_uA6L6Hi5pDRavsPyQk.roa (hash: UhoY5Jxel6+XTofYPqKQ5kLj+eG01D/abRAxNfVn9cQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:36:90:a4:61:b6:fc:39:e4:23:1d:16:3f:b8:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8181440a367a34d306bc0f685ae9cd86952f7f95
        Validity
            Not Before: Feb  9 17:00:45 2026 GMT
            Not After : Feb 10 17:00:45 2026 GMT
        Subject: CN=1e653e1c9d985fb9f17cdd588043057b19e4ce5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:db:7e:ac:e1:4a:6d:bd:d5:61:7f:9a:cc:
                    12:83:09:e8:f7:e4:b1:de:28:b1:4d:9a:dc:43:18:
                    c9:f8:af:88:7a:e1:03:88:b6:da:73:79:a3:a6:58:
                    b4:61:2c:75:d2:ce:c1:b5:ec:e7:c4:1e:ab:e0:59:
                    44:3a:39:ef:fc:82:eb:9d:e3:8f:f8:a4:32:75:1b:
                    f8:93:f0:98:fa:48:f7:98:15:34:19:d7:af:8c:91:
                    d3:5c:86:57:21:82:4c:bc:67:d4:72:86:6a:85:64:
                    67:77:88:7e:7f:69:b9:f9:10:2e:f3:be:b7:a9:8c:
                    df:5c:9e:90:fb:9e:57:79:a1:82:7a:36:06:57:b3:
                    12:35:5c:46:06:ea:bc:4a:08:c9:97:3c:68:1c:b4:
                    a6:16:00:ac:30:04:f3:f6:6e:cd:60:f7:73:32:2c:
                    46:ce:3d:7c:c7:76:9c:9c:2a:46:e5:5a:08:87:a2:
                    df:16:d0:4b:f9:4b:17:e9:df:35:ce:03:5f:ad:03:
                    e3:6c:d7:ec:4f:88:74:c5:60:97:2e:99:36:52:d5:
                    06:23:4e:af:da:39:48:d3:ac:ce:22:ca:d1:e5:72:
                    b6:6e:02:0a:c5:ed:38:26:34:70:d4:f6:d8:9d:98:
                    31:5c:02:99:78:69:af:53:99:ce:3b:77:99:50:70:
                    21:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:65:3E:1C:9D:98:5F:B9:F1:7C:DD:58:80:43:05:7B:19:E4:CE:5F
            X509v3 Authority Key Identifier:
                keyid:81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:12:89:21:04:6b:79:7b:15:83:ee:aa:fa:69:0c:84:f2:c0:
         cb:0c:28:ab:c6:41:50:86:c9:13:b4:50:4f:d0:56:d0:07:cc:
         86:a1:73:de:91:91:48:64:d2:f2:89:6a:17:04:cd:54:76:4b:
         9d:5e:22:99:06:72:9a:b2:2c:1e:f5:10:46:39:8d:3e:6f:cd:
         cb:53:02:b4:5c:44:a4:36:9a:f8:c4:d9:fa:dd:32:08:97:9c:
         42:05:8e:4b:ff:b9:5e:c1:b7:14:dc:0c:55:97:fa:e0:99:81:
         ac:4e:cf:b3:5a:ee:5b:14:1f:79:dd:e9:54:14:ef:17:d1:9c:
         05:7c:e9:6a:23:e8:82:88:19:c5:e8:39:66:7b:79:50:66:81:
         b2:4d:3b:15:a3:de:3f:21:8b:84:fb:12:91:e5:29:a0:0d:9b:
         1c:da:49:a8:63:9f:f1:fd:9d:c1:81:50:f4:28:07:a6:58:d2:
         6d:e3:93:01:a0:62:a8:41:82:0f:20:1f:30:e5:1b:3a:d3:a4:
         04:8f:b7:af:e3:a2:2c:9e:06:59:a2:14:cf:88:b4:15:98:f9:
         50:cf:4c:04:3f:3d:68:db:ab:4e:75:97:c9:22:c9:a9:82:df:
         94:d0:7f:28:c1:50:70:9c:40:59:e4:87:2d:74:ff:06:df:c3:
         58:bf:01:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWTaQpGG2/DnkIx0WP7gyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxODE0NDBhMzY3YTM0ZDMwNmJjMGY2ODVhZTljZDg2OTUy
ZjdmOTUwHhcNMjYwMjA5MTcwMDQ1WhcNMjYwMjEwMTcwMDQ1WjAzMTEwLwYDVQQD
EygxZTY1M2UxYzlkOTg1ZmI5ZjE3Y2RkNTg4MDQzMDU3YjE5ZTRjZTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyTbfqzhSm291WF/mswSgwno9+Sx
3iixTZrcQxjJ+K+IeuEDiLbac3mjpli0YSx10s7BteznxB6r4FlEOjnv/ILrneOP
+KQydRv4k/CY+kj3mBU0GdevjJHTXIZXIYJMvGfUcoZqhWRnd4h+f2m5+RAu8763
qYzfXJ6Q+55XeaGCejYGV7MSNVxGBuq8SgjJlzxoHLSmFgCsMATz9m7NYPdzMixG
zj18x3acnCpG5VoIh6LfFtBL+UsX6d81zgNfrQPjbNfsT4h0xWCXLpk2UtUGI06v
2jlI06zOIsrR5XK2bgIKxe04JjRw1PbYnZgxXAKZeGmvU5nOO3eZUHAhkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5lPhydmF+58XzdWIBDBXsZ5M5fMB8GA1UdIwQY
MBaAFIGBRAo2ejTTBrwPaFrpzYaVL3+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xNjJmOGYtNjg3Zi00NjcxLWE1MjQt
NTU2OTFhNTY5NzIwLzEvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8xNjJmOGYtNjg3Zi00NjcxLWE1MjQtNTU2OTFhNTY5NzIw
LzEvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxKJIQRr
eXsVg+6q+mkMhPLAywwoq8ZBUIbJE7RQT9BW0AfMhqFz3pGRSGTS8olqFwTNVHZL
nV4imQZymrIsHvUQRjmNPm/Ny1MCtFxEpDaa+MTZ+t0yCJecQgWOS/+5XsG3FNwM
VZf64JmBrE7Ps1ruWxQfed3pVBTvF9GcBXzpaiPogogZxeg5Znt5UGaBsk07FaPe
PyGLhPsSkeUpoA2bHNpJqGOf8f2dwYFQ9CgHpljSbeOTAaBiqEGCDyAfMOUbOtOk
BI+3r+OiLJ4GWaIUz4i0FZj5UM9MBD89aNurTnWXySLJqYLflNB/KMFQcJxAWeSH
LXT/Bt/DWL8B1g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:54 2026 by rpki-client