This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
File:                     GYIE0cJaARI2vqB0HkxgE500mxA.mft (raw, json)
Hash identifier:          /hf6f7dcKI0RXW3Lf8N0vjuH/ydYtuUSTyB8ETSf9lE=
Subject key identifier:   0D:7B:52:10:87:FF:AF:BC:4F:45:85:BF:14:8B:5A:C2:C1:22:96:C3
Authority key identifier: 19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
Certificate issuer:       /CN=198204d1c25a011236bea0741e4c60139d349b10
Certificate serial:       019C427DD2DF7DB9673DBDA39303432B08A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 13:01:08 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:08 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:08 +0000
Files and hashes:         1: FqwORBPk6r44lZLm9dt7Wvqx_PA.roa (hash: 7Y8WYPnD9S34g7ljPzxI1LKxdoYV7LrTfUQDWOnoo5M=)
                          2: GYIE0cJaARI2vqB0HkxgE500mxA.crl (hash: yG/uEfzULh0bDxdmDC1ECHBsS5fBEIBZdMZcqX2VZJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:d2:df:7d:b9:67:3d:bd:a3:93:03:43:2b:08:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=198204d1c25a011236bea0741e4c60139d349b10
        Validity
            Not Before: Feb  9 13:01:08 2026 GMT
            Not After : Feb 10 13:01:08 2026 GMT
        Subject: CN=0d7b521087ffafbc4f4585bf148b5ac2c12296c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:92:6d:77:99:28:59:f2:c8:51:8d:7a:11:78:
                    13:c6:65:b3:e3:92:57:92:52:bc:7c:5c:d1:f0:85:
                    01:f3:d8:1e:b5:85:a6:60:6e:4c:21:75:3b:e8:4e:
                    44:06:64:2c:4d:6e:34:ad:c1:ba:46:91:ee:4b:2c:
                    77:b2:e0:49:a5:f3:a6:0e:85:3a:15:49:af:a2:34:
                    94:7e:3d:6d:8e:b5:ae:45:c5:80:c0:b9:fc:9f:3c:
                    1d:ae:79:af:e3:22:95:70:78:7d:85:e1:ff:22:3e:
                    8f:19:f6:91:2c:02:0f:20:3c:86:27:c4:e8:3a:49:
                    66:20:27:ca:83:bc:90:71:3e:60:9f:4e:07:8f:20:
                    e2:ac:9e:96:15:a5:4f:1f:35:da:35:b8:52:57:e9:
                    35:3f:cf:51:23:ae:b3:e5:5b:5b:88:09:20:66:42:
                    aa:ff:ab:e8:25:8a:7e:60:ce:9f:f7:ca:3f:bf:d4:
                    c9:cd:43:ba:22:cd:41:5c:53:a7:4b:5a:e7:b8:e8:
                    a6:06:6e:8f:9a:fa:b4:2e:da:f9:f0:4d:54:42:f3:
                    fb:16:b7:50:3c:a2:76:ae:41:1e:06:dc:19:5f:b2:
                    7a:a8:ad:7c:d1:5f:2c:af:21:4f:a3:26:f3:e7:45:
                    5f:05:f7:f5:7b:be:33:78:77:c7:df:78:79:62:cd:
                    33:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:7B:52:10:87:FF:AF:BC:4F:45:85:BF:14:8B:5A:C2:C1:22:96:C3
            X509v3 Authority Key Identifier:
                keyid:19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:1b:83:b2:92:fc:dd:4e:2e:73:ef:1e:5d:bb:09:ee:e4:d8:
         d7:c4:44:84:23:7e:c3:68:cb:9e:5f:bf:ca:bc:c3:cf:7c:d2:
         17:05:06:e0:50:d7:cc:6b:ba:a1:86:fe:71:1c:a8:61:e0:d2:
         84:43:56:78:8f:6f:59:1f:f7:09:93:90:b8:16:d6:a4:de:7c:
         39:4f:39:bd:36:80:ca:0d:27:44:41:58:cc:99:a5:94:4e:ad:
         1f:70:2b:c3:36:70:eb:88:91:1a:af:61:a2:8b:af:7c:f2:b5:
         38:12:55:c9:61:59:14:86:cd:6d:92:fe:d6:84:aa:0b:36:ea:
         b7:0a:6d:03:00:52:84:38:b3:b3:f4:fc:4b:d9:df:78:9c:92:
         c7:3f:e4:73:29:2e:2f:58:e9:ba:a2:b2:98:ca:a4:0e:72:ca:
         e6:ab:2e:0d:ed:d9:0b:57:c0:d4:10:52:3f:3a:d5:9a:a1:5c:
         c9:ef:93:f5:d7:22:48:c1:49:9b:92:c9:87:7b:f4:b5:04:38:
         d0:af:28:0f:e7:b3:6b:ef:6b:3e:df:ce:1b:a8:fb:51:aa:0d:
         c8:98:d6:89:de:cd:85:3d:13:8c:ec:5b:67:1b:63:d7:f7:f4:
         bc:40:fe:c3:7e:18:1d:9e:0e:63:5c:5d:b3:00:4f:56:82:d2:
         e7:3d:9e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:44 2026 by rpki-client