This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
File:                     GzWY67XR0I6w2kONBSzrqk_cdo8.mft (raw, json)
Hash identifier:          LS2L1xk7h1XrNCgyd8IJ8RJ8ODXk4hzi/aue4KbmMU0=
Subject key identifier:   66:FC:70:94:01:D4:44:17:01:1C:33:6F:C9:DB:EE:47:5D:19:CB:44
Authority key identifier: 1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F
Certificate issuer:       /CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f
Certificate serial:       019C420F2DE17A822324EF1C9DD8287DA564
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
Manifest number:          0756
Signing time:             Mon 09 Feb 2026 11:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:16 +0000
Files and hashes:         1: GzWY67XR0I6w2kONBSzrqk_cdo8.crl (hash: 0eQnV1Xur5zlJF0p6KZYu7OfST+tlu4INxQ0OpKU/UY=)
                          2: Zav8Gx3Ftvlbct-oXOibrBGZ2JM.roa (hash: 1ZAL+JjSReBWWnXXw88dwvfgMDtRJ2A88/nL1Id7fMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:2d:e1:7a:82:23:24:ef:1c:9d:d8:28:7d:a5:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f
        Validity
            Not Before: Feb  9 11:00:16 2026 GMT
            Not After : Feb 10 11:00:16 2026 GMT
        Subject: CN=66fc709401d44417011c336fc9dbee475d19cb44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fb:5c:bd:28:85:23:4d:d0:ba:08:2b:d8:d2:
                    42:b5:71:95:05:bc:3b:aa:3f:c5:d0:35:ba:41:da:
                    14:df:43:c0:92:fe:09:4f:08:86:8f:2f:b5:bf:45:
                    82:ad:96:99:2a:68:6b:48:b5:59:c6:c7:ee:ca:70:
                    64:9d:b8:3b:36:52:e0:77:a0:f9:07:d5:63:78:a2:
                    6b:0e:91:53:a9:a7:b0:58:24:5e:d7:c4:51:ce:ab:
                    e2:fb:9c:82:15:3e:5b:c5:64:75:29:78:e7:0d:02:
                    aa:b7:f6:b8:6b:80:3a:85:ff:4a:b4:7a:25:8b:23:
                    68:44:30:59:8a:24:20:04:e3:08:15:3a:76:0b:f7:
                    b8:13:c9:27:ad:c6:67:0f:3e:85:54:8a:c4:d4:22:
                    27:d0:0c:04:c3:f4:10:a0:99:a3:1f:2a:8c:f7:bf:
                    a2:e0:e8:03:8c:24:1e:46:65:fb:62:4a:39:f0:1c:
                    85:37:e0:57:a1:df:85:62:0e:94:7a:73:2c:e3:51:
                    ef:10:d5:46:14:53:c5:5c:b2:69:9b:fa:7d:0e:b1:
                    b5:ae:94:f0:0b:1b:87:e3:cf:ab:de:6d:ce:d1:e4:
                    39:5a:2f:02:06:c6:1b:8b:ee:3b:8c:e4:57:13:79:
                    1a:03:cf:e8:20:3a:4f:10:0b:9e:c7:03:0d:8e:b0:
                    41:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FC:70:94:01:D4:44:17:01:1C:33:6F:C9:DB:EE:47:5D:19:CB:44
            X509v3 Authority Key Identifier:
                keyid:1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:7f:2c:22:3b:63:f7:d6:82:1e:f0:e1:66:64:c0:ef:b6:8b:
         c8:6a:9a:72:78:a3:9c:03:18:d1:2e:40:02:db:c9:00:08:a6:
         d0:02:3b:dc:d8:2a:91:d1:eb:ed:f8:1d:5b:4d:26:af:d5:ed:
         9b:6e:87:03:49:62:71:9a:74:82:6b:c3:aa:79:2b:65:ff:bc:
         80:0c:a3:41:a4:0a:fc:ef:bd:77:6d:a0:ae:04:28:6b:e0:b6:
         1d:12:e7:c9:03:14:a4:a6:bc:2f:78:83:e7:02:3e:b7:95:2c:
         46:87:ac:0f:5c:4e:df:44:a8:6f:df:31:76:79:51:99:f2:01:
         4c:f4:4d:14:6d:c3:bd:de:9b:23:7c:f0:49:95:12:d5:ad:3e:
         60:d8:a1:53:8d:b3:12:fc:26:eb:3e:47:5e:91:7c:61:81:ae:
         89:77:9b:ee:9a:9f:d5:a1:29:e1:8e:a7:b2:ee:f0:f8:53:4e:
         ac:d5:96:79:1f:d4:82:97:95:42:45:48:e8:1e:4c:21:71:c6:
         04:d6:0a:0a:d3:98:c2:04:41:e0:5f:db:f3:17:ce:dc:02:95:
         df:79:a4:69:a5:93:c9:bd:6a:7c:c2:36:04:a1:c3:31:2b:c7:
         63:31:ac:01:bf:19:48:c0:22:3a:34:9f:46:8f:bc:99:81:fb:
         a4:ee:52:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:49 2026 by rpki-client