This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft
File:                     GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft (raw, json)
Hash identifier:          8wIxA3dQWQc+JGnW23FO5J5W9JczDj9JQmZr6Tn9NjE=
Subject key identifier:   F1:90:D2:D1:AC:08:34:93:59:8A:8B:AE:D6:C8:E4:E9:27:08:CD:9F
Authority key identifier: 1A:5B:E1:55:03:7E:B7:E6:5C:12:AC:9A:A2:A2:C3:25:03:8C:3A:9B
Certificate issuer:       /CN=1a5be155037eb7e65c12ac9aa2a2c325038c3a9b
Certificate serial:       019C43221395D284B7C3634B85266741DD1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GlvhVQN-t-ZcEqyaoqLDJQOMOps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft
Manifest number:          0BE7
Signing time:             Mon 09 Feb 2026 16:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:32 +0000
Files and hashes:         1: 2m0EGmPYAk8UEyoPFCdGZfUXZ58.roa (hash: xM4PqrOFPyrlAEK5Rat9kM0I00fA9ams94dU6W0ME2Q=)
                          2: GlvhVQN-t-ZcEqyaoqLDJQOMOps.crl (hash: oUj0VOinXU37A2MRoDoRV49FY2hIM8+RJQKbgFaDyYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GlvhVQN-t-ZcEqyaoqLDJQOMOps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:13:95:d2:84:b7:c3:63:4b:85:26:67:41:dd:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5be155037eb7e65c12ac9aa2a2c325038c3a9b
        Validity
            Not Before: Feb  9 16:00:32 2026 GMT
            Not After : Feb 10 16:00:32 2026 GMT
        Subject: CN=f190d2d1ac083493598a8baed6c8e4e92708cd9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:76:1e:48:aa:f8:30:4c:81:8e:c4:e9:ec:65:
                    00:73:26:dd:fa:3d:e3:7c:bd:37:f4:0f:b2:89:52:
                    f6:37:81:82:b5:e1:bd:5f:0e:54:41:00:e3:e4:38:
                    ac:b4:31:10:57:30:d9:2f:75:cb:88:29:c5:2c:3d:
                    1c:a8:df:cc:2e:9d:ad:fa:f6:c4:b7:22:c4:e8:fa:
                    98:5c:63:f2:f4:41:f2:85:bd:06:06:78:c7:82:57:
                    b8:3c:83:40:77:d4:e6:56:f8:e8:f0:49:01:e2:56:
                    43:13:f6:94:ce:29:84:e6:de:8a:4c:7a:2b:da:94:
                    9b:9d:2c:f6:b0:bf:8a:a7:ee:aa:c4:6e:08:04:4e:
                    ab:ff:2e:18:ae:ad:e7:c3:f7:e2:9d:f4:f2:fd:28:
                    cd:25:a0:b0:a7:96:e3:40:cd:a2:1b:fe:e6:e7:0c:
                    bf:86:3a:e8:ae:75:d6:cd:35:5d:f5:9c:1e:39:40:
                    cb:84:77:a6:ef:9b:90:fe:80:53:3c:c7:cf:d3:64:
                    a1:8d:ec:63:17:05:86:60:55:84:88:97:64:9f:c9:
                    76:9e:80:dc:11:a0:ac:ad:02:41:c1:87:3a:b0:58:
                    f5:d1:fc:18:56:2f:3d:4f:f0:35:2e:3e:15:c2:de:
                    50:45:cb:5f:fc:79:ac:a0:da:1b:f5:8f:a8:7e:b2:
                    5d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:90:D2:D1:AC:08:34:93:59:8A:8B:AE:D6:C8:E4:E9:27:08:CD:9F
            X509v3 Authority Key Identifier:
