This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
File:                     GBAXciSJlrh9kIQMLSfWJUlFgXM.mft (raw, json)
Hash identifier:          LALFWx8tmS7/3HSWx0HwJspTaBOcV9u/2QLVjAdOc2k=
Subject key identifier:   90:7B:80:1D:ED:29:C1:CB:9B:DF:78:67:CF:56:2C:FC:A9:2B:F7:5B
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       019BF2E230C90E7B954E9BAFF96A3335C25E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
Manifest number:          17EE
Signing time:             Sun 25 Jan 2026 02:01:08 +0000
Manifest this update:     Sun 25 Jan 2026 02:01:08 +0000
Manifest next update:     Mon 26 Jan 2026 02:01:08 +0000
Files and hashes:         1: 1-RE5LtI-oYEUM5q0cKhJC4JO_3U.roa (hash: d7tHq0/WDiMxn6UKxVk4uWzuZHMqABk4mVDBFTvFdTs=)
                          2: 1pNj_76j6mMS3u4BpN5gcHIvm34.roa (hash: xSQfQP+EsZm2U+T+O/IykU1NqD6pAYR1qJHp244VQts=)
                          3: 3DWFpw79OcRxHFUgDBKVisWT3bU.roa (hash: x3h4wbAmV51TlkfTEkHGrNxK/j4eCvpQPxXmB1qILMc=)
                          4: 3qpvQqdQ3EDcZoaGOx2riVpcq8c.roa (hash: qTNQamHZ5asC3z3/r7JuROMu5QHj7RNHNTAIVoifaqU=)
                          5: 5ysiViCYjFvC9-kctDcIkY-pILA.roa (hash: G9bDJB7QDClrvtETEje7e1l6WKvZlQKdYpwndPvzGug=)
                          6: 9yoPaUhCStOTM3-c_SaSqB4RnZ0.roa (hash: oEqQojHh2aVK9IWAizqhwBRsxK4M9mlqa6pebuySDfE=)
                          7: AYC1piyu_K4ZhGKQg7A8mJ43fsA.roa (hash: ncXVxHVxZ9wYi/bTO+uuRSfatAGsH5pfP5JojKWGVfg=)
                          8: Dg57u4ys1bTlL8pLuHGvnVFYSNw.roa (hash: r/oRyoO8ZH4/jVinfaTnLetdrLoBZnt11pFEZIFP7VY=)
                          9: DvPTjOqlVSzNmVM6OOe5niz3dOM.roa (hash: d/5dKSEtJ17pNb1brsQ69f7rjX4Bvuri7lYKe2ywqec=)
                          10: GBAXciSJlrh9kIQMLSfWJUlFgXM.crl (hash: rlQIFTzMDNw2f7zQ6WQyIwcfui33ZbTwoEMeaYJIgpg=)
                          11: HcrhRtfROyUtMyYdwEAqxsg1wig.roa (hash: u1rHBHJGzvgEOJg1heYgUCIOqnoD1iQ2J3moBSCOEfQ=)
                          12: J-77ZlXsX9U2N93n4AsioUY-n30.roa (hash: 176hXqJ10VD2B6wOqNZJ0R5KmjVOqUfFRwDGeoXMTzY=)
                          13: JV9qqXJgthdEV9gSEtaAmKrXJH8.roa (hash: HbqSFDLUPF4aIt4hRE8wj3agSeKulUgEDvc2yx+tlBw=)
                          14: NTpN21eL3Rsp6kn_8ipm7Sd9W5Q.roa (hash: nLprapUqPV9Ri3l6oKOQrylBfkeWz8n1WoTNn+XlF64=)
                          15: SQRKv0Z6_hmqtMPRpJ8gU8-qRNg.roa (hash: 2pACudLrBk6yGw4NBGywXzJ+cVqO1szI/T9hnvWe6SY=)
                          16: TPuALIMyKHTAJN5eUnqBGspsy3E.roa (hash: ebun0C4ydv6bPmHr73fW6etob8nrsagGkwWDv5pcdsU=)
                          17: Z3V9TUK8r_FHToolycVMTDaUt6s.roa (hash: P5lyG9E35XlKCrzdnPlPZUSNkm6dswkn04uQqnS0qVI=)
                          18: ZyVnmvJN0yIID0-dwQrcXmjY9VA.roa (hash: q9igcRUqon9S/2eYkbsUmIWEB+JdxtvBxWbuRQimv3Y=)
                          19: hJ99v2p-kjtGOUcKBEPiUv62q80.roa (hash: x0WHYTjVa1fBBNhi71QSt5FoK7FqF26Qyuiibh4AUiY=)
                          20: n-5zEzSs351qrnGuBMspmFZCEI0.roa (hash: MYJupN5IEmr6ZufnYdbMso7OMy/8DIghG/NxlYmVwKI=)
