This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
File:                     gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft (raw, json)
Hash identifier:          q1U6375tC1098c63Lwc1KEY7nMosDrs4gvylqf6mjgI=
Subject key identifier:   2C:EF:2A:FB:D5:18:F4:D8:9D:C2:B0:C6:96:71:46:7D:0E:B9:93:45
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       019BF5E381FFBAAD6DB7A87B7A3E7C7D52C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
Manifest number:          1776
Signing time:             Sun 25 Jan 2026 16:01:26 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:26 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:26 +0000
Files and hashes:         1: 4orkIn7h0EPFoilqG9DSkJtqI7Y.roa (hash: gAbMmrGonNTOHm8XkcSABP32ELyfm6a5Ii8otDOtLRc=)
                          2: 5rXwssl527FV2FHeDhR2oKlUXW0.roa (hash: WQ/svE53owqqplnZu2XskLFlrf81EITn3WaJ4Owl8c0=)
                          3: A2ISr3AhA_OLuE4vCaltguerrGk.roa (hash: XVo2mBP5vj7zEOjBJU4fz3hD0zF9gjIIidmQOyfmPm8=)
                          4: B_yoM3Jy8N0DdJQtpgjme97ROik.roa (hash: xw69BNhn5/2sAEBqf+HIAJ2XYT2OBNlWA7mFr5PTYFI=)
                          5: C2qsqykPJR8bxPt0il6bx1Ync08.roa (hash: rx7IIuhYb6OjHMFPkhQQKe1jf34rAxrZNmsnAP5woPw=)
                          6: Eilep39s0W_osQQFQPSsoAKdfco.roa (hash: 6jL20G1x9LLedCqLFzBSvWrG2YOC5Aac6CVPlj6NRgI=)
                          7: Gb_AwXxUin8Mn5gcEsrwou3NXAA.roa (hash: 48NbX0kO+A48lwBzWI9azRgsJ0FS4CNgxNIjVsLWo4g=)
                          8: LNoBJyvljWdZYTcoXm9QsLP9FVs.roa (hash: nWOaebTubOf17QtTCJLmMJRa/dUDUevgmWP2si3deW4=)
                          9: M0ezANIScQkGcDEfzTIy1094Ygs.roa (hash: 7L/Z05JVXLM96cEqfLd/Qa3M1xxz6mw6TCdvAoqtsH8=)
                          10: M6OR43d1Ef_mnsOS7U5WlfEyNNM.roa (hash: Ss1HOYPpURHLsSwrNssTEoPmVf7qgHUxrwfwGMzevDc=)
                          11: PlsiMfuzdWpqdixRpsnKJmUJVkc.roa (hash: CxXKI5RjYT9e0ognC8RxQ8YSCNVURmz/JyThW8Kz5Ew=)
                          12: RgWMQjXg7-8S339TlCBO4Dg9rfU.roa (hash: WorX+HeeCdUwWkRZ9MEdKKlywcL38BiogUuWefr3ejk=)
                          13: TXYlpnJahpSSf4D14CU4Lc0pyNk.roa (hash: IvdTjuXpCeq2Kesan+YisYqHbTJ/fmABOJltSTgXFiY=)
                          14: USkeW3SqGK1BFL38UkgCCeCEWQ0.roa (hash: eMrg63tQqYpAlPke35tL59n0mF440GKZbiUGCAytzHY=)
                          15: Uy1NAFGmmB9rpNKcZiyKoBpw6G4.roa (hash: QaQ4DcE992inKykf9B6se+i6gLKWUhft1zIUui08Mb8=)
                          16: X4l2aJ0Z1f1FAjlZmIkVZeto2BI.roa (hash: EbAAegZ58TUcJoLUZHe9898JJhVcLeqOPEqNmF0c7DQ=)
                          17: Xig8GXZb4cs3RExjYBPUVxaan0E.roa (hash: QLyCrUnznQhFzxFlVsmSUk9qAzT59OgfVZ4sRC3GC2A=)
                          18: YqdHSF4GCVq94qcieGaM8N0jEgY.roa (hash: Klrf+hMjHxOIejPRA1/CvRvR9qFDUARzRW1B3+b83qk=)
                          19: aQDw7Mo9EKwcZxqOVfhx0_yZdp4.roa (hash: ZuwT0G21oBkcWxGxdz/rJk2/q4wyN7jfVVKKPfYFCII=)
                          20: enQ_Mh2Cvnzza-HCJ-79wAO1Lbc.roa (hash: xl5DM0dAYTSjokbLerljf4uHTj1MwUbj8WLFHYv9TA4=)
                          21: eyT0hDNITHAYozOfTmD4WHYvNdE.roa (hash: PCxiDKOq3LXFucBrFCL15qgZKw4BnZHABc1IU3XiyW0=)
                          22: f4W9THEIhSMQlVB7wW0OJAN9icY.roa (hash: 6zoXkf8w7/VwNfRCeLRUhCWU6NfwtJY9O72c8BLnCSI=)
                          23: fUMyqRdYIh_R-8CA9gJo1w88MT4.roa (hash: 0n8T3bgS7/ZpBehpJPzHRTQQIvK4fBVJaSQE1Tqq5Lg=)
                          24: gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl (hash: 3idoXkjD5DQKuZmia3gbUttxZ4+qRnEGuC4ymW7XFNQ=)
                          25: iMvJAauepWMJ1wwf7CQ5oPA2KoE.roa (hash: 976ItUZMl+4c4FqQDI0diTxTkkRGxTQv/DsyWTxfnHQ=)
                          26: nN1BqZwpwg6pGbp1ybabVsffEuI.roa (hash: pegbr3i5RQokP5AQQn4oGY5tWqdgEeSi6ilxYg+Y1MU=)
