This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
File:                     GoPORK5McB6pcdM036u8WyjmR24.mft (raw, json)
Hash identifier:          Qv7ZkkGbyksgpC8RpQGR/cMfzfhwQAHx395D/X6ZqXE=
Subject key identifier:   BD:97:C2:0D:47:F6:46:02:18:8D:CF:EB:09:EC:A0:A0:A5:75:E6:30
Authority key identifier: 1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E
Certificate issuer:       /CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
Certificate serial:       019BF4D0E6B8A6F5A2986581309F5C2802FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
Manifest number:          1039
Signing time:             Sun 25 Jan 2026 11:01:29 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:29 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:29 +0000
Files and hashes:         1: GoPORK5McB6pcdM036u8WyjmR24.crl (hash: 3HI39RnnB9Tcxd8crhPHrUZhUjj7tP/Bp5wf1lARyns=)
                          2: e7GASbeCgANWz5iegzo-dHYfZVM.roa (hash: l9HQNVcMldPVoQboUzC9kltlmdqxfM4f7etmfeKvc9E=)
                          3: l1XA1WxDomG_I7YpojfGXMLSADs.roa (hash: 5XkhMqZeEKAmgMdjJ9L6nB7pdTZD72Q0VcYVhIxf4rk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:e6:b8:a6:f5:a2:98:65:81:30:9f:5c:28:02:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
        Validity
            Not Before: Jan 25 11:01:29 2026 GMT
            Not After : Jan 26 11:01:29 2026 GMT
        Subject: CN=bd97c20d47f64602188dcfeb09eca0a0a575e630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3c:13:a2:e5:9e:4e:a2:55:5f:62:55:25:1a:
                    95:af:ad:e8:80:bb:c0:6c:ca:48:8d:82:06:f2:70:
                    04:e8:5e:1e:07:60:c3:8d:9d:5b:3c:aa:9f:f1:a7:
                    e2:0f:2e:6c:20:7c:40:f3:ab:84:22:fd:92:f7:02:
                    e4:9d:88:6d:ed:e8:4b:c8:bc:8f:ee:3b:34:12:68:
                    57:68:9e:ee:df:3d:48:ed:52:82:2e:63:1e:5e:60:
                    d3:27:40:74:42:ea:ea:3c:76:94:cb:76:aa:17:4a:
                    d6:15:b7:48:ea:28:74:66:9d:3e:53:3d:c9:cb:80:
                    e2:4f:87:ce:b1:8d:c8:26:79:e1:4f:f8:c2:f0:ad:
                    81:92:9d:9f:fe:b6:51:c0:4e:3c:2a:4c:e5:83:8d:
                    ac:a8:8f:41:f1:b0:1f:69:ac:40:a7:59:e2:2d:16:
                    8b:df:01:9f:52:0d:6c:f2:28:d0:c1:6a:38:0c:3c:
                    ec:df:3e:76:0a:ee:d9:1a:c5:45:78:f9:34:d1:d1:
                    96:44:ac:57:72:99:39:e2:13:5b:20:54:88:79:4f:
                    d3:77:b0:d0:ce:34:c8:2e:3f:fb:cc:ba:ed:60:1a:
                    5f:de:f5:69:4e:00:b9:d6:25:69:0b:0f:8d:5b:ee:
                    e7:0f:1b:94:82:54:ea:64:77:ab:a2:4a:e8:f7:8b:
                    33:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:97:C2:0D:47:F6:46:02:18:8D:CF:EB:09:EC:A0:A0:A5:75:E6:30
            X509v3 Authority Key Identifier:
                keyid:1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:4d:0b:a7:f8:89:37:5e:0e:8e:8e:db:82:50:a0:c4:17:38:
         c6:56:52:36:b1:a1:d9:80:28:38:78:5b:2a:9c:8f:27:82:e1:
         d3:0b:2e:07:c3:68:db:b4:60:39:a5:41:e0:00:6c:e8:e9:64:
         3c:a9:ce:1d:1a:d8:fc:0d:72:c9:20:e1:64:7e:52:fc:e2:63:
         03:3a:98:44:5a:4b:ba:a5:0e:10:a7:79:19:49:c4:51:03:6b:
         86:54:72:36:82:6a:88:91:fa:01:34:3a:f7:46:97:12:00:d1:
         b5:97:01:35:a0:e5:1f:7b:25:64:41:08:86:50:08:e6:cf:8e:
         93:d9:ec:35:93:5b:fc:bd:ca:ba:3d:ee:4f:b6:ba:75:79:b4:
         17:42:3a:0c:3c:46:d6:60:42:e3:e1:c5:15:5e:5e:4d:ad:5e:
         f3:8c:37:bc:ec:bd:97:50:a5:1d:ab:0d:5e:a4:45:81:d7:05:
         1b:04:e4:2e:c9:7d:c6:b7:fd:76:ef:33:66:9d:19:24:b7:71:
         29:9e:cc:ea:19:59:25:20:e3:ac:65:cd:45:fe:14:c2:da:f5:
         0c:0f:76:f0:47:44:13:a9:3c:ee:57:89:2b:7c:f5:be:7b:4a:
         2a:bf:e0:07:31:38:66:ec:75:fc:e2:6c:cc:76:63:2e:96:02:
         65:28:a8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:15:05 2026 by rpki-client