                          21: okyZecfvIRqZODTkhqFVtVBqWlo.roa (hash: JURGYJBnqyW45CKjgzH7wE+F8JuOD/bJVrdaAV1cAA4=)
                          22: xhYmgGiF89Fz7bZhNjTbr52OYzc.roa (hash: Y8zNHkd72sloXAusIAjhHWfHMe8tp3rm6YXqz7dcQSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:e2:30:c9:0e:7b:95:4e:9b:af:f9:6a:33:35:c2:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Jan 25 02:01:08 2026 GMT
            Not After : Jan 26 02:01:08 2026 GMT
        Subject: CN=907b801ded29c1cb9bdf7867cf562cfca92bf75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:86:36:21:e4:66:25:ae:5e:eb:0e:92:4b:ea:
                    c2:f4:3e:4a:9e:d4:4d:7e:33:dc:e1:2d:bc:b7:f1:
                    07:d0:c8:75:79:61:88:4e:28:a5:7b:3c:5a:14:09:
                    79:22:3d:b5:3d:b3:d5:6c:8b:db:5a:ca:03:d5:8d:
                    3c:c9:2f:16:d6:ac:df:4d:e3:4c:04:d1:77:59:a7:
                    df:04:8f:53:ce:42:27:dd:dd:27:61:22:a7:0b:ed:
                    f7:88:8a:18:3e:9b:86:65:b9:5f:34:91:61:ce:0b:
                    c7:85:9b:9f:87:13:b9:9b:34:9d:72:f1:75:44:74:
                    f7:c1:ea:14:bb:8d:13:2b:5f:07:6c:52:7c:02:d8:
                    f0:b2:3c:b0:6e:9c:34:55:c2:69:cf:63:4d:e9:aa:
                    46:56:c5:76:3d:2c:77:c1:f1:32:80:02:0d:5d:8e:
                    46:a5:c7:e6:81:0b:40:e4:ab:07:2d:f2:ce:10:67:
                    60:63:56:c2:b2:68:e0:de:4b:1d:5a:79:4e:e2:e5:
                    09:3f:5e:29:ae:16:13:15:97:bd:9f:91:7a:dd:ba:
                    46:66:3c:08:1d:87:7b:f6:b5:d8:8f:b2:f4:9d:08:
                    71:90:a9:25:ce:aa:a7:51:57:c7:5a:e5:e3:87:ad:
                    fa:7b:75:ad:5b:fe:2f:22:b8:32:6a:f2:8c:fe:11:
                    29:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7B:80:1D:ED:29:C1:CB:9B:DF:78:67:CF:56:2C:FC:A9:2B:F7:5B
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:96:d1:7b:a9:8b:9b:2c:1a:e5:eb:7c:a6:b2:58:f4:5a:df:
         f1:9f:74:72:c3:b9:f4:c3:9d:fc:86:09:46:00:cc:2d:b4:ec:
         96:ee:47:60:25:97:8e:cb:8b:f7:5b:2a:27:0e:53:ea:6e:40:
         e9:99:49:e3:ed:5c:8b:2e:9e:04:ce:de:85:d1:aa:de:9c:55:
         e1:59:73:00:90:d4:95:d9:d5:17:c0:01:8c:0c:13:cb:69:0e:
         91:95:f9:2b:61:9f:5b:cb:c7:de:a5:e1:28:30:60:6b:ed:cf:
         da:9b:16:dc:ce:ce:f8:6e:7a:57:3c:be:87:b7:c7:68:40:23:
         a4:fa:ca:3d:2a:19:26:a5:e2:64:c2:30:44:1f:96:3d:0e:fc:
         09:61:f7:82:3a:40:2d:42:77:36:54:df:9e:4d:b0:15:5c:7e:
         e5:3e:0a:3a:39:84:e9:81:4f:73:f2:3b:38:03:88:1c:9f:25:
         49:80:65:d0:31:74:ac:54:d1:0f:dd:39:17:bc:40:eb:b7:a3:
         c1:ac:a3:73:50:07:f3:f8:14:42:f3:77:df:3e:c6:64:d7:26:
         02:7c:b3:6a:b6:88:56:05:ad:5f:69:b9:84:30:72:89:85:e6:
         e8:0f:9a:e9:2d:61:af:d3:ff:7b:bf:f2:e8:1a:48:3f:ff:01:
         d8:ec:d1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:44:09 2026 by rpki-client