This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
File:                     GNgB3p_opmgHWIF4I642ugZcYQ0.mft (raw, json)
Hash identifier:          PzYtmR8tN5D5kFcRggLOpoQ0ObpNHvDe2LNTnulgwEA=
Subject key identifier:   0E:47:71:9F:53:47:2F:76:8E:4E:C0:52:72:9B:67:7C:27:8B:6B:67
Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
Certificate issuer:       /CN=18d801de9fe8a6680758817823ae36ba065c610d
Certificate serial:       019BF76335C56FD0B42E5C8D81C219DF53AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
Manifest number:          17EC
Signing time:             Sun 25 Jan 2026 23:00:32 +0000
Manifest this update:     Sun 25 Jan 2026 23:00:32 +0000
Manifest next update:     Mon 26 Jan 2026 23:00:32 +0000
Files and hashes:         1: 7lAzklFt5hv21weZsd8RUSnd9Ig.roa (hash: +VKWZFr+6W37JzEA9GSsY/1+wtiBPUM4ZOAfeR7K+UM=)
                          2: GNgB3p_opmgHWIF4I642ugZcYQ0.crl (hash: OBJzjQsBR6d5fMMyJo12zkxl8DQE9niz0Z6gbQ5OJxU=)
                          3: GaSCMV4XmzAxLCAeAkrFJsSYL68.roa (hash: 8armHfXsLYxT8u8vHUQJGjHAEIP47gs/JgtUgM3M2bw=)
                          4: JdvrcoE9zh9DtjU5-xbVFH-VvDA.roa (hash: 3jAnXeJ9BBJ28SdlPUy/mU91gOnFLPiC/VnWiJcQ3Ig=)
                          5: c3aSu8i9jdfT3MZzyY5MkVH86Ys.roa (hash: Rr6OkRDr/ak6ymVFHMUijIRhq9Kp5PxtMbQP8vM+1GU=)
                          6: m-SQr7hnhmE960j3hH0IgSeLpa0.roa (hash: NGsZYn3E8/y+KwalpvGEjudnpYUMa2+kf6D4NeIdWbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:63:35:c5:6f:d0:b4:2e:5c:8d:81:c2:19:df:53:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d
        Validity
            Not Before: Jan 25 23:00:32 2026 GMT
            Not After : Jan 26 23:00:32 2026 GMT
        Subject: CN=0e47719f53472f768e4ec052729b677c278b6b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e6:f2:a2:15:26:9e:b9:73:61:b2:9e:1f:bd:
                    9e:ef:c0:a5:8b:43:53:35:b8:9b:aa:ce:53:50:fb:
                    2e:fe:97:a3:83:11:1a:6b:1e:92:e8:c4:6e:b7:01:
                    ec:d6:7d:4f:4c:ff:4c:f3:5a:98:be:9c:ac:55:94:
                    1e:b8:3b:08:c6:97:df:99:eb:fb:5e:f8:6f:76:6a:
                    8c:15:4f:4b:c6:2d:a1:1a:a5:f1:7d:cc:c4:91:72:
                    ef:50:af:7b:f0:a3:50:4c:04:68:93:5a:99:ed:9b:
                    b6:db:d3:f6:f6:fc:e1:30:5a:e9:e6:5c:83:d3:e7:
                    ad:ad:a8:84:25:96:2d:cd:ff:62:04:8d:98:26:d2:
                    b8:4d:54:13:84:ba:b6:ff:39:66:1e:1c:47:e9:46:
                    59:7c:bc:d4:74:7d:1f:c8:f9:f9:dc:35:38:5c:79:
                    49:49:a5:f7:3d:7c:1d:8b:42:81:6d:16:8f:1b:d2:
                    33:b8:50:e8:31:36:9b:65:7e:99:43:a6:e3:99:cc:
                    ca:dd:2c:ef:79:fb:d7:82:e8:11:12:29:91:bc:ca:
                    b3:ac:6b:2b:b1:51:eb:a1:85:c0:0f:8d:4e:ac:2b:
                    54:f2:cf:84:bd:16:e7:0e:a0:f9:bd:41:74:aa:80:
                    4a:08:69:e7:24:0a:f3:b8:75:1d:37:d8:e1:ab:d2:
                    93:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:47:71:9F:53:47:2F:76:8E:4E:C0:52:72:9B:67:7C:27:8B:6B:67
            X509v3 Authority Key Identifier:
                keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:45:1a:5c:d1:8f:92:ce:7d:c1:da:d7:aa:41:74:8b:06:71:
         d1:a8:83:6c:d1:32:db:a4:e3:e6:f3:ee:e0:48:a9:d6:8b:d6:
         8a:6c:5f:ee:2d:98:30:27:53:07:46:dc:86:b6:b4:4c:24:a7:
         49:68:37:2b:60:ee:ae:80:35:de:22:e9:81:6c:ef:87:60:10:
         78:70:e9:4f:fb:98:97:80:d5:23:b4:fb:b6:9c:de:cf:43:39:
         ef:37:b9:fd:13:09:f0:92:06:74:1b:4b:61:be:4a:10:c3:f7:
         0c:04:89:0b:06:e8:64:2e:9e:be:7d:d3:93:02:b8:8c:7d:d4:
         9f:76:71:a9:aa:23:0a:eb:26:af:80:5b:f2:dd:13:6c:cc:57:
         8c:d5:f8:15:ec:0b:95:f7:10:19:5f:dd:02:21:88:22:82:27:
         d9:e9:30:a2:fe:43:c0:f9:1e:a9:67:c0:66:7c:a6:c3:94:7d:
         80:cb:2a:6b:8b:a9:04:c9:fb:31:90:a1:58:a0:0f:e8:24:82:
         9e:bb:f7:c9:d0:cb:83:b8:e7:d5:58:a4:ce:06:0a:4b:3c:b4:
         cc:cf:42:35:f5:bb:35:66:9c:a6:1c:83:26:fb:9e:33:37:67:
         df:af:f7:3d:98:91:00:1b:ff:4d:ad:2b:cb:01:a2:8f:c6:62:
         86:73:53:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:42:35 2026 by rpki-client