This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
File:                     GpnHX-V3fhNlc-HlHvumeB86WxY.mft (raw, json)
Hash identifier:          mIwPa73ubahqzob/kWiwt0tNme/jSlzifYQfF9RqPQ4=
Subject key identifier:   1C:DE:3E:2A:68:4D:BE:C8:4F:E3:AD:B3:16:4C:5F:53:91:06:DF:2E
Authority key identifier: 1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
Certificate issuer:       /CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Certificate serial:       019C41D8F97A8EAE105CFF1771C3826783E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 10:01:04 +0000
Manifest this update:     Mon 09 Feb 2026 10:01:04 +0000
Manifest next update:     Tue 10 Feb 2026 10:01:04 +0000
Files and hashes:         1: GpnHX-V3fhNlc-HlHvumeB86WxY.crl (hash: BnRUhy3AoKSi5+mpGSn3QB0XjP9t8AKUEy4tJ6i8Bvg=)
                          2: f8VlKt8JzCNAPxp24L1Yki6OYWM.roa (hash: pdFJm+KiuiR3o4ERryoXHrfDwKAIlg8iSODri6S35nw=)
                          3: qLXb67dE1EAchhK-STW3jwCdYVI.roa (hash: drU9BCSr2spJludNeni+Da0l+Sz7+7Ab8hUqNLHYgcU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:f9:7a:8e:ae:10:5c:ff:17:71:c3:82:67:83:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
        Validity
            Not Before: Feb  9 10:01:04 2026 GMT
            Not After : Feb 10 10:01:04 2026 GMT
        Subject: CN=1cde3e2a684dbec84fe3adb3164c5f539106df2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:85:8f:ca:ac:1e:ef:48:6b:e2:7d:44:0f:d7:
                    48:f7:7f:9d:cf:26:d7:20:97:37:f1:62:9e:76:d7:
                    ed:94:76:a4:38:78:40:69:ca:04:13:94:57:77:e4:
                    72:2b:aa:71:d0:0c:aa:38:b0:1a:aa:7a:69:9c:ad:
                    8e:93:60:f6:02:e7:75:1a:5f:58:21:fb:16:3c:6c:
                    6f:b3:9c:c8:c2:af:ff:dc:00:b0:73:e4:00:42:a7:
                    3e:d3:91:f0:97:91:81:89:3b:ef:99:d7:d6:4f:97:
                    de:89:ec:36:48:4e:fc:71:46:5e:22:a8:84:58:f0:
                    13:5a:25:79:6b:d2:56:ba:ab:82:47:63:41:48:13:
                    dc:17:aa:38:51:28:b1:37:75:8b:d2:a2:ce:1d:0b:
                    94:ad:29:e2:54:ce:52:c5:e9:84:cb:6a:24:8e:10:
                    b5:e1:88:5e:9a:60:df:ff:b7:ec:d4:0a:e3:73:fb:
                    8a:5e:1f:a6:50:78:ef:9b:bc:a2:44:71:ef:8e:24:
                    10:3d:78:a3:c2:36:75:a0:d4:b3:b3:ba:44:b6:53:
                    8e:68:4e:fc:bb:4a:9a:e0:77:a2:57:1e:7d:63:0c:
                    04:a9:7d:08:4f:a8:1b:b6:15:e1:4c:ed:e7:9c:23:
                    fc:44:6b:ee:48:15:8d:c8:c4:9b:83:a3:d7:e2:b8:
                    0d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DE:3E:2A:68:4D:BE:C8:4F:E3:AD:B3:16:4C:5F:53:91:06:DF:2E
