This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
File:                     GMGsaILeCJMGD4CRfXuFjFww8GE.mft (raw, json)
Hash identifier:          m6ozXAC2oDoX95mzkQatsIa3240T/opvRs3YDS//wlI=
Subject key identifier:   EF:E3:EF:21:0F:84:70:16:65:20:D6:02:7D:4A:97:AF:83:5E:10:B4
Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
Certificate issuer:       /CN=18c1ac6882de0893060f80917d7b858c5c30f061
Certificate serial:       019C43223A5648AEC83061C9DCAAFA24E73C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
Manifest number:          0CC6
Signing time:             Mon 09 Feb 2026 16:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:42 +0000
Files and hashes:         1: GMGsaILeCJMGD4CRfXuFjFww8GE.crl (hash: +sltvmnqvXr0jk/TBzfmVk/87/LGdZVl1BMxUcWn4q0=)
                          2: HS3nZ0zy9rnKNuUQJIH2lNuhV3s.roa (hash: AgTDhdZgzXbDinGCbfeqfnNTye+ByZ5TlKKfMLNM5jk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:3a:56:48:ae:c8:30:61:c9:dc:aa:fa:24:e7:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061
        Validity
            Not Before: Feb  9 16:00:42 2026 GMT
            Not After : Feb 10 16:00:42 2026 GMT
        Subject: CN=efe3ef210f8470166520d6027d4a97af835e10b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:62:73:65:8c:c9:89:e0:db:1f:92:0f:7b:8f:
                    4b:32:76:90:a2:1b:64:fc:26:61:62:1a:0f:79:cc:
                    ad:3e:d7:4e:e2:7c:7c:49:e2:ef:51:8d:a9:05:b2:
                    7e:6f:f8:cb:27:0f:52:0e:a0:60:fa:bb:ee:af:8d:
                    73:6c:16:78:bd:1a:22:af:11:a2:51:6d:fa:b3:90:
                    c1:c3:bd:2e:bc:1d:17:5f:4a:77:62:82:76:17:b9:
                    41:1e:03:c5:f5:5c:04:d1:52:c3:09:1b:2c:9d:50:
                    ae:9d:f1:a4:e9:53:e6:0b:52:13:c6:52:73:fe:07:
                    a7:38:76:ad:a2:02:86:20:41:01:27:78:e9:71:50:
                    3b:b6:cd:d5:78:20:b7:79:5d:87:59:a5:2b:b4:ef:
                    2b:98:dc:c8:0a:05:1d:63:f4:84:d9:48:e1:4f:73:
                    1a:25:90:fa:cf:37:11:65:80:02:f2:ce:f3:b9:ae:
                    66:72:41:5e:63:fb:f0:b2:95:ea:bb:e6:00:e9:14:
                    ec:94:d2:20:37:c9:ac:55:b4:3f:bf:20:26:df:f2:
                    bf:94:b6:6c:a2:2b:27:f2:87:81:9e:24:20:28:76:
                    73:fa:06:55:cc:88:6c:ab:40:d5:98:5b:f4:fa:01:
                    3f:13:30:8a:07:44:e0:0d:db:c6:03:5c:01:9e:5d:
                    53:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E3:EF:21:0F:84:70:16:65:20:D6:02:7D:4A:97:AF:83:5E:10:B4
            X509v3 Authority Key Identifier:
                keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:29:d6:e0:89:b6:15:c0:ca:46:70:24:30:6c:4b:50:a1:cc:
         67:cb:3f:04:7f:3f:11:fc:ff:89:de:cf:d2:a7:d1:f3:40:81:
         76:e0:5d:ad:81:9c:c3:e4:12:fe:67:64:77:14:42:74:0e:a8:
         64:59:4b:64:28:ad:84:49:9f:79:68:2a:55:d2:6e:f0:7a:27:
         1d:f8:66:86:65:dd:92:52:c6:c7:4f:dd:36:d2:3f:be:3f:ca:
         37:55:f9:2d:17:ac:15:8c:3b:22:38:ae:f7:b3:e7:4b:26:62:
         51:36:ce:6e:48:ae:8f:40:d6:d9:d2:5e:e3:af:b3:c5:9a:85:
         aa:8b:87:6b:91:de:10:0e:89:db:18:d8:98:2a:fd:03:fa:58:
         31:a1:fd:ae:f3:9e:f2:a2:e2:39:c1:d1:c7:e3:db:74:1f:2b:
         53:36:ce:b3:88:74:28:a3:9d:4a:f7:68:44:b9:0c:74:80:d5:
         1e:18:db:0b:5d:c5:79:32:ad:97:92:38:f7:ba:7a:fa:9d:60:
         34:e9:cc:91:38:ec:4a:3d:96:6c:31:f8:e8:ce:96:61:f1:be:
         d2:87:4d:ec:a0:26:9b:83:b7:ba:73:63:16:e1:d8:a2:11:29:
         65:3f:77:6a:c3:b7:cf:38:8a:14:92:ef:71:1a:5b:23:84:84:
         39:82:21:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIjpWSK7IMGHJ3Kr6JOc8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4YzFhYzY4ODJkZTA4OTMwNjBmODA5MTdkN2I4NThjNWMz
MGYwNjEwHhcNMjYwMjA5MTYwMDQyWhcNMjYwMjEwMTYwMDQyWjAzMTEwLwYDVQQD
EyhlZmUzZWYyMTBmODQ3MDE2NjUyMGQ2MDI3ZDRhOTdhZjgzNWUxMGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32JzZYzJieDbH5IPe49LMnaQohtk
/CZhYhoPecytPtdO4nx8SeLvUY2pBbJ+b/jLJw9SDqBg+rvur41zbBZ4vRoirxGi
UW36s5DBw70uvB0XX0p3YoJ2F7lBHgPF9VwE0VLDCRssnVCunfGk6VPmC1ITxlJz
/genOHatogKGIEEBJ3jpcVA7ts3VeCC3eV2HWaUrtO8rmNzICgUdY/SE2UjhT3Ma
JZD6zzcRZYAC8s7zua5mckFeY/vwspXqu+YA6RTslNIgN8msVbQ/vyAm3/K/lLZs
oisn8oeBniQgKHZz+gZVzIhsq0DVmFv0+gE/EzCKB0TgDdvGA1wBnl1T/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/j7yEPhHAWZSDWAn1Kl6+DXhC0MB8GA1UdIwQY
MBaAFBjBrGiC3giTBg+AkX17hYxcMPBhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR01Hc2FJTGVDSk1HRDRDUmZYdUZqRnd3OEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS84NzAxMjMtNzE5ZC00NTA2LWJmODYt
ZThkZTA1OTI3OGJkLzEvR01Hc2FJTGVDSk1HRDRDUmZYdUZqRnd3OEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS84NzAxMjMtNzE5ZC00NTA2LWJmODYtZThkZTA1OTI3OGJk
LzEvR01Hc2FJTGVDSk1HRDRDUmZYdUZqRnd3OEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANynW4Im2
FcDKRnAkMGxLUKHMZ8s/BH8/Efz/id7P0qfR80CBduBdrYGcw+QS/mdkdxRCdA6o
ZFlLZCithEmfeWgqVdJu8HonHfhmhmXdklLGx0/dNtI/vj/KN1X5LResFYw7Ijiu
97PnSyZiUTbObkiuj0DW2dJe46+zxZqFqouHa5HeEA6J2xjYmCr9A/pYMaH9rvOe
8qLiOcHRx+PbdB8rUzbOs4h0KKOdSvdoRLkMdIDVHhjbC13FeTKtl5I497p6+p1g
NOnMkTjsSj2WbDH46M6WYfG+0odN7KAmm4O3unNjFuHYohEpZT93asO3zziKFJLv
cRpbI4SEOYIhGw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:45 2026 by rpki-client