This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
File:                     GbLh_EALv53LIGat49v-XJ6rLn0.mft (raw, json)
Hash identifier:          QjRysTRF+jKESQ/uzPBSqG2PRtqrnm3tR2Y3LoPbGek=
Subject key identifier:   44:E5:1F:6C:87:A5:2B:E3:91:85:F0:4D:CE:E1:0E:8F:A1:B9:CB:46
Authority key identifier: 19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
Certificate issuer:       /CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Certificate serial:       019C41D8C4C0626CB3C339739C408BF22F23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
Manifest number:          10E7
Signing time:             Mon 09 Feb 2026 10:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:50 +0000
Files and hashes:         1: GbLh_EALv53LIGat49v-XJ6rLn0.crl (hash: /1nbJUwvh9ezHhH9ZeH8G6u6phFtVK1JmimKBQWWvd8=)
                          2: ePI6xD2cfu7fzAdug0Km--LXZXw.roa (hash: A5otAx8dQYDetFTAWi3ze+gQMQ2WC4fRm0x+IwV20E0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:c4:c0:62:6c:b3:c3:39:73:9c:40:8b:f2:2f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
        Validity
            Not Before: Feb  9 10:00:50 2026 GMT
            Not After : Feb 10 10:00:50 2026 GMT
        Subject: CN=44e51f6c87a52be39185f04dcee10e8fa1b9cb46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:39:7b:66:f7:67:c7:df:2a:c3:c8:e3:33:e0:
                    15:2f:be:28:ab:4d:37:0a:a0:11:05:23:e0:b2:f7:
                    6a:79:3a:e2:1f:2d:72:c4:9c:e4:7c:58:6f:53:1f:
                    91:88:5c:b3:21:74:7a:43:35:e9:d4:5a:1f:1a:d1:
                    4a:15:99:6e:e5:b6:76:c5:10:48:08:3c:a4:1c:4c:
                    fc:50:11:82:37:67:1b:4b:39:7c:1b:be:22:f8:ae:
                    c8:10:c3:7a:d3:58:92:82:2c:09:c9:7d:98:da:8b:
                    51:31:8d:b2:5e:37:4b:b9:f9:5e:ed:25:07:6e:a8:
                    91:75:cb:fd:e3:7f:c3:2e:e1:44:84:62:fa:b2:59:
                    c2:06:31:59:b2:5c:7e:c4:3d:2a:78:4e:96:19:04:
                    64:3c:23:a3:13:bc:71:2b:15:8c:f8:3a:8d:31:a2:
                    7a:01:ce:a7:7a:de:1b:e3:ef:a6:72:68:f0:39:bb:
                    8a:e5:e8:3f:c6:ca:9b:8c:a8:06:32:59:53:ff:aa:
                    59:c2:a2:1d:97:4a:6c:96:7b:94:f6:83:dc:89:69:
                    90:45:ac:82:1d:ea:b2:e7:31:9b:10:df:4f:18:17:
                    80:f6:8f:7c:b2:b1:f6:78:a2:ed:92:c3:13:f1:1e:
                    5b:2f:4a:1a:82:8e:15:01:e6:87:ea:c8:43:66:67:
                    5b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E5:1F:6C:87:A5:2B:E3:91:85:F0:4D:CE:E1:0E:8F:A1:B9:CB:46
            X509v3 Authority Key Identifier:
                keyid:19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a8:6b:cf:b5:70:40:a6:11:a0:ca:f2:6c:47:17:eb:2c:61:
         ec:83:4c:62:94:09:b3:96:4a:e1:db:01:5c:e4:4a:51:0f:e4:
         21:20:3a:ed:c3:31:83:2d:9c:3a:09:44:f2:a6:ba:9c:07:a6:
         a4:c9:ff:db:f2:a8:3d:7f:e2:4b:76:5c:94:28:27:c7:8b:2b:
         3c:41:ca:12:75:34:3a:9c:82:bf:d8:c0:0c:1b:7c:d3:52:a1:
         9d:6b:67:af:85:ad:ff:f7:4f:65:9b:1c:be:c9:4b:73:30:1c:
         d7:bc:eb:10:18:ad:46:89:45:48:9b:90:d4:93:e2:a5:63:94:
         f9:df:2d:25:09:11:ef:3a:01:b1:6f:9d:27:6e:cb:34:ae:b8:
         5a:27:a1:80:01:5d:cc:70:48:ba:76:b6:61:b3:22:d5:3b:5e:
         92:e4:76:89:f9:94:28:f3:1b:01:1e:8f:e5:15:65:f7:1b:0d:
         35:72:38:40:16:91:5a:8a:10:8e:12:3e:a0:55:7c:f0:b2:ba:
         46:fa:9a:72:1f:0d:c5:d1:a3:32:58:e2:f7:80:ac:72:64:7d:
         59:29:9a:01:e5:e4:a3:82:49:ab:55:af:79:26:9c:e3:55:7c:
         cf:31:ac:f4:00:49:95:46:29:24:9d:98:49:17:d9:1c:12:a1:
         54:e0:ff:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:33 2026 by rpki-client