This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
File:                     GMpt4aSKToxbivHq6bXoC_z5LEU.mft (raw, json)
Hash identifier:          NpDI2RgpIi4kSWCtTlhhKXkEu0/dNU+txNT4Guk2qQU=
Subject key identifier:   D8:05:ED:E3:21:C1:E4:FD:17:29:CA:4C:BB:2B:D8:6A:A0:38:2C:D4
Authority key identifier: 18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
Certificate issuer:       /CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Certificate serial:       019BF53EF5BBEB5A56F4A1D000B9E5EC2CAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
Manifest number:          06DC
Signing time:             Sun 25 Jan 2026 13:01:42 +0000
Manifest this update:     Sun 25 Jan 2026 13:01:42 +0000
Manifest next update:     Mon 26 Jan 2026 13:01:42 +0000
Files and hashes:         1: GMpt4aSKToxbivHq6bXoC_z5LEU.crl (hash: kbzOrtDEOzwS4SmqafC7RK6a1oxl5uiSh3AOH1okG+0=)
                          2: nZoO22NOlzzLttq20LfxDoJMdQg.roa (hash: s7xmgKi+9ZabhreTnecVdCUPnnVuLBbgQA+8atVMyO4=)
                          3: o0mi1ecW1qDQy0JOYUzQEq3UCno.roa (hash: hV2jBoTpFaaL+UTs/7eomqtU5upO4Ya9tPbfPL2XyYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:f5:bb:eb:5a:56:f4:a1:d0:00:b9:e5:ec:2c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
        Validity
            Not Before: Jan 25 13:01:42 2026 GMT
            Not After : Jan 26 13:01:42 2026 GMT
        Subject: CN=d805ede321c1e4fd1729ca4cbb2bd86aa0382cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:b4:60:b4:f7:44:05:b0:61:c8:94:64:7f:
                    81:fd:1f:52:a9:21:cd:07:78:f8:cc:73:fe:a6:0a:
                    72:50:9a:01:7e:02:1c:84:6f:b7:a1:80:af:50:f0:
                    39:cd:52:6f:82:0a:b5:da:22:e2:30:c7:db:52:ef:
                    67:23:b6:61:60:c9:f6:6d:97:64:dd:53:22:50:f4:
                    62:5b:33:0d:44:d5:04:24:f8:19:7f:13:10:6d:e9:
                    a3:8a:ea:68:8e:24:e6:a6:0c:60:15:66:21:f6:db:
                    1b:e4:1c:fa:20:84:17:d7:3f:b9:24:14:61:2a:a8:
                    74:ec:58:1a:0a:6b:02:d3:ea:df:4e:b9:7a:7e:09:
                    af:1a:02:b2:87:99:71:0d:06:ce:5d:98:55:ca:17:
                    89:3a:87:1d:d7:a9:b4:91:f8:5e:70:4e:11:28:ec:
                    96:7d:72:ab:51:48:82:69:15:dd:b8:a4:7d:3f:97:
                    a2:7d:62:64:98:57:a2:b0:de:83:5d:72:f0:a9:b7:
                    1d:43:53:04:17:f2:95:80:4a:be:d9:57:7c:49:70:
                    af:34:1b:92:7c:0a:58:a8:63:e4:36:7a:e2:d9:61:
                    79:24:16:84:de:d6:f4:82:3a:e0:eb:6d:52:9a:b4:
                    34:b2:95:ac:62:31:81:18:ce:e5:fa:2e:ce:6f:1d:
                    b6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:05:ED:E3:21:C1:E4:FD:17:29:CA:4C:BB:2B:D8:6A:A0:38:2C:D4
            X509v3 Authority Key Identifier:
                keyid:18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:65:3b:ef:2d:a5:c4:d8:4f:18:44:7f:f1:98:08:f7:a4:51:
         05:9d:1c:fe:a6:dc:f9:68:d7:20:4d:6a:78:c4:f8:0f:00:01:
         ff:9f:71:a3:c3:64:7f:bf:ab:cb:dc:43:62:57:b2:68:58:89:
         ab:85:5d:38:ea:33:da:70:5e:91:b4:b6:f2:3f:63:69:99:2c:
         4d:89:42:ff:ee:5e:b9:f9:70:36:5d:2d:cb:d4:fc:0f:44:7f:
         7e:2c:29:35:37:ea:96:3d:75:87:1b:5c:50:61:fc:88:ef:eb:
         a7:03:73:04:50:7b:37:9a:23:0b:07:5c:cd:60:8f:45:36:4c:
         5f:ec:19:d2:ed:07:46:8b:84:55:49:da:70:b3:83:7a:c2:4c:
         e4:e3:a1:24:52:07:51:63:59:1d:16:58:42:f6:17:2b:81:90:
         84:a1:9b:ed:53:ee:00:21:af:c9:1d:95:eb:ee:ef:76:29:c6:
         09:73:6e:d4:8e:fd:06:d9:32:2a:51:46:4f:15:47:5a:c4:62:
         2c:e8:29:54:0b:fc:ee:78:a8:9f:42:06:23:87:fe:f5:f7:ea:
         b0:39:b3:55:9c:d9:21:45:b3:4d:75:81:6d:ca:d4:80:1f:49:
         59:35:33:54:f4:ce:2e:ae:9f:52:8e:35:3b:93:31:45:c0:c7:
         ad:89:55:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:24:19 2026 by rpki-client