This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
File:                     GCJVGHajpiZZn0Z8eucJuBwU30k.mft (raw, json)
Hash identifier:          C0uylPJiuWZKAgkNCUILxkO+78YalJ4NgvnG6b/1uQs=
Subject key identifier:   E3:69:B8:9C:6A:67:A7:0E:E3:60:00:85:DA:F3:DC:98:C2:82:14:05
Authority key identifier: 18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49
Certificate issuer:       /CN=1822551876a3a626599f467c7ae709b81c14df49
Certificate serial:       019BF499A5C0A5F3F2A27C9FB16D077E8CA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
Manifest number:          1043
Signing time:             Sun 25 Jan 2026 10:01:08 +0000
Manifest this update:     Sun 25 Jan 2026 10:01:08 +0000
Manifest next update:     Mon 26 Jan 2026 10:01:08 +0000
Files and hashes:         1: 8T_L6iEGijgsOFAP__TyTkzacD4.roa (hash: lT4gyxVqqODirySdjQ4sbRLQmQNb+GEiL/V4cJzYViM=)
                          2: GCJVGHajpiZZn0Z8eucJuBwU30k.crl (hash: eVfxj3j7gwaJChJBVPNfkzArpRGXkvzyZy3Ql6nAcM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 10:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:a5:c0:a5:f3:f2:a2:7c:9f:b1:6d:07:7e:8c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1822551876a3a626599f467c7ae709b81c14df49
        Validity
            Not Before: Jan 25 10:01:08 2026 GMT
            Not After : Jan 26 10:01:08 2026 GMT
        Subject: CN=e369b89c6a67a70ee3600085daf3dc98c2821405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ce:0a:74:af:69:50:14:87:20:38:f1:82:e1:
                    1d:eb:b1:4d:2b:47:29:50:aa:11:5a:2b:c1:e1:29:
                    0b:62:f0:e5:f8:59:e5:46:0a:71:f8:db:ff:53:3c:
                    94:5f:7a:77:22:3b:e4:68:08:0e:6a:43:d9:0b:b5:
                    b6:bf:02:79:ab:da:95:92:de:27:47:ad:7a:32:63:
                    b1:0f:c4:75:27:ef:89:05:3e:24:b3:7d:04:b1:2b:
                    d4:66:c8:be:dd:b1:35:8f:4b:d5:bc:e3:07:05:4e:
                    77:da:f8:aa:4a:68:ff:7f:90:63:25:8e:cc:e4:45:
                    d9:52:b5:02:73:ec:44:2d:d0:61:ce:01:c9:fc:86:
                    3b:c6:a5:cb:ad:cd:10:06:61:e8:d4:89:89:40:9f:
                    b3:39:43:18:bb:d2:a7:54:46:27:82:5c:b0:6c:7e:
                    09:74:e1:2c:7f:d1:da:de:6b:9e:07:2d:49:2c:3d:
                    b1:a9:69:01:31:af:aa:a4:ad:da:f3:79:8c:70:85:
                    26:95:84:29:9e:54:33:3d:cb:dd:b8:cc:90:77:7c:
                    76:4a:da:f9:4d:48:91:20:24:64:c9:5a:ad:ac:26:
                    07:dd:d8:10:c6:39:47:ed:29:d3:6b:29:f0:47:7a:
                    f3:d7:02:94:cc:04:34:1e:a0:8e:af:c4:86:4d:0f:
                    cf:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:69:B8:9C:6A:67:A7:0E:E3:60:00:85:DA:F3:DC:98:C2:82:14:05
            X509v3 Authority Key Identifier:
                keyid:18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:98:c0:16:d2:24:3c:e5:b8:25:22:fe:da:ef:a1:6a:38:87:
         cb:2a:07:79:8b:4f:d7:19:96:17:d1:2a:5c:49:04:8e:12:9c:
         f5:60:a5:d9:5f:7c:1d:df:26:e9:37:06:15:d4:d6:15:38:bd:
         d7:66:2f:8c:b6:a1:38:2c:f9:ac:53:06:d9:6d:00:41:bc:85:
         30:56:71:17:e3:fd:4a:31:dd:20:5b:f4:4e:c2:6a:0e:45:2b:
         dd:a6:6c:3b:52:f2:c5:b9:d5:d1:24:f6:7f:bf:94:27:30:76:
         f0:33:f6:e5:db:23:b7:b2:8f:9d:24:93:75:92:c2:0a:a4:22:
         91:9b:2c:93:b6:ce:be:7b:fc:e3:f0:81:fd:bf:bb:41:b5:d9:
         52:b5:6b:2c:6a:42:a0:77:19:7a:95:0f:61:89:dd:5c:c3:aa:
         39:42:cb:b5:5b:ab:3f:79:0f:d5:e8:10:d7:61:c0:ff:a8:ff:
         1d:b2:ad:8c:43:2d:4a:8f:62:8d:c9:10:14:13:be:30:21:bd:
         9a:0c:a5:79:49:8a:18:55:b1:ca:71:e9:53:4a:ff:63:f2:b3:
         48:05:f1:cb:4a:21:9a:50:58:ae:82:f2:8b:3e:1d:ec:8c:f8:
         a5:55:e7:df:f7:ae:71:a2:1b:cd:2a:ad:82:4d:2f:98:63:8d:
         14:d4:a6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:24:35 2026 by rpki-client