This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
File:                     GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft (raw, json)
Hash identifier:          yWEOvm30CByw2/eHR92prkQ6R7pO8/XZdoMWYecKoxM=
Subject key identifier:   E1:CF:BE:36:23:EA:4D:BF:A3:25:FF:2D:12:A0:DF:D9:B4:DC:00:6F
Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
Certificate issuer:       /CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Certificate serial:       019C1F4CD67B321CC280AC11B545D9BD5D2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
Manifest number:          1804
Signing time:             Mon 02 Feb 2026 17:00:55 +0000
Manifest this update:     Mon 02 Feb 2026 17:00:55 +0000
Manifest next update:     Tue 03 Feb 2026 17:00:55 +0000
Files and hashes:         1: 2OlXrMHEGCGdCIkFH9DwRH8m-_Y.roa (hash: EyDlhcGNJI5g7xCKKg+SLdnpu6y3b/Owb67XHcNo4LM=)
                          2: GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl (hash: z8M6pqk+MYB8r9oXsI4ZHTFhrd5hdNYexcwDppvE4zU=)
                          3: frVqf7Qb9l_BsfQariFSVHz8ob4.roa (hash: YJglM4AaABJW1ebpCVy7ykfzKfkx+c4T33VsT0DyZ/M=)
                          4: lfErVfdcsg1i7vmEMxFgsv4bocY.roa (hash: 8hpg8Z6qBYfbCxzlnCltHugOjct8isyofGtd0CKT8v8=)
                          5: xoTCt08cS7BgB_IaDphUNXFIRxo.roa (hash: s3xQf9aSy+8qTNIu1cEAABJrY28zwSkcrisFpnI+ffU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 15:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1f:4c:d6:7b:32:1c:c2:80:ac:11:b5:45:d9:bd:5d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd
        Validity
            Not Before: Feb  2 17:00:55 2026 GMT
            Not After : Feb  3 17:00:55 2026 GMT
        Subject: CN=e1cfbe3623ea4dbfa325ff2d12a0dfd9b4dc006f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f5:b1:50:f3:60:ba:54:f6:94:1d:d5:0f:2c:
                    9f:63:5d:7b:ec:1c:7f:c7:25:ab:b4:f9:4c:ca:f2:
                    be:ab:69:6f:2c:bc:79:c9:da:82:86:01:fe:cd:b7:
                    36:7e:63:77:33:fe:12:4f:59:7b:16:1c:1f:f9:f2:
                    a8:1f:52:c5:59:df:ee:d6:86:78:90:b7:9d:76:c4:
                    7d:09:a2:6b:c5:fd:93:95:ac:13:04:c1:62:25:e7:
                    4a:f6:af:7d:bf:2c:e9:1e:8c:9f:31:33:94:92:03:
                    86:83:dd:a4:ba:4a:04:df:a7:00:3f:ae:10:80:1c:
                    75:e1:d5:77:e7:92:a7:a0:5b:8e:66:1a:96:9c:09:
                    b9:b0:d4:7a:c4:54:e1:b6:bc:59:d1:81:18:df:5c:
                    38:d0:40:cf:e8:0f:02:fb:11:c7:2b:eb:f4:ab:98:
                    2d:98:24:3a:fb:e0:c1:03:15:db:c3:f6:d4:81:62:
                    ed:fa:c9:8b:28:0b:f0:36:c1:90:fd:4a:c2:8b:89:
                    2a:2a:a0:e8:1c:a2:6d:b3:39:0c:ae:e8:68:4f:0d:
                    18:94:32:09:13:19:a9:da:69:39:cb:2a:8c:ff:28:
                    1c:8a:84:01:7e:d3:5f:5c:82:80:04:4a:99:61:9b:
                    e3:29:4d:04:5b:26:ab:10:8b:9d:9c:ff:f1:08:a2:
                    8a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CF:BE:36:23:EA:4D:BF:A3:25:FF:2D:12:A0:DF:D9:B4:DC:00:6F
            X509v3 Authority Key Identifier:
                keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:5f:bb:56:c5:f5:04:0f:ea:91:3c:b8:59:75:16:bb:6c:f8:
         f8:59:57:96:3d:68:cf:ab:9f:58:a3:de:8b:6e:6c:ed:26:2b:
         11:86:55:ec:34:46:03:8f:10:0f:20:e8:47:22:f3:7d:4c:7b:
         cc:d4:df:28:5d:b4:8a:4c:1a:ff:a9:2c:83:3a:bd:8c:86:71:
         55:22:cc:e5:66:a5:b9:8c:fa:b4:7b:76:18:61:fb:a0:bd:de:
         6d:11:86:17:f5:f9:47:68:61:22:9d:b2:20:b4:fb:2e:74:cb:
         f8:4b:47:28:af:58:5f:f9:2c:5a:de:82:d1:29:0e:7a:08:34:
         d0:18:30:ca:8e:f6:23:66:76:b3:24:dc:cf:6b:a0:5b:ec:79:
         bd:5b:f8:eb:d8:ad:44:3f:c6:81:16:e9:15:1d:74:44:28:a9:
         2c:57:be:f1:5d:af:bf:37:12:2f:ed:3a:e9:ce:e1:3a:2c:b0:
         7f:78:fe:85:19:ba:d2:e3:85:0c:f9:2b:bd:91:95:c0:f8:8b:
         91:4c:f1:df:34:41:3b:8c:ac:08:a3:22:22:9e:15:d3:73:63:
         ec:77:c6:be:31:e6:c9:81:13:28:60:64:ed:35:ad:4b:62:c6:
         fc:0b:cf:91:50:ee:d9:0d:cd:b9:90:aa:40:df:77:45:81:46:
         11:6b:8e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 00:33:10 2026 by rpki-client