This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
File:                     GcvQpBNilCFbHCQ7DwIYz91WXVc.mft (raw, json)
Hash identifier:          7cK5Ge5vHFNgr06JJ/dcu7GTPqvXdDda8xqO6yAUM4k=
Subject key identifier:   CE:4A:20:74:EE:F6:18:33:B6:7D:F9:A1:12:AC:25:FC:3D:51:6C:39
Authority key identifier: 19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
Certificate issuer:       /CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Certificate serial:       019C420FFC34CAE0D075B0DA6E0E79CCCB8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
Manifest number:          0980
Signing time:             Mon 09 Feb 2026 11:01:09 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:09 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:09 +0000
Files and hashes:         1: GcvQpBNilCFbHCQ7DwIYz91WXVc.crl (hash: lJeEduB5eqo/fqdVlsYmveIxg8+3kTLwTmOyjRX18QY=)
                          2: IjGrmYJ01VhSBHqQt8lEwuCam0E.roa (hash: wRhA0UxHh3OEkpsw+jN2w//ZJrtHgK8+FbKZBNihmv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:fc:34:ca:e0:d0:75:b0:da:6e:0e:79:cc:cb:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
        Validity
            Not Before: Feb  9 11:01:09 2026 GMT
            Not After : Feb 10 11:01:09 2026 GMT
        Subject: CN=ce4a2074eef61833b67df9a112ac25fc3d516c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:65:67:80:16:17:d4:54:82:16:55:41:6a:23:
                    e2:7d:c8:8b:83:07:e6:7f:02:f3:92:76:bb:39:78:
                    f8:c0:45:d2:cc:07:64:03:20:15:61:3c:8e:a1:26:
                    4e:d3:1d:c7:8e:92:54:7b:42:e0:6b:9c:f9:bc:8b:
                    24:09:c6:ee:91:91:e1:88:f0:dc:c0:eb:ff:61:e9:
                    91:de:8e:98:33:37:b6:02:cc:41:84:92:e2:41:c8:
                    4c:b6:d7:b0:3d:30:44:ef:4f:e8:c5:10:3c:76:da:
                    7d:31:c2:85:3f:c4:49:db:c3:91:ad:b6:87:26:b8:
                    6b:83:f2:35:de:00:e9:f9:cf:74:cf:a6:5d:9b:a9:
                    b2:b8:2f:4e:6c:5b:21:49:7e:b7:8f:91:96:b2:3f:
                    40:cf:f0:65:bc:1e:e5:ec:db:87:cb:de:55:74:ec:
                    a0:8f:44:28:1d:51:a3:9c:c2:f2:ae:2d:63:4f:a2:
                    b5:b4:d3:73:92:31:eb:6c:13:02:ae:ba:41:df:3e:
                    b1:ad:37:b6:9b:e0:e7:21:02:73:01:cf:83:30:14:
                    ca:de:fd:2e:ed:d4:a9:65:b8:6e:dc:21:e0:8f:fe:
                    0d:d5:0a:31:30:c4:ce:af:7e:7d:e0:75:36:21:93:
                    49:4b:54:44:22:6c:f9:29:8d:c3:23:3b:7b:8e:49:
                    c3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4A:20:74:EE:F6:18:33:B6:7D:F9:A1:12:AC:25:FC:3D:51:6C:39
            X509v3 Authority Key Identifier:
                keyid:19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c3:4e:92:5c:6d:89:b6:8d:f8:36:95:8b:7b:71:12:44:c1:
         b4:10:38:1f:42:64:69:57:25:05:c5:6b:ab:6c:68:a3:2b:32:
         4c:5a:72:77:8a:e5:30:02:9b:fa:85:af:cf:32:df:dd:72:ec:
         ad:ff:86:ef:58:6b:b1:43:eb:f7:d7:e0:da:fc:20:37:c7:98:
         2b:3c:4b:fe:42:cd:5c:37:82:63:ae:cc:60:96:a3:a2:99:98:
         9d:18:e8:66:6e:13:2c:1a:8d:87:9d:29:75:e5:4b:61:f8:77:
         2a:e4:aa:e2:2c:13:be:89:5b:c7:00:78:03:38:8a:c0:c1:02:
         b1:23:b1:8f:59:14:53:6b:e6:8e:27:ab:97:d7:2b:0a:68:6f:
         b4:bd:da:0d:9d:60:85:b0:34:ac:1b:c8:8f:66:14:a3:a2:96:
         28:78:8a:8b:69:e1:c1:db:41:94:49:2d:9f:6d:66:fb:69:aa:
         bd:9d:0a:32:31:6d:54:58:b7:10:69:ac:d7:c5:7b:a0:91:38:
         2c:4a:5e:88:aa:ce:00:9a:e4:ba:7a:ba:6d:0f:7f:f4:77:e7:
         49:ad:f8:3a:f4:91:46:e0:36:ec:05:c7:f6:eb:e8:4f:df:0b:
         70:1d:01:91:55:96:b1:fd:c4:d9:c4:b9:3c:e9:6b:81:ec:de:
         2f:92:46:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD/w0yuDQdbDabg55zMuMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5Y2JkMGE0MTM2Mjk0MjE1YjFjMjQzYjBmMDIxOGNmZGQ1
NjVkNTcwHhcNMjYwMjA5MTEwMTA5WhcNMjYwMjEwMTEwMTA5WjAzMTEwLwYDVQQD
EyhjZTRhMjA3NGVlZjYxODMzYjY3ZGY5YTExMmFjMjVmYzNkNTE2YzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGVngBYX1FSCFlVBaiPifciLgwfm
fwLzkna7OXj4wEXSzAdkAyAVYTyOoSZO0x3HjpJUe0Lga5z5vIskCcbukZHhiPDc
wOv/YemR3o6YMze2AsxBhJLiQchMttewPTBE70/oxRA8dtp9McKFP8RJ28ORrbaH
Jrhrg/I13gDp+c90z6Zdm6myuC9ObFshSX63j5GWsj9Az/BlvB7l7NuHy95VdOyg
j0QoHVGjnMLyri1jT6K1tNNzkjHrbBMCrrpB3z6xrTe2m+DnIQJzAc+DMBTK3v0u
7dSpZbhu3CHgj/4N1QoxMMTOr3594HU2IZNJS1REImz5KY3DIzt7jknDRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5KIHTu9hgztn35oRKsJfw9UWw5MB8GA1UdIwQY
MBaAFBnL0KQTYpQhWxwkOw8CGM/dVl1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80ZDRlZWYtNzI0Ni00NjBlLWI5NDYt
ZWNlNzgyNjc4N2I0LzEvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC80ZDRlZWYtNzI0Ni00NjBlLWI5NDYtZWNlNzgyNjc4N2I0
LzEvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdcNOklxt
ibaN+DaVi3txEkTBtBA4H0JkaVclBcVrq2xooysyTFpyd4rlMAKb+oWvzzLf3XLs
rf+G71hrsUPr99fg2vwgN8eYKzxL/kLNXDeCY67MYJajopmYnRjoZm4TLBqNh50p
deVLYfh3KuSq4iwTvolbxwB4AziKwMECsSOxj1kUU2vmjierl9crCmhvtL3aDZ1g
hbA0rBvIj2YUo6KWKHiKi2nhwdtBlEktn21m+2mqvZ0KMjFtVFi3EGms18V7oJE4
LEpeiKrOAJrkunq6bQ9/9HfnSa34OvSRRuA27AXH9uvoT98LcB0BkVWWsf3E2cS5
POlrgezeL5JGOA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:56 2026 by rpki-client