This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
File:                     GfGp3RJvNyN84gD7hhb_k3vKlmw.mft (raw, json)
Hash identifier:          5YdySa0YIpLK7ypLH8n23eu6GFhgzQbBZrZY6Ci9ZF4=
Subject key identifier:   4E:AE:2B:2B:03:99:79:67:46:6D:BC:A2:28:46:65:9C:DD:F5:FD:C1
Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
Certificate issuer:       /CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Certificate serial:       019BF79A83E866AB416553325BB6EADA7C8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
Manifest number:          17E7
Signing time:             Mon 26 Jan 2026 00:00:57 +0000
Manifest this update:     Mon 26 Jan 2026 00:00:57 +0000
Manifest next update:     Tue 27 Jan 2026 00:00:57 +0000
Files and hashes:         1: 7owqXESGy_RXh39I2zXYrOmIRmY.roa (hash: uD/kXqY4+DVU4PEvK0O92LooxshLndRFHktHnH9fzjs=)
                          2: FhTqn0nI2AOefAde-zGtbwEbRRY.roa (hash: pvmj7N2aWwyL4DhPFHc9oWpCfcCMtoks7zjIuX/XA3M=)
                          3: GfGp3RJvNyN84gD7hhb_k3vKlmw.crl (hash: eQE66bglsJYNO9Ka7HmUKh9MzLDU5v2mLfJpEpmb6EQ=)
                          4: IjVQWwZv9EJg_zhL2dYrs3DlkR4.roa (hash: 9Z9gCW1kabV4H10WypJ+CcaUnOFek5gLKpjj5o/RjC0=)
                          5: nnLZ_anjPSOLRayVOL-RzewgHwI.roa (hash: 2WaAIYb59kGhe6tvXHb5ioUayH6vLhFoDq8NRlocKJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:83:e8:66:ab:41:65:53:32:5b:b6:ea:da:7c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c
        Validity
            Not Before: Jan 26 00:00:57 2026 GMT
            Not After : Jan 27 00:00:57 2026 GMT
        Subject: CN=4eae2b2b03997967466dbca22846659cddf5fdc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fe:08:ba:01:8b:07:4e:01:ae:5e:d0:b7:68:
                    bc:21:45:54:bc:9e:77:b3:24:c5:8c:28:29:02:a5:
                    35:3d:85:be:29:81:8f:f2:73:11:45:11:dc:ec:04:
                    cb:f1:ae:47:99:08:20:8c:f0:9e:4e:11:a4:94:b1:
                    f5:96:59:14:76:5a:33:f9:88:cd:53:95:e3:84:00:
                    93:33:9c:43:e3:e8:14:a1:07:29:59:b3:c0:f7:93:
                    a3:61:4b:24:89:81:ae:e4:79:be:70:e1:fd:3d:d7:
                    60:13:ba:7b:57:99:13:e3:e8:d6:e0:6e:8e:c5:22:
                    62:c0:59:09:51:6f:37:4c:bb:fb:09:48:2b:b8:0f:
                    b1:8a:ab:ad:82:06:9a:9b:5e:cd:cd:5d:c4:94:4f:
                    9d:9c:aa:91:c4:95:c1:c9:d7:d5:7d:ad:4b:d2:70:
                    18:b1:88:43:b5:da:7d:9d:a9:b5:2c:fd:1d:31:98:
                    38:70:96:10:2c:55:59:2b:29:29:2d:fb:74:9d:00:
                    1e:5e:ff:43:e7:57:92:5e:21:10:5e:60:d0:a4:8d:
                    d7:32:f0:a3:87:6d:51:88:51:e6:2e:6b:69:47:82:
                    a0:a7:3f:8e:17:7a:53:8a:a8:02:4c:58:12:1f:bd:
                    84:ba:e1:21:e8:b3:07:67:21:13:54:2a:27:4b:58:
                    f6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AE:2B:2B:03:99:79:67:46:6D:BC:A2:28:46:65:9C:DD:F5:FD:C1
            X509v3 Authority Key Identifier:
                keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:b4:c0:b1:69:52:6b:25:9e:d3:98:15:88:dc:7a:23:a5:c7:
         b3:bd:62:9b:3a:84:fb:7e:a4:af:8d:31:9d:67:b2:d6:17:d0:
         82:e6:87:06:ed:50:33:66:c5:9b:6d:26:2f:c6:c3:45:6f:26:
         e8:4c:4d:b6:96:09:b2:79:9a:7d:e3:9c:48:62:19:a5:cc:1f:
         21:37:90:8c:32:e2:e9:6f:00:44:6f:6b:85:49:1c:6c:f9:0e:
         f7:55:5f:3e:ed:bf:9b:98:3f:61:00:09:0d:bb:76:84:b7:ee:
         b9:40:62:84:85:7f:2c:97:01:9d:88:19:25:e7:f7:27:66:e4:
         0a:6d:d9:a2:09:54:b1:2b:17:b1:f6:66:d7:3c:28:d9:77:46:
         fc:a6:c8:2d:e3:34:d6:c2:c2:2e:9f:ab:25:36:67:70:b6:20:
         5c:5e:d1:63:91:99:1e:9b:ed:fc:93:f7:59:c5:d1:ea:00:0b:
         c8:e6:c6:29:83:b7:cd:3d:61:e4:82:6b:9a:50:f0:9f:86:a5:
         76:86:9f:3c:f6:c8:3c:fb:ac:5a:d9:11:c9:25:4f:9f:9c:e9:
         7d:92:c2:bf:0a:86:68:b0:4e:55:80:07:51:b7:6c:48:b4:25:
         f1:18:73:ee:c1:0c:39:8f:21:73:5e:d8:c6:df:a5:4a:47:c9:
         c8:3c:c4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:02:22 2026 by rpki-client