This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
File:                     GU4QqVb6UlFuj9O5MY6EpVOD1is.mft (raw, json)
Hash identifier:          eJDu0RmDmjqJm8nnmlViQGZFefd4WjZRismEH535vgM=
Subject key identifier:   0A:58:DB:BE:0C:17:33:D3:5D:6F:02:11:56:4D:D3:E3:43:07:A7:9A
Authority key identifier: 19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
Certificate issuer:       /CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Certificate serial:       019BF6BE61D6206B504A2BA1A1D7E9DE514E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
Manifest number:          028F
Signing time:             Sun 25 Jan 2026 20:00:30 +0000
Manifest this update:     Sun 25 Jan 2026 20:00:30 +0000
Manifest next update:     Mon 26 Jan 2026 20:00:30 +0000
Files and hashes:         1: GU4QqVb6UlFuj9O5MY6EpVOD1is.crl (hash: dVg4tjSVqEAWpjHlGmmCgsM1mKXdleVNGTgn5TJsrEg=)
                          2: L6IkYa1mFzPLtO5LIkQRCCe9jl4.roa (hash: Ld5O0t2bBeigoCJRn7m3gG44EpWV7A+830bMM7yTOtE=)
                          3: oyVzd1gmTKT17jlRmnyP0pEMzFs.roa (hash: pAXNP3pz+CMOZzVz6ZojLzDHfBZZpShriq/ea0S+BHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:be:61:d6:20:6b:50:4a:2b:a1:a1:d7:e9:de:51:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194e10a956fa52516e8fd3b9318e84a55383d62b
        Validity
            Not Before: Jan 25 20:00:30 2026 GMT
            Not After : Jan 26 20:00:30 2026 GMT
        Subject: CN=0a58dbbe0c1733d35d6f0211564dd3e34307a79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b9:9b:50:e3:fd:3c:bc:da:d4:c1:93:66:d7:
                    64:79:ac:0f:2b:22:e6:6a:4e:a1:27:b3:43:81:bd:
                    69:b4:68:1b:01:d5:38:d3:cf:b4:b2:f2:21:14:33:
                    0f:01:f1:a9:fa:a0:5a:f8:53:48:66:5f:f3:73:7b:
                    d2:47:41:bb:7d:25:5a:72:a7:e4:63:c0:66:77:59:
                    46:97:0a:44:c8:9f:8b:59:f2:46:f4:0a:d9:af:89:
                    67:4f:a2:d4:71:de:91:b5:cb:b8:70:7b:41:7d:2c:
                    cf:90:e2:ca:3e:39:3c:3c:8f:0c:a3:0a:b7:35:f9:
                    c3:6c:7f:d0:2f:e4:3c:50:f5:69:61:0a:95:26:1c:
                    ed:f6:d9:47:a2:61:e4:11:c7:68:69:f3:e0:1c:2a:
                    03:41:20:84:5f:44:fd:2c:8d:45:62:1e:63:b8:c1:
                    41:52:97:2c:dc:dc:bb:6b:ac:c1:7f:17:d4:ed:6c:
                    7c:ff:42:33:47:c4:9d:51:66:72:0c:ac:bd:1e:62:
                    67:51:7b:41:22:31:a3:b8:fa:ed:c5:b8:17:ae:2a:
                    7e:60:9a:2f:84:43:87:3c:97:21:0c:e3:a6:43:4c:
                    fe:4c:aa:65:e0:79:e9:4b:13:75:5e:41:0d:73:61:
                    c3:9a:49:d3:8a:11:b8:62:22:fe:06:6b:8c:a4:6d:
                    2b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:58:DB:BE:0C:17:33:D3:5D:6F:02:11:56:4D:D3:E3:43:07:A7:9A
            X509v3 Authority Key Identifier:
                keyid:19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:19:98:92:56:ba:bd:14:32:a8:03:5a:03:47:2a:bd:77:01:
         65:2e:65:d8:a4:80:b8:d0:10:eb:be:95:74:68:6f:20:90:17:
         ce:00:ac:1d:56:04:c4:87:a9:a7:a0:12:cf:1e:70:80:e7:28:
         7c:c5:34:39:cc:25:d5:59:6f:1e:e4:a8:d1:65:67:80:c7:d7:
         69:c0:bb:16:ef:7b:2f:f0:37:9e:d7:03:fe:ec:a0:5e:4e:ef:
         10:ef:65:9c:00:e1:7f:1f:20:83:0a:a1:0f:23:3a:ee:2b:52:
         ae:88:cd:52:24:bc:6b:0d:19:2f:91:55:28:45:18:33:82:e5:
         f1:fd:1f:af:5f:1f:ba:35:15:9f:2d:f9:90:11:f6:2e:5b:da:
         70:8a:73:80:80:04:39:11:9f:0f:eb:dc:46:68:de:1d:17:29:
         42:6a:8b:9e:1b:43:90:b7:8c:59:33:15:90:44:be:b1:ed:22:
         5f:a6:01:fc:66:d8:b7:bd:e9:55:8f:82:00:7a:64:26:a2:28:
         9b:28:34:97:5e:b5:df:4d:39:ae:8b:e5:1d:3f:d9:6d:b0:80:
         06:b1:b9:b6:54:0d:82:82:32:cf:ea:a3:2d:49:61:b6:e8:b1:
         74:b0:ba:ba:d1:19:f5:bb:71:7b:1d:a5:aa:0d:f3:69:34:d0:
         b7:e1:10:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:36:59 2026 by rpki-client