            X509v3 Authority Key Identifier:
                keyid:1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:4a:60:08:38:1b:77:93:bf:a3:20:51:7a:b3:7e:f7:c7:23:
         1a:16:3b:14:c2:6e:30:ce:7a:d0:01:ef:7b:48:b1:58:02:07:
         33:0e:30:e7:af:00:f7:b7:2e:e5:13:69:2f:f2:03:b5:84:bf:
         6b:b8:44:7d:91:86:87:33:05:1e:50:61:75:cd:03:e5:f9:89:
         d9:cf:e8:c9:b6:59:c5:c0:2b:d1:d6:04:ab:00:2f:b7:04:c1:
         28:ff:f8:03:53:f6:53:fd:cf:c4:f8:88:b1:a4:d5:19:34:7e:
         df:fd:ea:31:e2:9e:c3:cc:a5:95:94:86:4e:29:52:33:9d:48:
         29:e1:ef:32:49:26:f3:d6:9b:13:c8:d3:e1:cc:fa:3e:82:c3:
         6a:d0:c9:15:17:f9:97:a4:0e:91:c3:37:40:1b:9f:db:e8:f2:
         9a:81:8f:c9:b8:4d:fc:d6:ef:99:59:cc:8a:ff:73:28:17:81:
         0c:4b:fe:c6:0f:a8:13:fd:9f:db:88:62:4c:79:a0:fc:cb:21:
         52:1e:2b:f8:98:be:34:84:f8:1c:eb:c9:09:70:08:e8:08:02:
         77:8d:2a:79:8e:4f:57:cc:6b:53:01:ab:f4:ca:2f:d3:8f:8e:
         0c:a7:70:6b:45:fe:20:03:48:3d:9b:57:62:5e:68:4c:a6:3f:
         98:62:4e:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2Pl6jq4QXP8XccOCZ4PiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhOTljNzVmZTU3NzdlMTM2NTczZTFlNTFlZmJhNjc4MWYz
YTViMTYwHhcNMjYwMjA5MTAwMTA0WhcNMjYwMjEwMTAwMTA0WjAzMTEwLwYDVQQD
EygxY2RlM2UyYTY4NGRiZWM4NGZlM2FkYjMxNjRjNWY1MzkxMDZkZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYWPyqwe70hr4n1ED9dI93+dzybX
IJc38WKedtftlHakOHhAacoEE5RXd+RyK6px0AyqOLAaqnppnK2Ok2D2Aud1Gl9Y
IfsWPGxvs5zIwq//3ACwc+QAQqc+05Hwl5GBiTvvmdfWT5feiew2SE78cUZeIqiE
WPATWiV5a9JWuquCR2NBSBPcF6o4USixN3WL0qLOHQuUrSniVM5SxemEy2okjhC1
4YhemmDf/7fs1Arjc/uKXh+mUHjvm7yiRHHvjiQQPXijwjZ1oNSzs7pEtlOOaE78
u0qa4HeiVx59YwwEqX0IT6gbthXhTO3nnCP8RGvuSBWNyMSbg6PX4rgNmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzePipoTb7IT+OtsxZMX1ORBt8uMB8GA1UdIwQY
MBaAFBqZx1/ld34TZXPh5R77pngfOlsWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3BuSFgtVjNmaE5sYy1IbEh2dW1lQjg2V3hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83MTE3M2ItMTkzOC00ODM1LWFmMDAt
YTY5OWJjYjA4YWUzLzEvR3BuSFgtVjNmaE5sYy1IbEh2dW1lQjg2V3hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi83MTE3M2ItMTkzOC00ODM1LWFmMDAtYTY5OWJjYjA4YWUz
LzEvR3BuSFgtVjNmaE5sYy1IbEh2dW1lQjg2V3hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEpgCDgb
d5O/oyBRerN+98cjGhY7FMJuMM560AHve0ixWAIHMw4w568A97cu5RNpL/IDtYS/
a7hEfZGGhzMFHlBhdc0D5fmJ2c/oybZZxcAr0dYEqwAvtwTBKP/4A1P2U/3PxPiI
saTVGTR+3/3qMeKew8yllZSGTilSM51IKeHvMkkm89abE8jT4cz6PoLDatDJFRf5
l6QOkcM3QBuf2+jymoGPybhN/NbvmVnMiv9zKBeBDEv+xg+oE/2f24hiTHmg/Msh
Uh4r+Ji+NIT4HOvJCXAI6AgCd40qeY5PV8xrUwGr9Mov04+ODKdwa0X+IANIPZtX
Yl5oTKY/mGJOuw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:09 2026 by rpki-client