This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.gxt.network/repo/gxt-as44822/0/8D772C54E3D9080EA2B78E7034FD841B6757CD44.mft
File:                     8D772C54E3D9080EA2B78E7034FD841B6757CD44.mft (raw, json)
Hash identifier:          ap50GhplFJIah8pgMtKYOvTM61igjAQbsCH4b/jweMo=
Subject key identifier:   5D:0E:6C:DD:09:C0:C0:7A:90:52:72:39:8D:1B:68:E5:6E:24:D3:35
Authority key identifier: 8D:77:2C:54:E3:D9:08:0E:A2:B7:8E:70:34:FD:84:1B:67:57:CD:44
Certificate issuer:       /CN=8d772c54e3d9080ea2b78e7034fd841b6757cd44
Certificate serial:       6695911B1500C94B32E2D7F909630104D32978B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jXcsVOPZCA6it45wNP2EG2dXzUQ.cer
Subject info access:      rsync://rpki.gxt.network/repo/gxt-as44822/0/8D772C54E3D9080EA2B78E7034FD841B6757CD44.mft
Manifest number:          2A
Signing time:             Sat 06 Dec 2025 00:07:59 +0000
Manifest this update:     Sat 06 Dec 2025 00:02:59 +0000
Manifest next update:     Sun 07 Dec 2025 02:31:59 +0000
Files and hashes:         1: 8D772C54E3D9080EA2B78E7034FD841B6757CD44.crl (hash: XuWCfdoU/7Ng+KUy36Fg4E70dAtYJAD6zPKUBtGqoEA=)
Validation:               OK
Signature path:           rsync://rpki.gxt.network/repo/gxt-as44822/0/8D772C54E3D9080EA2B78E7034FD841B6757CD44.crl
                          rsync://rpki.gxt.network/repo/gxt-as44822/0/8D772C54E3D9080EA2B78E7034FD841B6757CD44.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jXcsVOPZCA6it45wNP2EG2dXzUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:95:91:1b:15:00:c9:4b:32:e2:d7:f9:09:63:01:04:d3:29:78:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d772c54e3d9080ea2b78e7034fd841b6757cd44
        Validity
            Not Before: Dec  6 00:02:59 2025 GMT
            Not After : Dec  7 02:31:59 2025 GMT
        Subject: CN=5D0E6CDD09C0C07A905272398D1B68E56E24D335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0d:b9:da:85:07:95:01:f5:af:a0:2d:30:66:
                    8f:e9:29:92:67:37:92:ca:82:a1:33:9c:f9:b2:1f:
                    68:f2:47:d2:5c:fe:ba:ce:02:02:58:1d:37:c9:b6:
                    f6:51:7c:75:b1:de:58:19:30:46:5b:a9:1b:83:d1:
                    21:e9:03:5f:dc:96:0b:09:8b:9d:ef:70:39:22:b4:
                    d1:38:72:63:b7:09:d4:d5:c8:19:89:c3:f8:1c:be:
                    22:7c:84:75:ca:6e:cb:3f:aa:5d:0e:97:f4:1d:fd:
                    1a:96:c6:45:43:cc:ec:0b:ed:fd:b0:bb:ab:8e:f0:
                    40:ad:96:b5:48:89:06:fa:50:4a:6c:b6:df:64:89:
                    fb:8d:16:89:88:9e:0a:ca:29:3d:26:8f:ad:11:af:
                    cd:76:bb:8f:87:a3:55:8a:1a:f5:63:7e:73:c1:43:
                    79:5f:c3:d1:35:06:6c:82:03:a0:1f:52:fb:bb:be:
                    15:c2:17:ab:cf:76:8e:15:d9:36:1c:82:e6:55:c9:
                    60:ad:54:9b:1f:95:6a:f1:56:9b:61:b0:fa:5a:15:
                    eb:75:f9:44:98:5a:0b:04:33:c0:d2:2b:30:b2:df:
                    40:ae:ad:01:ff:36:21:e1:9c:ca:53:fc:41:89:1a:
                    6e:35:46:ac:c5:1b:fd:93:c5:38:1c:69:20:00:09:
                    52:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0E:6C:DD:09:C0:C0:7A:90:52:72:39:8D:1B:68:E5:6E:24:D3:35
            X509v3 Authority Key Identifier:
                keyid:8D:77:2C:54:E3:D9:08:0E:A2:B7:8E:70:34:FD:84:1B:67:57:CD:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.gxt.network/repo/gxt-as44822/0/8D772C54E3D9080EA2B78E7034FD841B6757CD44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXcsVOPZCA6it45wNP2EG2dXzUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.gxt.network/repo/gxt-as44822/0/8D772C54E3D9080EA2B78E7034FD841B6757CD44.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ad:f9:f4:34:07:c3:90:47:54:88:50:31:82:ba:76:90:d4:
         84:37:29:45:0e:02:d5:35:e1:f2:39:c9:84:ff:e0:ce:87:f3:
         8e:92:5b:6e:40:e7:1f:4d:9a:22:2d:df:91:90:74:2d:55:34:
         89:da:d3:1a:05:db:99:81:f2:85:c2:f9:0f:e5:be:d8:9c:33:
         5b:34:4d:18:52:43:67:c3:95:57:c5:f6:52:92:9d:46:62:07:
         20:be:6b:80:0c:d4:8f:21:57:34:16:c7:10:82:84:aa:1c:81:
         dc:f9:77:f8:74:3a:96:fa:9e:a9:13:23:19:01:5b:96:c5:28:
         5f:be:a5:e6:83:8b:55:64:f1:70:ea:0a:f8:dc:04:ef:4c:3c:
         66:f6:aa:2d:51:b2:a5:1b:c5:85:13:ea:35:6d:00:cf:e2:ad:
         3e:aa:91:c0:fb:2b:21:3f:66:9c:a3:81:ef:e5:8a:2c:b5:24:
         3d:b9:2c:46:42:91:3d:47:25:b4:fa:85:e1:24:e5:da:6e:5d:
         06:79:04:9a:7e:0d:51:17:d3:de:a9:48:bd:17:4d:0e:48:de:
         dd:1d:36:1c:35:d0:8a:d2:2d:13:ab:d8:45:20:1a:5e:4e:d6:
         4b:f1:af:fe:a6:3b:b8:04:07:7f:38:46:ed:f4:00:15:3f:72:
         a4:34:3d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:16:27 2025 by rpki-client