This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft
File:                     gqo-xYuoRtJ6eXERxVhRUwANug4.mft (raw, json)
Hash identifier:          bp+4AmID1Jjh/h9qg9PDJQMJ8peKUKlS4VY3E44l0xw=
Subject key identifier:   D7:81:EB:F6:2D:0C:E1:CA:38:2D:AC:D0:A5:B4:A5:D5:60:4A:55:D6
Authority key identifier: 82:AA:3E:C5:8B:A8:46:D2:7A:79:71:11:C5:58:51:53:00:0D:BA:0E
Certificate issuer:       /CN=82aa3ec58ba846d27a797111c5585153000dba0e
Certificate serial:       019C41D901405BFC5BC411F00C7041B033C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 10:01:06 +0000
Manifest this update:     Mon 09 Feb 2026 10:01:06 +0000
Manifest next update:     Tue 10 Feb 2026 10:01:06 +0000
Files and hashes:         1: Ue5qGAdMUuZjIAkWiew3rNK7iec.roa (hash: 0R2GCImaNBlpU0Y1AJHIDWb7A+a1HMHsb4hUInCPqe8=)
                          2: gqo-xYuoRtJ6eXERxVhRUwANug4.crl (hash: 2ZcrWinmiXo81k5NjpiT24BHSTRZp4HQO099hjlQsn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d9:01:40:5b:fc:5b:c4:11:f0:0c:70:41:b0:33:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82aa3ec58ba846d27a797111c5585153000dba0e
        Validity
            Not Before: Feb  9 10:01:06 2026 GMT
            Not After : Feb 10 10:01:06 2026 GMT
        Subject: CN=d781ebf62d0ce1ca382dacd0a5b4a5d5604a55d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:39:f2:aa:be:28:3a:4e:7a:ff:3d:9b:d5:da:
                    f3:8d:7b:9c:00:95:32:54:bb:84:0e:4c:a2:bc:82:
                    36:fa:80:98:06:77:6c:23:ca:02:b8:84:97:b8:a8:
                    f4:7d:14:12:4d:56:6e:fd:ca:2d:a9:7d:95:b3:33:
                    87:f3:df:11:d9:c8:76:cd:28:ee:c5:a8:55:f5:70:
                    55:7e:32:63:44:e9:fa:fb:9e:72:b2:db:24:69:cb:
                    47:fa:ce:75:49:05:3d:7c:dd:36:0e:dd:86:51:a2:
                    c3:b0:6b:af:c4:09:88:45:8f:5f:05:9a:d6:2a:ff:
                    ad:65:0e:8c:2d:b6:53:b7:91:90:71:2d:2b:b7:17:
                    8d:84:6d:1d:ce:14:63:21:6b:8c:f0:d3:fc:a3:1a:
                    ae:5c:a9:95:12:09:b9:d7:55:51:30:ef:fe:68:68:
                    b0:34:9f:3b:a3:1a:16:96:19:02:66:96:fa:5e:ce:
                    84:97:b3:57:f6:c0:d2:e6:9d:ac:69:f6:61:eb:04:
                    1d:3a:5c:2b:2b:ef:06:eb:53:35:61:7d:8b:b8:41:
                    88:e7:d2:77:c8:82:ca:64:a4:90:b8:4c:4e:61:6a:
                    70:70:5a:00:14:46:10:2e:53:30:22:2c:c4:ab:65:
                    7c:e9:66:b8:a6:a7:ef:7e:15:fd:74:54:dc:08:96:
                    9a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:81:EB:F6:2D:0C:E1:CA:38:2D:AC:D0:A5:B4:A5:D5:60:4A:55:D6
            X509v3 Authority Key Identifier:
