This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
File:                     gseGJ3lOh_-XGNsbDffu4u2zNZU.mft (raw, json)
Hash identifier:          Gn8YP5pSHtyx9zWIiDYyheDObr3NmsCNp+1tPtBl9+w=
Subject key identifier:   52:A9:46:9B:F4:CD:BC:7C:38:7D:48:2B:79:7B:3E:80:3D:0A:CC:72
Authority key identifier: 82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
Certificate issuer:       /CN=82c78627794e87ff9718db1b0df7eee2edb33595
Certificate serial:       019C42466446A86075C210E809F3B8A08C01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
Manifest number:          1434
Signing time:             Mon 09 Feb 2026 12:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:35 +0000
Files and hashes:         1: 32XVVyKt3ZJBnx5kqWWCO02zJAA.roa (hash: 3DDnAdyDbtTrETxx+GoP22rNSd7sG+VR15SajuKvXIs=)
                          2: gseGJ3lOh_-XGNsbDffu4u2zNZU.crl (hash: 1SOsQ00+5qIrIETz28v8iopb2aR6OLjULbSjjpddD80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:64:46:a8:60:75:c2:10:e8:09:f3:b8:a0:8c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82c78627794e87ff9718db1b0df7eee2edb33595
        Validity
            Not Before: Feb  9 12:00:35 2026 GMT
            Not After : Feb 10 12:00:35 2026 GMT
        Subject: CN=52a9469bf4cdbc7c387d482b797b3e803d0acc72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b1:22:1c:fb:2f:7e:b3:0a:83:77:83:51:a7:
                    d8:88:17:21:04:ff:8f:d1:9f:3d:30:31:f6:8d:88:
                    96:8d:a4:f7:47:27:9f:ff:35:b4:ff:19:d0:bc:00:
                    e3:61:26:fa:ee:79:82:9d:07:35:dc:58:38:95:28:
                    4a:fd:ad:1f:8a:74:6b:79:d8:0d:42:ca:87:d2:fb:
                    42:f4:33:8e:62:bc:bb:ce:0b:f3:ca:76:f9:be:74:
                    51:b0:cb:40:59:10:bb:56:93:dc:ac:12:3c:d8:a9:
                    3c:9a:6f:4b:6f:90:8c:c8:a7:c8:95:57:75:bf:0f:
                    f8:49:e8:13:63:7a:e7:21:01:7b:a0:43:db:d0:db:
                    84:1f:46:80:4f:24:62:67:41:74:e5:02:9b:3e:9a:
                    9e:f9:00:97:f1:55:1f:f3:12:31:f1:c6:f1:d8:38:
                    6e:ee:48:92:a4:20:b5:96:7c:cc:06:f6:9e:50:0c:
                    4e:17:72:b2:17:d4:be:2e:7e:9b:dd:18:23:5b:0d:
                    53:c3:79:04:f8:34:63:08:99:f7:35:b0:69:6a:39:
                    1b:35:05:b9:12:64:29:e5:d4:cc:3d:5e:d5:3b:44:
                    0c:c9:04:8a:37:01:e8:40:0c:6a:13:b9:a3:35:f8:
                    a3:2c:3d:a7:8b:87:14:b6:be:28:5f:f5:ee:2c:82:
                    0d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A9:46:9B:F4:CD:BC:7C:38:7D:48:2B:79:7B:3E:80:3D:0A:CC:72
            X509v3 Authority Key Identifier:
                keyid:82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:7a:ff:1e:ad:9b:02:ba:6b:64:fd:52:af:b9:5c:5e:86:39:
         0b:8f:05:cb:a8:e0:02:bf:08:16:38:9f:fc:a9:4b:bb:88:3c:
         5f:bd:b5:79:0d:9c:76:da:fd:60:cf:d5:cc:36:77:24:36:d1:
         1d:b6:72:95:68:8e:28:68:46:c5:4f:f8:70:48:36:63:07:f5:
         8c:01:b9:90:c8:b7:09:fa:f3:08:8e:11:54:60:f7:0c:7d:6c:
         12:d2:10:9e:c2:09:fb:bc:05:a7:8e:67:45:6b:a4:82:a6:a1:
         a2:ab:6e:e4:f3:35:d2:7b:ef:5e:8f:7d:03:cf:45:e7:88:42:
         dc:8a:a6:32:3b:40:9f:c8:3b:e6:19:20:62:59:bb:84:70:9f:
         87:e2:4a:09:e1:0e:bb:f4:2b:c4:cf:c9:39:4a:8c:1c:0d:81:
         85:e9:51:1a:ae:9f:10:82:03:64:ce:2a:8b:be:de:32:be:7e:
         d6:58:e0:ba:16:de:57:51:5f:8d:a7:df:b2:18:54:e6:4d:1b:
         85:e2:ff:bc:d6:b5:37:57:96:d8:0b:d6:87:d1:7e:7d:bc:3f:
         0e:68:79:04:ff:38:fb:0b:07:32:c2:42:e4:db:4f:c7:34:dc:
         f9:02:6e:57:51:71:30:da:31:aa:32:ec:76:fa:10:10:3b:44:
         7d:55:bd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:02 2026 by rpki-client