This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
File:                     GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json)
Hash identifier:          1ZnfhcLQ8zUNYP72hwlnf+JJq+kvxuOC+E8HImhBoZc=
Subject key identifier:   9B:66:EF:A6:EF:AA:25:DE:6A:39:D1:81:66:6A:CE:84:7F:49:20:F5
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Certificate issuer:       /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial:       019C2B50F9E04E46480CA4992C26134C4C83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
Manifest number:          0391
Signing time:             Thu 05 Feb 2026 01:00:52 +0000
Manifest this update:     Thu 05 Feb 2026 01:00:52 +0000
Manifest next update:     Fri 06 Feb 2026 01:00:52 +0000
Files and hashes:         1: 0Hde166TZ8cOeYRDZBvGcnkowsw.roa (hash: qHe/Fb1SXZPDfsFybAYuKlH/X0tukUHCuNBNiEKAWfI=)
                          2: 1N12BIRxHI41mSTm69ziM417BQM.roa (hash: NWf2Ua6LuyO93ISX0t9PKrDP/YCuJk+SJvYdsbwbYYE=)
                          3: 6LIia5tMqbvxBKtY8BThO4xtAtc.roa (hash: +QLjKfCjIW6L5WkiIdYTEn/5q6ZYatBqzC1HJld3e54=)
                          4: FfkicRnds0SyM8Ri9Cp-q39uDR8.roa (hash: biBnPAucsy15z3WhNtWi3egdIRrJTjNrL9lhRCi/Suk=)
                          5: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: NXctLYi2UtRtihl3J7Jat5A5PYL8pFB62J5yrZFxXBY=)
                          6: NWaj7UwQJNpphq6A0KnyXEoRFy0.roa (hash: m2ilvS5ZvsuV1nGSihhJAUP32WTnDiYym9uVmCodM6s=)
                          7: X6Wyo1Nxo3DvPC0B0Jf1i8G3hqI.roa (hash: Kov0ii0fyGyD54eIG6eszxy4Wp/ixqF+zLVhtmB6pGk=)
                          8: g26RPZK6YExXyAYxiox0pH5Upvk.roa (hash: vtcEdbjodmT9ogpS1TjT9OhkB3pBDSvD+MwrAzlPjuc=)
                          9: pfe5B0ql1R3jCYK4fGz5CtLrWdM.roa (hash: HWDJb2FM7pBuEZ/mgtOH62KOhrf0YhTnBeYZLVDImO0=)
                          10: ryQMgFWZ3jNBbogxwI7g21J7R8Y.roa (hash: I6znAGDxaUZ6tiOUv1X3x50QNtWRlxAeBxeiC8CikHg=)
                          11: yhRIOnTpPbWhti1RrtqQMliwotE.roa (hash: sPDOjagJPBV8blENyQcTrbddZKQCM0gJadLIMm2Nmh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 01:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2b:50:f9:e0:4e:46:48:0c:a4:99:2c:26:13:4c:4c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
        Validity
            Not Before: Feb  5 01:00:52 2026 GMT
            Not After : Feb  6 01:00:52 2026 GMT
        Subject: CN=9b66efa6efaa25de6a39d181666ace847f4920f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5b:34:d6:e7:23:9e:c9:57:78:f4:59:4a:6f:
                    6f:97:24:c8:54:da:46:33:23:56:a2:ae:6c:85:94:
                    c3:32:f4:54:18:a1:2f:ef:10:00:b1:03:5b:e2:04:
                    b6:75:6c:5f:3b:fc:71:97:a1:01:cc:db:4a:ca:af:
                    41:61:cf:c6:48:a9:ca:bd:65:e6:a3:88:7c:7a:a3:
                    24:24:d4:be:08:91:e9:20:30:c1:90:3c:b1:38:47:
                    2c:62:e9:c9:ff:67:cf:c8:80:e8:86:b2:21:cb:98:
                    ad:3f:1e:e0:c1:e3:e2:f7:b6:51:ba:eb:bf:d7:7b:
                    7b:81:d0:f8:82:cf:ab:1e:9b:74:3d:2a:49:c9:27:
                    d6:79:83:f6:c0:e2:fb:a5:d8:b9:c2:b1:cd:60:72:
                    72:ea:eb:a7:e1:56:ee:e4:0b:a4:35:c6:36:76:5b:
                    56:63:b8:2e:3c:ff:2b:9e:0c:31:5c:11:d6:54:56:
                    a6:02:26:21:f4:f2:a9:1e:24:43:58:c7:70:e1:c2:
                    89:d2:1d:16:43:11:b0:4b:6a:4d:55:12:2a:30:d9:
                    0e:2a:53:81:ea:89:ec:e3:07:a1:6b:2b:3b:8f:35:
                    58:61:0d:e0:a6:14:a1:22:08:c3:b2:9b:34:62:b5:
                    13:d2:4e:4b:8e:c8:ce:95:5e:96:92:a1:e6:53:5e:
                    4e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:66:EF:A6:EF:AA:25:DE:6A:39:D1:81:66:6A:CE:84:7F:49:20:F5
            X509v3 Authority Key Identifier:
                keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:71:bd:09:91:e9:81:31:64:fc:13:d8:a5:4a:ae:cf:d0:01:
         9f:93:ca:a9:03:d7:aa:35:c1:db:ee:d7:be:d2:8c:71:e0:cb:
         3b:8b:75:ba:b4:cf:7b:a8:c3:73:c6:5e:d3:a0:fc:e8:a6:64:
         75:78:b2:f0:ae:a1:89:2e:00:78:47:f6:c8:45:9d:68:2a:b3:
         f2:e9:33:58:38:c4:27:7f:b2:73:49:fa:a0:34:4c:e3:c5:f8:
         a4:a7:0d:ef:d6:cb:79:35:29:96:ed:9f:ce:4e:f8:08:25:3b:
         44:a7:30:b2:f1:ec:d5:56:bd:80:cc:5a:eb:b1:d1:6f:2e:7f:
         81:77:52:f7:a2:db:dc:4d:96:a4:0a:1d:c9:55:1f:81:59:bc:
         43:f9:b0:45:7e:6c:93:ea:6c:9e:05:8f:c4:d5:9d:b2:ff:9f:
         a2:c0:80:87:75:56:88:03:ed:48:41:2f:b8:ed:e1:5f:65:00:
         a3:c9:d8:c4:31:1d:3d:53:bd:6a:4f:de:77:3d:ce:a2:8b:17:
         d8:67:37:98:8c:3a:6f:69:b6:2b:ea:0e:d4:20:5a:31:93:ee:
         88:59:ba:60:0e:05:21:cb:bf:1b:bf:6d:59:26:fa:9c:e1:9a:
         d8:d6:d0:eb:f5:a0:2e:80:27:68:0b:9a:01:78:6c:c7:ea:5e:
         4d:87:90:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 04:52:13 2026 by rpki-client