                keyid:1A:5B:E1:55:03:7E:B7:E6:5C:12:AC:9A:A2:A2:C3:25:03:8C:3A:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlvhVQN-t-ZcEqyaoqLDJQOMOps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:49:7a:fb:d2:5b:b8:fe:2e:5e:b4:f5:f4:81:23:ac:19:48:
         5b:c7:0c:2d:14:83:53:8b:ba:dc:b6:50:68:54:b4:8e:72:08:
         5b:ff:e6:8b:83:0c:23:88:a6:89:b7:49:8c:82:cf:bc:84:ae:
         d5:9a:0e:8a:a5:b9:41:9c:40:d0:cd:f9:9a:10:18:8c:06:ec:
         37:e9:68:5d:ae:2a:d5:41:14:e3:33:f1:4d:85:f8:78:6f:9f:
         81:2b:6e:8c:f6:9d:c6:37:94:45:3d:37:d7:a6:69:29:44:91:
         c9:4a:8b:d5:70:9e:a2:82:1f:d3:9e:f9:09:6f:4b:c5:b5:93:
         9c:a1:57:bb:8e:25:87:5b:be:27:68:90:3c:51:7b:88:b2:b0:
         f4:8e:47:a8:58:50:2d:c7:db:6d:06:6e:49:82:b0:01:dc:57:
         a0:01:c8:dd:d6:7a:10:00:46:42:bf:5e:55:3c:ed:00:09:0f:
         06:c7:ca:ba:20:74:e3:23:e4:be:3a:90:89:06:61:b4:9d:0c:
         25:7b:0b:5f:55:45:e2:03:b5:fd:1d:de:08:f8:7b:94:21:1c:
         dd:c8:90:6c:74:e3:eb:03:43:90:d6:38:9e:47:f7:c8:c6:c5:
         00:2d:f3:6f:f3:38:fb:39:33:df:49:cc:ab:97:fb:b5:fc:c0:
         1c:75:0d:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIhOV0oS3w2NLhSZnQd0fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNWJlMTU1MDM3ZWI3ZTY1YzEyYWM5YWEyYTJjMzI1MDM4
YzNhOWIwHhcNMjYwMjA5MTYwMDMyWhcNMjYwMjEwMTYwMDMyWjAzMTEwLwYDVQQD
EyhmMTkwZDJkMWFjMDgzNDkzNTk4YThiYWVkNmM4ZTRlOTI3MDhjZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXYeSKr4MEyBjsTp7GUAcybd+j3j
fL039A+yiVL2N4GCteG9Xw5UQQDj5DistDEQVzDZL3XLiCnFLD0cqN/MLp2t+vbE
tyLE6PqYXGPy9EHyhb0GBnjHgle4PINAd9TmVvjo8EkB4lZDE/aUzimE5t6KTHor
2pSbnSz2sL+Kp+6qxG4IBE6r/y4Yrq3nw/finfTy/SjNJaCwp5bjQM2iG/7m5wy/
hjrornXWzTVd9ZweOUDLhHem75uQ/oBTPMfP02ShjexjFwWGYFWEiJdkn8l2noDc
EaCsrQJBwYc6sFj10fwYVi89T/A1Lj4Vwt5QRctf/HmsoNob9Y+ofrJdKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGQ0tGsCDSTWYqLrtbI5OknCM2fMB8GA1UdIwQY
MBaAFBpb4VUDfrfmXBKsmqKiwyUDjDqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2x2aFZRTi10LVpjRXF5YW9xTERKUU9NT3BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xNTFlMDUtNzk0Mi00OTBkLWFkMTkt
MmVjODcxN2VlMzBhLzEvR2x2aFZRTi10LVpjRXF5YW9xTERKUU9NT3BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xNTFlMDUtNzk0Mi00OTBkLWFkMTktMmVjODcxN2VlMzBh
LzEvR2x2aFZRTi10LVpjRXF5YW9xTERKUU9NT3BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEl6+9Jb
uP4uXrT19IEjrBlIW8cMLRSDU4u63LZQaFS0jnIIW//mi4MMI4imibdJjILPvISu
1ZoOiqW5QZxA0M35mhAYjAbsN+loXa4q1UEU4zPxTYX4eG+fgStujPadxjeURT03
16ZpKUSRyUqL1XCeooIf0575CW9LxbWTnKFXu44lh1u+J2iQPFF7iLKw9I5HqFhQ
LcfbbQZuSYKwAdxXoAHI3dZ6EABGQr9eVTztAAkPBsfKuiB04yPkvjqQiQZhtJ0M
JXsLX1VF4gO1/R3eCPh7lCEc3ciQbHTj6wNDkNY4nkf3yMbFAC3zb/M4+zkz30nM
q5f7tfzAHHUNvA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:20 2026 by rpki-client