This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft
File:                     9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft (raw, json)
Hash identifier:          JlS8wdMwoMJd7xZNYCixsNILr7QccAIk6pmkFAHjlKQ=
Subject key identifier:   D3:47:B4:73:A4:DD:AF:96:B7:4A:F5:42:B4:8C:35:C5:28:79:6A:02
Authority key identifier: 94:95:A8:16:26:FC:F6:E7:9C:AF:B0:FC:72:66:C5:A7:70:B4:57:F3
Certificate issuer:       /CN=9495A81626FCF6E79CAFB0FC7266C5A770B457F3
Certificate serial:       0A01B15730045A22DA1CD5F9E8C1D6E296310395
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.cer
Subject info access:      rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft
Manifest number:          2A
Signing time:             Sat 06 Dec 2025 02:53:00 +0000
Manifest this update:     Sat 06 Dec 2025 02:48:00 +0000
Manifest next update:     Sun 07 Dec 2025 05:00:00 +0000
Files and hashes:         1: 326131343a373538303a336666643a3a2f34382d3438203d3e203434383232.roa (hash: B+B2Yl/O36Gn5Y+oNxHVV8LhWuDlCy4ZF9J305MP6uY=)
                          2: 326131343a373538303a336666653a3a2f34382d3438203d3e203434383232.roa (hash: fOomgPnkxPgBzURmASJKUZ+RYP9k6NrKcBNGVrv8WMY=)
                          3: 9495A81626FCF6E79CAFB0FC7266C5A770B457F3.crl (hash: 4YgUwRAOTQ0MLisD2RO0JVNS8sylx6w6HZlG9BpdYAU=)
                          4: 326131343a373538303a336666663a3a2f34382d3438203d3e203434383232.roa (hash: Kicy9HxyZzEtWNVt6uGQnpFMpN2VWc9gbNotwWywYxs=)
Validation:               OK
Signature path:           rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.crl
                          rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:01:b1:57:30:04:5a:22:da:1c:d5:f9:e8:c1:d6:e2:96:31:03:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9495A81626FCF6E79CAFB0FC7266C5A770B457F3
        Validity
            Not Before: Dec  6 02:48:00 2025 GMT
            Not After : Dec  7 05:00:00 2025 GMT
        Subject: CN=D347B473A4DDAF96B74AF542B48C35C528796A02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:50:21:0e:f8:01:dd:b4:99:1f:a7:09:5b:08:
                    71:c9:0c:03:34:0d:af:14:d7:0f:5d:ce:22:71:eb:
                    1a:a2:0a:b6:c0:9c:13:b4:d3:32:fe:3e:a7:31:4a:
                    92:34:5f:6b:49:6c:55:0d:50:94:ff:2f:c8:62:7e:
                    a8:65:1e:15:89:24:2b:ce:a2:43:cc:43:3d:a1:d9:
                    32:6a:8b:8f:f3:62:f9:a1:80:97:fa:ad:29:52:74:
                    5b:7d:ca:30:34:e7:0b:df:80:31:12:fe:56:cd:33:
                    5c:61:bc:39:6b:ae:b4:56:49:59:a7:62:e2:b0:d3:
                    59:78:84:6b:97:f2:32:c8:e3:ff:44:f8:03:05:2b:
                    cc:c0:85:71:fa:df:6c:ed:23:42:3c:e1:8e:f6:ee:
                    05:f4:cc:f0:a9:0c:08:16:80:f7:05:73:78:ff:42:
                    35:5e:52:99:4a:bb:64:39:67:25:02:e2:6e:52:37:
                    b8:4e:38:86:98:d0:94:ca:19:83:6b:4d:fe:b3:74:
                    a2:43:32:6b:6c:9f:31:87:41:da:c5:6c:73:92:6c:
                    44:57:43:0f:00:12:2e:12:68:d9:aa:23:19:d2:d1:
                    32:de:a7:b2:52:6a:9c:71:26:6e:a6:97:ea:39:28:
                    f5:6e:e1:ef:8a:f6:24:b2:7d:ea:13:fe:96:bf:01:
                    91:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:47:B4:73:A4:DD:AF:96:B7:4A:F5:42:B4:8C:35:C5:28:79:6A:02
            X509v3 Authority Key Identifier:
                keyid:94:95:A8:16:26:FC:F6:E7:9C:AF:B0:FC:72:66:C5:A7:70:B4:57:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:34:27:09:32:0f:df:e5:1c:22:1b:f4:b4:42:9f:d1:95:04:
         41:b1:1f:24:de:3d:88:29:e9:43:5a:fa:f5:65:3f:e5:6a:ca:
         56:64:5f:be:82:b8:46:d2:f3:e4:fe:b2:de:5f:27:1e:23:9b:
         8b:10:b9:68:26:31:ee:6f:b7:70:27:79:05:d9:b3:71:27:47:
         2c:e1:60:34:63:0e:bf:84:09:57:2b:d5:08:34:9c:b4:2d:a6:
         0c:da:39:ad:b2:95:cb:18:67:8c:37:54:9a:3f:10:8b:d6:24:
         09:49:b7:e4:7d:fa:eb:b3:ea:6f:86:4c:36:d8:91:d7:2f:e1:
         57:aa:1b:08:b1:5f:2b:5c:44:c6:6e:5e:d5:cd:2a:a0:42:7e:
         94:f6:5f:6c:dd:1e:67:cd:db:4b:2f:b2:e9:ed:55:f1:d1:93:
         c0:1c:c2:8e:66:92:98:07:f0:cf:b7:f6:e4:22:42:68:b6:86:
         9c:8e:ff:02:61:e6:32:ff:ff:b2:5e:df:23:02:13:4e:b7:f9:
         18:b6:12:fb:2e:b4:38:f0:df:c4:f1:77:7f:6d:58:27:75:ba:
         8f:06:6c:0b:e7:ea:68:53:0d:a8:22:14:60:05:13:52:03:91:
         df:dd:d4:13:46:b5:a8:72:ab:7c:17:2c:23:5f:7e:1d:fc:ca:
         2b:b9:52:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:31:08 2025 by rpki-client