                keyid:82:AA:3E:C5:8B:A8:46:D2:7A:79:71:11:C5:58:51:53:00:0D:BA:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:de:ad:69:89:b9:81:a9:4f:4f:b9:1a:ad:f2:31:0d:83:63:
         19:bf:f4:79:11:42:57:8f:34:e5:9e:ee:c3:7c:7f:c7:c2:1f:
         83:57:0f:66:24:0e:8a:5c:11:95:68:62:f1:86:35:a0:f4:87:
         1c:56:06:9d:6b:68:5e:c6:84:8f:d8:55:ac:63:31:30:ad:98:
         52:a1:2a:59:63:97:6f:73:e0:04:e0:38:a7:69:82:03:5e:99:
         02:fe:e1:64:71:8e:f5:08:d4:33:b7:08:cf:e1:8e:5a:a9:ee:
         91:30:44:8e:71:01:8c:7e:ee:1d:9a:fe:9f:fb:72:f3:5e:7d:
         27:2b:5b:ba:f8:c4:9f:80:f0:dd:2d:c7:66:b4:d7:0b:5b:b3:
         8f:eb:47:97:46:99:d2:4e:b0:4e:81:83:26:85:2b:f1:7b:b6:
         e5:c6:81:32:00:48:bc:f5:a0:73:0e:90:6e:8d:31:cf:49:38:
         bb:72:bf:43:37:44:43:f4:c0:da:de:23:9e:4b:0c:61:08:ef:
         af:3d:6c:00:77:a2:31:e1:8c:eb:3b:14:0c:08:d6:05:09:5f:
         41:8e:34:56:e8:ad:66:38:86:eb:04:c3:48:62:bf:8e:c2:4b:
         38:39:8a:9e:e5:1a:2d:98:ed:54:0e:ba:22:d5:34:2c:e8:29:
         ad:d0:ea:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2QFAW/xbxBHwDHBBsDPIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYWEzZWM1OGJhODQ2ZDI3YTc5NzExMWM1NTg1MTUzMDAw
ZGJhMGUwHhcNMjYwMjA5MTAwMTA2WhcNMjYwMjEwMTAwMTA2WjAzMTEwLwYDVQQD
EyhkNzgxZWJmNjJkMGNlMWNhMzgyZGFjZDBhNWI0YTVkNTYwNGE1NWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Dnyqr4oOk56/z2b1drzjXucAJUy
VLuEDkyivII2+oCYBndsI8oCuISXuKj0fRQSTVZu/cotqX2VszOH898R2ch2zSju
xahV9XBVfjJjROn6+55ystskactH+s51SQU9fN02Dt2GUaLDsGuvxAmIRY9fBZrW
Kv+tZQ6MLbZTt5GQcS0rtxeNhG0dzhRjIWuM8NP8oxquXKmVEgm511VRMO/+aGiw
NJ87oxoWlhkCZpb6Xs6El7NX9sDS5p2safZh6wQdOlwrK+8G61M1YX2LuEGI59J3
yILKZKSQuExOYWpwcFoAFEYQLlMwIizEq2V86Wa4pqfvfhX9dFTcCJaa8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNeB6/YtDOHKOC2s0KW0pdVgSlXWMB8GA1UdIwQY
MBaAFIKqPsWLqEbSenlxEcVYUVMADboOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3FvLXhZdW9SdEo2ZVhFUnhWaFJVd0FOdWc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iMWM3ZjktYWQ5Yy00YmI3LWFjNDct
OTI3ZGQ0NTlhYzVjLzEvZ3FvLXhZdW9SdEo2ZVhFUnhWaFJVd0FOdWc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iMWM3ZjktYWQ5Yy00YmI3LWFjNDctOTI3ZGQ0NTlhYzVj
LzEvZ3FvLXhZdW9SdEo2ZVhFUnhWaFJVd0FOdWc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxd6taYm5
galPT7karfIxDYNjGb/0eRFCV4805Z7uw3x/x8Ifg1cPZiQOilwRlWhi8YY1oPSH
HFYGnWtoXsaEj9hVrGMxMK2YUqEqWWOXb3PgBOA4p2mCA16ZAv7hZHGO9QjUM7cI
z+GOWqnukTBEjnEBjH7uHZr+n/ty8159JytbuvjEn4Dw3S3HZrTXC1uzj+tHl0aZ
0k6wToGDJoUr8Xu25caBMgBIvPWgcw6Qbo0xz0k4u3K/QzdEQ/TA2t4jnksMYQjv
rz1sAHeiMeGM6zsUDAjWBQlfQY40VuitZjiG6wTDSGK/jsJLODmKnuUaLZjtVA66
ItU0LOgprdDqdQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:26 2026 by rpki-client