This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
File:                     GawUmIYOK7CVgXOFS9BMhpo2kBc.mft (raw, json)
Hash identifier:          8BF+QnGzRpb2uogBcrm22H0dZ4Fyj2ICVYyxccPhkDc=
Subject key identifier:   3D:70:18:45:B1:2C:C9:97:4D:1D:29:B5:2C:F3:07:32:31:DB:43:25
Authority key identifier: 19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
Certificate issuer:       /CN=19ac1498860e2bb0958173854bd04c869a369017
Certificate serial:       019BF5E30C7A014086DC642858FE0632B92F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
Manifest number:          17E7
Signing time:             Sun 25 Jan 2026 16:00:56 +0000
Manifest this update:     Sun 25 Jan 2026 16:00:56 +0000
Manifest next update:     Mon 26 Jan 2026 16:00:56 +0000
Files and hashes:         1: CX4SjTdi-WVaIel19sRIG6HUUUw.roa (hash: UDsW/lOEequNbC4ieUO0oqmh57jt4K+cQMjTjOFaxBs=)
                          2: GawUmIYOK7CVgXOFS9BMhpo2kBc.crl (hash: l7WUOTl6ln4fH6oh1K4mxQHTKaNJdFiattJjP93at4g=)
                          3: Lh8IZMqEqiAwn2VYmeg9sVGCFEo.roa (hash: 3Z8PMQ8sh56/aP3O9W1H0byuePE1WYuRdcvV9nD8Q2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:0c:7a:01:40:86:dc:64:28:58:fe:06:32:b9:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ac1498860e2bb0958173854bd04c869a369017
        Validity
            Not Before: Jan 25 16:00:56 2026 GMT
            Not After : Jan 26 16:00:56 2026 GMT
        Subject: CN=3d701845b12cc9974d1d29b52cf3073231db4325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:94:15:2d:f9:22:53:5c:88:33:7c:db:54:98:
                    0a:46:35:58:ad:11:35:20:ce:25:d6:ea:84:60:8d:
                    47:7e:14:83:ea:64:c7:13:4a:c8:4f:01:7d:fa:71:
                    84:9b:b8:91:4a:1e:cc:71:ba:52:6f:cb:20:bf:83:
                    db:a5:7e:37:ed:b6:c6:38:06:15:84:3c:2e:05:18:
                    2d:90:20:46:d6:46:e7:fc:c1:5d:65:ca:d3:b8:dd:
                    0c:af:5f:2e:cd:e0:ed:32:d2:9e:08:0c:f0:e7:bd:
                    2f:84:d0:88:49:41:f8:bc:5d:40:2e:99:00:4d:70:
                    78:3f:63:09:e5:27:45:e3:be:ab:0f:b8:01:85:c6:
                    e3:c5:ec:3c:49:c3:70:39:99:1e:93:07:44:27:b5:
                    5a:69:d3:0b:bd:3b:02:bb:eb:28:ad:23:f4:55:3d:
                    2b:55:91:c1:9a:51:68:c9:ac:27:ca:19:2e:83:a8:
                    ab:51:9c:0c:43:cd:40:05:15:d7:e8:43:98:7f:a3:
                    f8:7a:7b:21:b4:e4:25:02:73:47:0d:f0:1a:ea:84:
                    b0:7c:57:0c:8a:1d:ae:79:c5:78:68:d2:b6:03:bf:
                    37:81:14:dc:8e:c0:d8:dd:b3:93:e3:4d:10:7e:9d:
                    68:b4:34:4f:2b:d8:5e:54:de:bf:9d:25:41:31:a5:
                    cf:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:70:18:45:B1:2C:C9:97:4D:1D:29:B5:2C:F3:07:32:31:DB:43:25
            X509v3 Authority Key Identifier:
                keyid:19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:75:38:f9:0b:ea:9f:de:1d:3d:6b:e4:91:b2:11:66:a1:3d:
         a3:e6:fe:aa:27:be:ce:2e:8f:f5:e3:49:8b:b0:5b:6e:3f:53:
         0a:f9:e8:2d:a7:83:e3:27:90:66:2c:9c:db:80:f3:71:8e:fc:
         0a:d0:8c:04:0a:c9:fa:68:25:b2:5f:12:7a:7c:10:dd:b6:26:
         88:85:fa:79:97:63:94:71:02:f0:85:13:0f:6f:53:34:66:ca:
         20:74:f3:a4:ce:2e:10:08:ae:8f:08:4d:bb:c2:43:7d:89:a7:
         e3:32:49:5c:c7:51:3a:21:98:b0:7b:92:87:4e:18:b8:62:d9:
         ae:c8:df:7c:fa:41:cf:c9:ab:f2:99:2b:12:12:1e:d1:ff:09:
         38:b6:75:10:08:b9:d1:f3:74:06:c8:a5:a4:9a:dd:ba:1b:45:
         93:4f:c0:48:81:e6:99:b5:74:ed:6b:70:6a:96:1e:5f:89:c2:
         59:17:e9:68:ef:88:99:61:9f:b6:c9:d8:53:f8:90:f5:be:f1:
         17:58:0d:75:55:cf:f2:bf:47:28:a2:2f:09:fc:b2:9b:1f:41:
         4b:0f:75:30:9c:e0:fc:ea:73:d0:9e:0a:3f:8f:c1:08:0b:43:
         ca:ee:d0:b4:2f:ae:b9:76:68:3f:c2:95:f2:e8:f1:3c:f2:f2:
         71:b9:3a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:03:58 2026 by rpki-client