                          27: nokRMmTxz9Xd6z-hBVMNLvX9YfM.roa (hash: bPLMWPwlw8xLKZWkuAQ5tOhzaVyBMSkZqaVe4QemGq0=)
                          28: rHtH6ewJBJbv0Px0ycpkTuJZhpw.roa (hash: TT27fGDeU9y8svpHAoyYAyCi7PfXey2z2Ll9/ZDN9Dw=)
                          29: rLbinrny0kb0lsNdV-MOQUFt2NU.roa (hash: 5a8gSQVuG/k+iimOmCot0TPlak9dLg29Xt6pHVrTZPY=)
                          30: sjSbwRvUxsb3yUwsgUfAMG2V4_U.roa (hash: aPIFLtmwDtgSR2q0IlrMpjeonu3SIjoONqTj1lEh+4c=)
                          31: tJezA1CZfS-7gIrwzQeF07w1QZE.roa (hash: 6SVRW7grHCoY7EelqwfyobL1Mgn1MekdbVvAZaNRMSw=)
                          32: uIsD9Xy2Vc1GIzrsfeZU-p_i07c.roa (hash: owmGDd/9tCt8PZOlqfI/7VwgHd7b2hJO3Tnc74AlIQw=)
                          33: v1Z2O0vtMEX18clZ7h_Mo0xnx74.roa (hash: azp2mK2l0SmjEdVLQ9ZYdD4KO3+EjEhWMc0Gk6dWvew=)
                          34: wX2DATSM-PZGG043XYepDGv416w.roa (hash: 9D0Q1ZjSW7FlImCGaenDGcYFgDPTw3N94jOLYndMLcg=)
                          35: wss7zMwe7PbIUt44ISQdw5NRA-o.roa (hash: hY/bHx558olj4wZ8AeI9REogrHwn5IbR1IKhgej6jig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:81:ff:ba:ad:6d:b7:a8:7b:7a:3e:7c:7d:52:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Jan 25 16:01:26 2026 GMT
            Not After : Jan 26 16:01:26 2026 GMT
        Subject: CN=2cef2afbd518f4d89dc2b0c69671467d0eb99345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:7c:19:ab:d0:e8:0a:83:5d:d3:78:79:ab:
                    12:97:bd:bd:f1:a3:78:4a:b8:ab:a5:33:bb:74:78:
                    b4:d9:30:7c:43:94:8b:16:6b:83:99:18:34:a2:f8:
                    06:c6:6d:65:c2:83:70:24:d8:70:58:f5:fd:d7:35:
                    2b:ef:75:8a:09:19:c6:15:05:44:58:b0:76:13:c3:
                    4c:d6:52:5b:52:93:a2:00:76:78:e9:7b:e8:8b:e8:
                    6c:ae:f8:17:49:59:60:bd:c4:af:a0:72:94:92:e5:
                    d5:b7:f8:9c:2e:61:56:db:e4:f2:21:53:b2:90:2f:
                    ee:8d:58:b7:45:cd:4d:b0:f9:21:d9:03:72:78:a5:
                    7f:0d:7e:0e:4a:ed:cd:eb:b3:9f:91:80:62:8b:61:
                    c8:66:fc:40:e4:4e:49:3f:69:ec:cb:74:b5:51:05:
                    d3:9b:89:1f:eb:51:70:5a:a8:94:a4:6e:32:f3:37:
                    18:37:81:37:f7:49:bf:5a:5a:3b:70:5b:c4:af:53:
                    aa:c2:38:b3:2f:1d:a3:59:6e:eb:dd:c3:eb:a6:1d:
                    40:15:21:3a:94:bd:bb:94:e4:21:fb:39:a3:93:46:
                    7d:cd:e9:29:53:c0:fc:3b:b3:b5:4f:ea:4f:0f:c0:
                    c9:2f:e8:c6:59:c0:31:e3:bd:31:e9:36:f4:2e:ea:
                    1e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EF:2A:FB:D5:18:F4:D8:9D:C2:B0:C6:96:71:46:7D:0E:B9:93:45
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f3:e2:d5:90:79:fa:63:23:59:04:5e:22:97:9b:9d:75:ce:
         c0:60:6b:c1:42:81:b2:af:9b:81:0b:93:62:9a:1c:fc:f2:34:
         3d:17:c7:6b:6c:71:29:94:e6:4b:13:12:97:fb:0d:5e:99:fd:
         89:41:71:67:ba:be:1b:a0:22:25:14:cb:ca:1d:d6:be:68:17:
         e8:c1:5e:e2:e9:bc:24:ea:51:6b:5a:75:5c:59:c4:17:48:b3:
         ab:0c:9d:33:75:cc:2a:3f:29:37:b2:f1:e4:ee:6e:81:af:a6:
         f1:08:41:08:3e:48:5a:98:82:00:bb:1d:7a:22:9d:96:c5:24:
         4b:5f:9d:93:f8:34:9a:60:86:4c:65:47:83:db:36:08:23:2f:
         3e:5b:6e:03:8b:ec:7f:bd:45:aa:52:8f:40:95:2e:54:6c:c5:
         86:f4:38:a2:14:e0:ef:66:d3:cb:e5:2b:0f:85:1e:1c:90:19:
         4d:e7:08:40:eb:66:76:32:da:de:e6:53:56:38:59:8f:74:11:
         95:d1:ff:de:bd:53:ad:04:36:67:fc:d8:a9:eb:14:aa:b5:e1:
         93:50:8b:d7:f9:44:f6:7a:45:c8:a1:c6:af:57:5a:f1:7f:b0:
         bb:65:50:6b:1f:03:27:62:dd:4e:e0:c8:c8:50:56:e8:f9:63:
         b1:8e:de:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:35:02 2026 by rpki-client