This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
File:                     G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json)
Hash identifier:          6iaS87Gv693/AoA3ZrE9/U9UkJM4z5PhDaqQy9kNJ94=
Subject key identifier:   50:E7:8D:0F:66:98:4B:72:B1:2B:7C:95:3A:61:9D:90:93:D1:C2:21
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Certificate issuer:       /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial:       019C42EB43BFB16AC87D6CA10B4D84F92BC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
Manifest number:          0BB3
Signing time:             Mon 09 Feb 2026 15:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:40 +0000
Files and hashes:         1: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: zwZIwyN0LrAdI1lFlGaXXKtfgpI60SgJI9wRDr+t+6M=)
                          2: Gcm3mTulA6LRvNkW38ibYEgtom4.roa (hash: NDdsNqJPO5+KERP1vetA3EoWo8gEcy/Atr+ErCOi2Ho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:43:bf:b1:6a:c8:7d:6c:a1:0b:4d:84:f9:2b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
        Validity
            Not Before: Feb  9 15:00:40 2026 GMT
            Not After : Feb 10 15:00:40 2026 GMT
        Subject: CN=50e78d0f66984b72b12b7c953a619d9093d1c221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:0e:b6:4b:d0:63:84:b5:96:74:a8:0e:4c:
                    22:72:e4:7f:7e:e2:74:e4:98:21:35:44:8b:ce:35:
                    08:4f:e6:17:1e:ed:02:2d:05:c3:a8:e5:c2:11:32:
                    b1:1f:60:fe:ba:f9:47:c1:e2:b8:76:36:87:fb:11:
                    13:99:91:bd:ab:59:a8:c0:b5:41:d6:f7:95:2c:2f:
                    7c:f8:ed:93:99:e7:bb:0d:14:ff:f8:e8:10:f4:d3:
                    91:2d:f6:29:d7:53:08:25:be:7b:9c:c3:6f:8f:92:
                    fd:da:c9:db:5a:d6:9e:6c:c5:7c:95:ae:1b:be:94:
                    12:e4:7d:e9:f6:e0:3e:f8:ee:b4:52:65:60:f8:00:
                    05:eb:2f:ab:c0:e6:c2:61:55:11:f3:01:01:fb:99:
                    85:dd:ae:58:45:58:6b:e3:15:c9:86:c6:61:48:b9:
                    1c:55:62:47:52:12:31:86:0f:22:df:96:57:62:fa:
                    40:5c:33:f6:52:b8:57:cd:f2:49:6d:00:5f:7e:01:
                    81:97:0e:61:6e:b4:d8:ef:7e:82:40:91:ba:f9:e6:
                    10:2f:14:94:f5:7c:15:e1:c6:87:dd:fa:b1:6b:60:
                    d4:23:4a:81:ce:97:94:f3:ce:31:14:70:28:58:4f:
                    e5:25:f1:19:cd:2b:18:7e:bb:02:9d:e1:fc:87:2e:
                    81:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E7:8D:0F:66:98:4B:72:B1:2B:7C:95:3A:61:9D:90:93:D1:C2:21
            X509v3 Authority Key Identifier:
                keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:49:ae:19:56:01:18:e0:9e:d3:f4:d5:b5:06:31:c9:a3:b5:
         60:35:f9:99:54:f8:13:56:94:9c:a0:34:8b:ca:e1:ad:96:3b:
         bb:71:73:93:14:80:32:91:4d:1e:85:86:c6:06:c4:08:09:8e:
         ab:77:50:c9:c1:06:21:09:43:dc:d1:57:37:3a:43:39:0b:48:
         17:f7:40:29:a8:01:ab:16:b1:a8:ce:54:9a:5b:5f:80:e7:d7:
         d6:54:e0:c3:90:5d:00:80:01:2c:33:38:91:2b:4a:48:39:df:
         4d:3d:4f:3d:9e:a1:d2:26:44:78:35:92:4e:a4:9e:29:d0:f2:
         b5:6f:e8:55:2a:03:ca:f9:6f:28:2d:c9:85:0f:a5:46:95:39:
         c0:e8:ff:9a:4e:2d:4d:24:13:7a:24:10:71:f1:2a:a4:87:f7:
         80:b7:0c:e2:cf:1c:e1:c2:85:58:26:29:c6:23:e3:9c:02:a4:
         51:f2:bc:50:17:6a:26:26:cf:62:20:b7:1a:31:a2:f9:f0:33:
         8c:3f:f2:59:72:20:23:bf:26:46:74:d0:97:31:fd:f9:40:51:
         5f:8b:e9:33:fb:cb:95:3d:d1:ea:39:79:9c:1d:95:f7:2e:c4:
         8d:91:e6:95:ac:5f:c6:4d:5d:73:b1:f7:3d:e2:e6:c6:83:5b:
         bf:13:c2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:04 2026 by rpki-client