This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
File:                     g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft (raw, json)
Hash identifier:          4Jxjea7bv9PpwD5ed46BLZbtPowo2sLYkggjpC4YtGw=
Subject key identifier:   D5:69:B2:85:2D:7F:A1:A0:96:77:40:92:36:91:55:7A:C1:2E:AC:C8
Authority key identifier: 83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
Certificate issuer:       /CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Certificate serial:       019BF7635458FD1FB4A2A3C7134B1621C010
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
Manifest number:          0884
Signing time:             Sun 25 Jan 2026 23:00:40 +0000
Manifest this update:     Sun 25 Jan 2026 23:00:40 +0000
Manifest next update:     Mon 26 Jan 2026 23:00:40 +0000
Files and hashes:         1: Mud1unrh12QZaqUqKJcjtPU6knA.roa (hash: vwtP83jwSI+J2dJcd9f2e5z3gOaI4L+7YxN48y87OBE=)
                          2: g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl (hash: BJc9LdotTMjByEfbSXBxqdltLqLmA8N6M60/RAswOwg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 23:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:63:54:58:fd:1f:b4:a2:a3:c7:13:4b:16:21:c0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
        Validity
            Not Before: Jan 25 23:00:40 2026 GMT
            Not After : Jan 26 23:00:40 2026 GMT
        Subject: CN=d569b2852d7fa1a0967740923691557ac12eacc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:52:70:a1:84:85:e1:56:c2:4d:6a:ae:78:d7:
                    75:90:c6:e9:81:8c:60:84:d9:ac:35:0a:92:da:75:
                    9e:b2:e5:69:b4:6c:71:70:5c:b2:ec:33:fa:4f:d8:
                    88:a4:de:f7:8b:17:1d:b8:31:c3:3e:c8:fc:71:d8:
                    5b:f9:81:22:9e:c8:3a:ce:1f:62:9d:c0:01:ad:7a:
                    c9:40:58:6c:1c:04:fb:c6:92:a7:3b:40:e5:d9:43:
                    1d:8f:17:6c:9a:22:1c:5b:92:3a:4c:13:96:49:8c:
                    6d:fd:0b:49:43:45:ce:1b:20:5b:80:ed:13:50:4c:
                    79:2c:13:cb:28:91:d9:01:ab:f6:41:8f:9a:c5:00:
                    9f:80:1c:93:df:aa:fd:75:9d:86:83:a7:60:b8:fe:
                    9f:ed:f5:aa:2c:9a:dd:6a:a1:7d:28:27:01:0f:d3:
                    2f:fd:0c:a5:98:29:f7:cb:01:53:15:51:ef:1d:81:
                    97:bd:10:80:da:10:d0:28:14:d3:ca:99:3f:ae:46:
                    6b:82:33:a0:15:04:79:16:41:33:0d:9e:5a:0a:ed:
                    41:07:56:26:ec:32:2f:6d:63:da:85:68:76:fb:d3:
                    37:62:b7:4a:57:68:fa:ad:5e:ee:80:58:fd:43:84:
                    8c:e2:70:e1:b6:53:83:39:a9:fb:6e:4d:01:ec:6c:
                    f0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:69:B2:85:2D:7F:A1:A0:96:77:40:92:36:91:55:7A:C1:2E:AC:C8
            X509v3 Authority Key Identifier:
                keyid:83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b3:eb:c3:18:d5:95:d9:ae:5d:97:a1:b9:d3:21:ce:64:78:
         79:16:68:20:25:82:fe:21:ce:96:e2:05:c0:81:bc:c2:32:04:
         0b:fe:4b:a7:db:b0:35:9e:88:ca:d5:b6:23:3c:47:de:ea:78:
         e8:5d:39:d6:6d:e6:7d:16:9e:e9:b5:42:a3:f8:65:4e:77:69:
         cc:d2:f3:f0:78:7e:e4:a5:f3:37:0c:04:ba:74:80:45:a0:f9:
         8b:a9:8d:ec:3c:16:6f:de:32:01:ea:31:14:7c:39:56:30:5d:
         2e:c8:44:bc:cd:7a:e9:99:84:bf:2d:00:d9:f6:3f:03:40:81:
         75:e7:be:67:dc:41:14:4e:69:1e:80:d5:08:c3:95:45:78:88:
         44:6e:00:89:63:7f:7b:44:fb:eb:d0:e6:08:89:20:64:29:59:
         ac:7b:5c:da:74:c1:fa:59:a2:95:b8:d6:eb:c6:29:39:82:f1:
         21:4a:24:aa:d0:00:80:57:6d:cf:65:08:94:35:78:74:e0:d0:
         30:ab:98:db:bb:73:57:db:37:b0:ed:73:78:24:14:ce:aa:da:
         7a:86:a9:95:cf:f8:76:79:b1:0f:e9:49:e7:62:98:73:58:d3:
         d9:2e:76:36:3c:86:2f:1d:75:d9:a1:1d:7b:2f:1b:31:74:81:
         1c:e2:4d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:45:58 2026 by rpki-client