This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
File:                     gHcJ57DvuhJwJcg-XTGUxxukKMM.mft (raw, json)
Hash identifier:          M2/5aQg1p5JA4valHmjE8fNKG2IoZ6ZrzyF4sVKlaEY=
Subject key identifier:   4A:46:9B:3B:85:9C:04:4B:39:94:8A:05:FD:A4:13:D3:CF:A7:5C:F6
Authority key identifier: 80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3
Certificate issuer:       /CN=807709e7b0efba127025c83e5d3194c71ba428c3
Certificate serial:       019BF651718E676BD7D7F6DB4C5EB7384685
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
Manifest number:          17F0
Signing time:             Sun 25 Jan 2026 18:01:31 +0000
Manifest this update:     Sun 25 Jan 2026 18:01:31 +0000
Manifest next update:     Mon 26 Jan 2026 18:01:31 +0000
Files and hashes:         1: 17V0jzStQoCb_AQ6tvGaBLavGoM.roa (hash: xin2ArbEF/v8y8IFPHvAh0sLnYeJkUxdnoEAhdH3Knc=)
                          2: P3hxeobOBa_A0xJ0xlGfKnSdNVU.roa (hash: mHchc2zREYZlnOuz8p+co3qUvhS0H4UpE0PWUACDroc=)
                          3: fn22VffPk13JEZ43P7QzWAHfKUI.roa (hash: jLIrzazW1c/8A69YDLVF5OeAhGmqg599WqHWOZ8LrQc=)
                          4: gHcJ57DvuhJwJcg-XTGUxxukKMM.crl (hash: pJUSRYLQa2dt0X79dQdbiajl6p2MjtX7oOLhiDGuSmA=)
                          5: lvjXs-MIPCkpvks5PHkIN5Ickrg.roa (hash: rbC/bc1gnAJSprju+NYQ5fdLrBRf1LuhW2461H5788Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:51:71:8e:67:6b:d7:d7:f6:db:4c:5e:b7:38:46:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=807709e7b0efba127025c83e5d3194c71ba428c3
        Validity
            Not Before: Jan 25 18:01:31 2026 GMT
            Not After : Jan 26 18:01:31 2026 GMT
        Subject: CN=4a469b3b859c044b39948a05fda413d3cfa75cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c1:28:43:29:2d:fb:f6:83:cc:d3:56:70:41:
                    65:8d:18:8a:ee:1b:cc:53:67:da:82:b2:fe:50:3c:
                    cf:0d:20:c1:fd:e5:97:46:90:21:11:ef:24:fd:34:
                    e4:15:85:4d:71:34:4c:1b:66:53:5a:40:1a:2f:57:
                    a4:7f:95:01:8b:13:ae:35:a5:80:4e:a0:05:81:37:
                    1f:4a:17:ae:24:62:a1:0d:06:be:47:9b:79:7c:5d:
                    38:32:d1:ac:3d:22:94:06:ba:82:05:21:b9:8e:e3:
                    8c:ab:69:9f:1f:ba:35:6b:12:ef:9a:a5:cc:a6:a4:
                    a8:e1:55:79:3b:dc:81:2f:2a:6c:91:db:b4:4b:1a:
                    bc:67:c7:ed:9d:9d:37:53:1e:54:12:95:7b:9f:5d:
                    40:77:b5:8b:19:84:95:b5:ee:ff:60:d0:56:79:b5:
                    02:fb:7e:bb:f3:71:31:90:f1:2a:c6:a7:34:ea:62:
                    d1:f2:51:10:f1:b2:f7:b6:ac:bd:2e:ab:ec:37:6e:
                    36:a2:d6:c6:92:19:5a:ec:ba:7f:86:69:96:c0:cd:
                    df:f3:49:ea:3b:dd:1a:e6:05:90:14:23:cf:ec:97:
                    2a:e4:15:38:be:1c:2f:0d:bd:74:dd:c2:d1:75:94:
                    27:56:60:c5:9f:b7:74:08:91:4d:5d:02:67:cf:63:
                    8f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:46:9B:3B:85:9C:04:4B:39:94:8A:05:FD:A4:13:D3:CF:A7:5C:F6
            X509v3 Authority Key Identifier:
                keyid:80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:62:af:03:34:ef:9f:51:d4:30:93:4a:d0:5f:03:82:b0:a6:
         a8:06:4f:2b:b3:1e:73:be:1f:50:e9:11:d5:de:e1:bf:aa:f9:
         46:1e:b9:13:6d:cc:d6:cd:3d:a9:f0:8e:63:35:2f:a7:fa:6e:
         d7:63:69:61:98:21:56:fc:1e:f1:70:24:fe:d4:5d:9c:a2:39:
         88:ef:a7:66:1e:6e:e8:0b:c5:6f:ae:bb:b1:18:fa:e1:2d:84:
         50:42:bf:83:aa:76:4f:2d:11:52:b2:5e:06:9e:a3:26:6a:8a:
         dc:52:df:35:be:2e:1b:ab:df:8c:7a:ce:42:61:6a:a0:b3:9c:
         a2:e0:82:d2:3d:85:8c:ee:cf:c2:4f:55:8d:81:64:67:d8:b6:
         a1:9c:4a:10:5f:b7:28:f0:b4:18:0f:6e:10:83:50:39:b8:68:
         e0:57:24:51:30:f3:d6:19:dd:6f:17:86:11:df:7a:1f:6d:0a:
         0e:59:b3:96:ce:d6:a0:74:0e:26:df:1a:3f:30:d8:1a:d3:0f:
         de:02:78:b3:41:8a:28:0e:63:74:03:f6:49:bd:a9:60:54:70:
         1d:a5:00:51:06:d8:fa:31:71:6d:60:c3:ef:e6:8f:71:63:93:
         f2:db:e2:3d:7a:ce:95:c6:ea:7f:22:2d:6d:41:ef:b5:50:d6:
         bf:7e:7c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:51:56 2026 by rpki-client