This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
File:                     GCJBwqTNGwi_W6VBLUkcScjrh40.mft (raw, json)
Hash identifier:          9SzIxaHuPfnQva0AmS5i2KYUGoxl2Pvv7suj18i7wqM=
Subject key identifier:   C0:5F:AF:26:31:61:BB:B4:4B:49:9C:65:18:1B:80:3A:E4:C3:FD:B6
Authority key identifier: 18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D
Certificate issuer:       /CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
Certificate serial:       019C4358CD4B00FAAC9915249627261BBC73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
Manifest number:          04F6
Signing time:             Mon 09 Feb 2026 17:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:19 +0000
Files and hashes:         1: GCJBwqTNGwi_W6VBLUkcScjrh40.crl (hash: D0UShCpqA9herTRzwA6E4kuqGvwrJ+Ew7ae3omK0V6A=)
                          2: PeoNHXokHMDq2XG5umTEZp1JMkI.roa (hash: knYWEfrEJBE1/OQa/3XQPBybR/ExGW5sYDHbUzsYQWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:cd:4b:00:fa:ac:99:15:24:96:27:26:1b:bc:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
        Validity
            Not Before: Feb  9 17:00:19 2026 GMT
            Not After : Feb 10 17:00:19 2026 GMT
        Subject: CN=c05faf263161bbb44b499c65181b803ae4c3fdb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:43:cf:63:33:d0:63:37:53:ba:c1:34:b7:ea:
                    99:29:1a:31:e8:8a:dd:fd:81:c0:76:af:6a:ee:00:
                    eb:6a:be:a7:9f:29:49:d8:28:61:45:f3:2c:b7:83:
                    1a:96:24:32:c5:21:83:f1:7c:4d:82:bd:ab:50:5d:
                    ff:de:c6:62:a7:45:56:9a:f6:11:58:fb:34:c8:b4:
                    ab:32:19:71:f1:08:8d:8a:f2:bb:52:2b:6e:fb:eb:
                    73:22:49:98:0d:c7:ae:0c:64:aa:0d:2f:a2:83:92:
                    3c:17:a2:5a:93:be:50:df:ca:a0:50:88:4c:85:50:
                    12:3d:b1:30:37:1d:65:a2:e7:35:b0:77:0f:47:56:
                    b5:80:65:3a:f1:88:df:46:9b:96:b5:49:45:5c:05:
                    e5:c7:71:e0:39:78:3f:8c:a4:7b:e7:a1:cc:25:e2:
                    4e:35:42:a5:d5:db:8a:3e:54:93:47:78:22:13:e4:
                    06:63:a3:01:80:cd:7e:94:f9:7b:f0:d2:12:4a:25:
                    c6:60:3a:32:89:7d:a7:3a:d8:7e:57:d3:48:77:15:
                    b5:3e:1d:5d:01:25:31:25:c2:7f:0d:42:43:5e:0c:
                    1a:16:37:45:1f:90:38:d0:ef:02:ba:ba:7c:b8:3b:
                    d4:13:4b:8b:62:9b:ca:a7:cb:3f:62:b9:85:38:ca:
                    4e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5F:AF:26:31:61:BB:B4:4B:49:9C:65:18:1B:80:3A:E4:C3:FD:B6
            X509v3 Authority Key Identifier:
