This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
File:                     GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft (raw, json)
Hash identifier:          bOgp4GInYOt7ybR50my6E0IdvNK1bVpZogWuAPoM/y8=
Subject key identifier:   85:4F:6D:91:ED:77:89:EE:42:94:37:D3:01:69:F0:70:48:F6:78:6E
Authority key identifier: 1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48
Certificate issuer:       /CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748
Certificate serial:       019C42EB2F15C764391AD462A4415B002D22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
Manifest number:          0B70
Signing time:             Mon 09 Feb 2026 15:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:35 +0000
Files and hashes:         1: GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl (hash: P7zH7LBeIY19F+5APdER8m0D3zDc7nCfhIZk+i2CzXc=)
                          2: xyNMPOjdSXVrOkDnqACX6hpPikY.roa (hash: GWpndT2t/1Gpwi+SLRm0phgKLCkd6P4JAMgA+uJmCIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:2f:15:c7:64:39:1a:d4:62:a4:41:5b:00:2d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748
        Validity
            Not Before: Feb  9 15:00:35 2026 GMT
            Not After : Feb 10 15:00:35 2026 GMT
        Subject: CN=854f6d91ed7789ee429437d30169f07048f6786e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:73:4e:73:69:fb:40:20:5d:43:99:32:c4:c2:
                    c7:bd:99:8c:8e:43:d5:13:fd:d3:81:d3:f2:08:5c:
                    e1:36:f2:67:4e:dd:af:76:03:86:7c:f2:8b:ca:b9:
                    2d:43:cd:55:45:11:d5:5a:19:01:12:1a:54:bd:05:
                    57:4f:83:1f:f7:1a:5b:98:f1:52:ba:45:6a:94:7f:
                    cc:ab:4f:2d:f3:1d:90:cc:1a:f6:1c:0e:1c:dd:1a:
                    52:62:c4:56:8b:e8:54:81:d1:94:b6:0d:bc:66:99:
                    55:5d:d9:5a:bb:7c:fa:e5:3f:d4:a8:64:2b:c4:77:
                    8d:ec:33:b3:22:13:5d:22:8b:89:fe:64:a6:c6:9a:
                    e8:9c:e5:c5:5e:44:b7:0a:7d:77:cb:90:3e:a9:27:
                    b1:32:b2:82:a8:ec:56:ee:0c:0b:68:54:31:1d:0c:
                    0c:b9:52:ed:c1:9e:71:91:65:9d:95:47:4c:09:db:
                    0a:17:94:18:4b:63:96:c5:f3:07:81:b6:a5:12:be:
                    f4:8f:7a:c3:a9:0c:de:f5:08:a7:ef:7c:4c:52:e0:
                    b9:d6:a4:50:2a:1a:d7:ab:a9:11:e2:b2:ac:bd:a0:
                    84:81:06:56:b4:c5:0d:6c:1e:88:49:d8:d3:cd:6d:
                    0e:11:a4:41:f3:7a:c5:67:67:91:cd:e7:df:70:51:
                    74:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4F:6D:91:ED:77:89:EE:42:94:37:D3:01:69:F0:70:48:F6:78:6E
            X509v3 Authority Key Identifier:
                keyid:1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:11:dc:1f:2b:6b:6e:f3:6a:c8:8a:2a:21:f4:3d:95:b3:65:
         c9:e4:45:6e:7d:e1:e2:7c:5e:86:d9:00:1d:95:82:78:d3:3a:
         cd:3d:3f:ac:f3:1c:86:19:30:14:ae:af:6a:e4:d5:fd:81:32:
         39:ca:fe:1b:67:ef:00:52:56:71:d3:d7:e8:e9:7a:b3:69:fd:
         9e:06:e1:70:63:c6:67:30:b6:6b:cf:8d:f9:0e:58:b1:63:4a:
         3a:0d:ba:54:96:9f:22:64:fb:c6:e3:11:fe:d8:8c:90:78:fb:
         74:99:bd:a9:20:65:c1:52:f5:cc:cc:91:d4:f9:b7:c9:36:8d:
         5f:b1:55:f8:81:f6:ba:e3:45:37:71:f5:b6:3a:8e:35:d8:e4:
         11:c2:fa:68:c9:7a:a4:4e:16:d5:cf:95:f7:3a:83:f4:57:f8:
         a5:4a:50:e1:51:6c:a7:5b:11:58:0c:f7:58:e2:7c:fa:21:77:
         da:a7:3d:51:d7:fb:2e:a7:6a:c7:af:22:e5:99:ca:12:80:39:
         cf:4b:92:0f:3e:b8:99:5a:8d:40:a7:c3:7f:0c:b2:d5:fb:0e:
         84:78:b4:65:1c:33:00:a8:a0:0b:01:91:6c:6f:bb:6b:e6:5a:
         df:12:5a:92:36:0f:4a:fd:7f:fb:ab:89:cb:03:36:84:ec:5b:
         82:b4:3e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:32 2026 by rpki-client