This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
File:                     Gcxj87NPFwGJ0HPIi31lL3Azofw.mft (raw, json)
Hash identifier:          XlPR34f5f8mD/r0XfpYNFOcTziUTIkYF/I+Qu2Dkfps=
Subject key identifier:   65:DB:FC:46:4D:6E:46:8E:8D:86:CC:D9:17:76:87:27:FC:4A:2C:1C
Authority key identifier: 19:CC:63:F3:B3:4F:17:01:89:D0:73:C8:8B:7D:65:2F:70:33:A1:FC
Certificate issuer:       /CN=19cc63f3b34f170189d073c88b7d652f7033a1fc
Certificate serial:       019C446C2BBEBBBA400AE0FC8E111A791EFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
Manifest number:          0596
Signing time:             Mon 09 Feb 2026 22:01:05 +0000
Manifest this update:     Mon 09 Feb 2026 22:01:05 +0000
Manifest next update:     Tue 10 Feb 2026 22:01:05 +0000
Files and hashes:         1: 14hIFUW6vS2lRrFhhTcqnw5Y0_U.roa (hash: weE6FiUWFJlgjSn45t8SYEOqGWgUP2W1fkEVmJ8kNgo=)
                          2: Gcxj87NPFwGJ0HPIi31lL3Azofw.crl (hash: KHDRQiPVP1DuY0Lcdn4lB1pLg4zOgMrZYAHLP4Valj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6c:2b:be:bb:ba:40:0a:e0:fc:8e:11:1a:79:1e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19cc63f3b34f170189d073c88b7d652f7033a1fc
        Validity
            Not Before: Feb  9 22:01:05 2026 GMT
            Not After : Feb 10 22:01:05 2026 GMT
        Subject: CN=65dbfc464d6e468e8d86ccd917768727fc4a2c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8e:82:04:4e:93:93:17:de:16:f3:13:8f:e2:
                    5e:5e:d8:53:2c:05:f5:82:89:b6:c8:cf:50:ae:8f:
                    73:83:14:8c:5d:ef:af:d2:f0:b5:e9:ac:eb:61:02:
                    83:42:95:b4:c2:22:3b:f4:0c:13:df:51:97:ba:05:
                    80:f4:ba:ac:dd:65:ff:c4:2f:de:f4:c4:a1:b0:88:
                    8f:fa:88:d7:7d:f2:0e:4e:c4:3f:89:81:d7:a8:b5:
                    15:45:05:96:aa:7e:35:a5:8d:0e:03:6d:5e:a1:f5:
                    02:10:c0:12:e2:55:34:99:69:12:c5:14:42:57:0a:
                    ba:15:12:58:9e:28:ba:67:75:8f:ef:cf:37:d5:93:
                    a0:4c:9e:cd:58:6b:06:20:06:aa:7c:a3:d1:6e:1d:
                    f0:84:cc:13:cf:64:59:c7:75:81:8b:0d:f4:34:1f:
                    e8:41:aa:f7:21:3c:44:8b:e9:df:9b:47:e1:fa:68:
                    00:b4:2e:46:0d:e8:f7:fe:43:16:a2:63:d0:b8:e0:
                    9e:13:43:78:3b:62:a6:9b:76:79:47:f9:d4:d0:2d:
                    ef:64:75:85:55:5d:3d:ff:86:b7:7f:86:62:84:f4:
                    65:38:4a:04:f3:8a:2f:c8:3c:13:3d:c0:46:80:c0:
                    80:bd:d1:d9:93:30:b8:43:d7:73:95:00:98:0c:08:
                    84:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DB:FC:46:4D:6E:46:8E:8D:86:CC:D9:17:76:87:27:FC:4A:2C:1C
            X509v3 Authority Key Identifier:
                keyid:19:CC:63:F3:B3:4F:17:01:89:D0:73:C8:8B:7D:65:2F:70:33:A1:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:3c:9d:20:05:c4:87:f6:b1:07:92:80:6b:58:ad:5a:2f:53:
         88:9b:20:c7:f9:e8:cb:10:62:94:11:6c:8b:24:2d:66:bb:13:
         ed:fc:a0:fe:b5:f8:51:d1:5f:82:89:66:74:3e:a5:cb:6a:42:
         68:43:ae:91:22:86:6e:8f:f7:b3:72:5a:16:a6:8b:72:e8:57:
         b5:14:bb:88:68:37:b7:80:c5:72:9e:74:54:0e:d4:43:f2:82:
         87:b3:41:f0:62:5d:31:dd:49:cc:f3:e6:cb:65:9b:49:10:7f:
         59:09:ef:b8:63:c1:51:7a:6e:0a:62:1b:d3:cd:19:da:48:c0:
         39:24:e1:86:30:a5:7f:56:ed:12:ee:05:cf:a9:24:be:8c:cc:
         c7:bd:d6:22:32:33:c3:18:b5:95:c8:38:d9:93:bd:38:68:8f:
         05:76:d1:09:91:42:e6:f8:59:71:ab:06:ba:48:a7:79:2e:80:
         9d:f8:ac:e6:59:9d:5c:74:b2:49:98:52:f9:f4:8d:fc:e6:89:
         ee:7d:c3:76:a3:56:c2:4f:24:1a:d3:ae:52:40:38:c1:3e:82:
         bf:f8:f9:5f:af:b3:dd:31:e6:c9:a7:39:fe:ab:1e:a1:a1:b2:
         4c:07:7d:aa:c6:64:9d:53:7e:8b:a2:e0:84:d2:28:9c:5b:05:
         3f:c3:13:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:50:00 2026 by rpki-client