                keyid:18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:29:60:57:b5:22:85:df:51:01:50:b2:78:bb:a5:a3:a0:d0:
         cd:c3:a6:06:e0:65:fd:ab:3b:01:c7:84:8b:d3:61:56:ee:69:
         3c:2d:2b:e5:27:08:40:e2:2b:f5:ca:0c:08:0c:6a:d2:c7:92:
         66:0d:71:15:5d:b8:25:d6:04:3a:ec:ae:17:6c:01:13:7b:17:
         c9:70:84:d3:56:18:dd:a0:3a:fd:f0:e6:c9:ab:79:73:ba:ee:
         94:eb:48:05:94:80:95:33:ff:f4:bd:6e:15:dc:2c:67:f3:f8:
         42:81:9a:2e:b9:82:99:29:b8:f2:2f:7e:ba:1f:15:ce:0f:d6:
         60:be:d2:40:5f:b9:e1:20:4c:74:2f:cf:ae:e6:3b:dd:a1:26:
         d1:bc:80:49:a6:48:7c:83:31:51:1a:b6:ca:6b:2f:c1:a1:96:
         b2:cd:df:8d:65:81:22:e5:01:03:2e:cc:00:7a:b9:f5:46:92:
         7f:f5:61:19:56:b3:5c:cb:cd:f4:1d:f9:93:3b:3a:e9:5c:6c:
         82:9b:45:41:be:81:b7:7c:d6:83:ab:1f:55:46:ad:43:73:48:
         62:66:64:e7:05:16:26:6e:99:70:69:0e:4f:f8:a4:29:4c:fa:
         ce:a1:dd:e5:c3:79:bd:fd:ca:32:95:62:1b:49:17:23:40:73:
         f3:c9:e8:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWM1LAPqsmRUklicmG7xzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MjI0MWMyYTRjZDFiMDhiZjViYTU0MTJkNDkxYzQ5Yzhl
Yjg3OGQwHhcNMjYwMjA5MTcwMDE5WhcNMjYwMjEwMTcwMDE5WjAzMTEwLwYDVQQD
EyhjMDVmYWYyNjMxNjFiYmI0NGI0OTljNjUxODFiODAzYWU0YzNmZGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEPPYzPQYzdTusE0t+qZKRox6Ird
/YHAdq9q7gDrar6nnylJ2ChhRfMst4MaliQyxSGD8XxNgr2rUF3/3sZip0VWmvYR
WPs0yLSrMhlx8QiNivK7Uitu++tzIkmYDceuDGSqDS+ig5I8F6Jak75Q38qgUIhM
hVASPbEwNx1louc1sHcPR1a1gGU68YjfRpuWtUlFXAXlx3HgOXg/jKR756HMJeJO
NUKl1duKPlSTR3giE+QGY6MBgM1+lPl78NISSiXGYDoyiX2nOth+V9NIdxW1Ph1d
ASUxJcJ/DUJDXgwaFjdFH5A40O8Curp8uDvUE0uLYpvKp8s/YrmFOMpOAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBfryYxYbu0S0mcZRgbgDrkw/22MB8GA1UdIwQY
MBaAFBgiQcKkzRsIv1ulQS1JHEnI64eNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0NKQndxVE5Hd2lfVzZWQkxVa2NTY2pyaDQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYmY3OTUtYTMxZC00ZTYzLThmYTEt
YjJkMjY4ZTJjYjc4LzEvR0NKQndxVE5Hd2lfVzZWQkxVa2NTY2pyaDQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lYmY3OTUtYTMxZC00ZTYzLThmYTEtYjJkMjY4ZTJjYjc4
LzEvR0NKQndxVE5Hd2lfVzZWQkxVa2NTY2pyaDQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABClgV7Ui
hd9RAVCyeLulo6DQzcOmBuBl/as7AceEi9NhVu5pPC0r5ScIQOIr9coMCAxq0seS
Zg1xFV24JdYEOuyuF2wBE3sXyXCE01YY3aA6/fDmyat5c7rulOtIBZSAlTP/9L1u
FdwsZ/P4QoGaLrmCmSm48i9+uh8Vzg/WYL7SQF+54SBMdC/PruY73aEm0byASaZI
fIMxURq2ymsvwaGWss3fjWWBIuUBAy7MAHq59UaSf/VhGVazXMvN9B35kzs66Vxs
gptFQb6Bt3zWg6sfVUatQ3NIYmZk5wUWJm6ZcGkOT/ikKUz6zqHd5cN5vf3KMpVi
G0kXI0Bz88nosg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:53:35 2026 by rpki-client