This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File:                     gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier:          f8g6vm/MBap3jbpD8WP5mULrQgx6xW/XXtiRCnVJQoQ=
Subject key identifier:   46:14:8B:28:09:F7:82:44:E0:BC:3E:10:40:16:C1:0A:F9:B0:64:E7
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer:       /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial:       019BF4622661E642007EF65B6EA73913BD21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number:          17E9
Signing time:             Sun 25 Jan 2026 09:00:31 +0000
Manifest this update:     Sun 25 Jan 2026 09:00:31 +0000
Manifest next update:     Mon 26 Jan 2026 09:00:31 +0000
Files and hashes:         1: L4uFGOHvLEPXps89rmc7cieKnGo.roa (hash: WAylc2U6EehO6X6NFUAmv8+wiqpowHD6dwxbr/1OINk=)
                          2: Wcbt97rneJ6uhU8_PT27jnNgfLI.roa (hash: qSxCnXv18dyEf04PSc7gPJRKdfJ+AzYFyylZthUkbiA=)
                          3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: T1V7Fe95dVI5mHq6xkdIKM0I3Aqf5B/g2r6JNP3gB6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 09:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:62:26:61:e6:42:00:7e:f6:5b:6e:a7:39:13:bd:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
        Validity
            Not Before: Jan 25 09:00:31 2026 GMT
            Not After : Jan 26 09:00:31 2026 GMT
        Subject: CN=46148b2809f78244e0bc3e104016c10af9b064e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6a:c2:22:93:2c:b1:29:29:c0:a3:fa:60:5d:
                    8b:3a:7e:9a:c1:17:53:d2:23:01:08:9e:11:d8:28:
                    3e:c5:23:51:31:ec:8a:90:d9:2f:48:b4:c1:95:85:
                    b1:25:dd:5c:d5:a6:81:71:7d:38:87:9d:82:17:2a:
                    ec:c7:16:e4:c7:6c:8d:99:37:77:ee:07:3a:aa:0e:
                    84:b8:41:24:91:1e:63:2a:26:75:8f:35:6d:53:2b:
                    80:c5:54:fb:e9:b2:e2:58:f4:ef:f5:30:2f:46:b5:
                    f6:10:61:77:c1:d2:34:10:0c:41:56:11:25:04:aa:
                    c1:1a:70:c7:9d:ae:90:41:50:04:1a:b3:d5:de:a2:
                    b3:94:ae:e6:60:53:76:37:1f:e7:3f:ab:0b:1b:38:
                    53:04:b5:60:7b:61:5c:af:d7:68:65:bd:05:ee:9b:
                    0e:48:71:0d:2d:c1:08:a5:5d:c6:3e:be:a2:96:6d:
                    dd:4a:87:c2:af:02:70:4a:b7:91:f2:3a:61:25:ff:
                    ad:30:68:be:26:4c:e9:3d:b8:b4:2f:09:e0:2b:83:
                    74:46:88:92:ac:af:02:27:3a:18:40:06:23:26:40:
                    64:40:d2:72:17:de:30:34:b8:62:82:d3:f2:1d:b4:
                    0d:06:7f:48:06:d4:b4:8d:91:a2:fe:41:03:e0:15:
                    7f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:14:8B:28:09:F7:82:44:E0:BC:3E:10:40:16:C1:0A:F9:B0:64:E7
            X509v3 Authority Key Identifier:
                keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:09:04:57:f0:b2:b6:c7:01:81:15:c0:43:39:1a:dd:77:1d:
         6e:6a:a8:84:a1:33:e7:5e:da:39:07:20:e4:bd:9f:68:18:0d:
         e9:c9:7c:cf:94:8c:c7:47:12:24:4b:c2:3b:62:42:e0:e6:9f:
         9a:95:dc:c8:35:70:ea:0b:a5:7c:7d:a8:0d:67:42:e7:6e:21:
         88:c5:46:d4:eb:78:ea:4a:e5:ce:a7:74:0b:78:07:fe:79:85:
         d0:cb:bc:e1:12:a7:64:79:33:57:f6:06:a1:9e:87:c2:46:97:
         79:7d:9b:3d:43:aa:6d:6c:b0:04:f7:92:7f:70:b5:f3:8f:ef:
         ad:e1:20:4d:62:72:c6:ee:3e:35:9a:21:bb:65:49:4a:ad:6d:
         dc:4b:5d:23:c7:52:79:75:0a:e0:1f:83:a0:a8:54:eb:f8:56:
         98:10:ae:24:70:04:ce:f3:8b:1f:36:de:56:4e:4b:c0:d4:37:
         77:32:e3:8d:ee:9b:54:9f:ed:87:79:27:96:1a:2b:29:e7:7b:
         a0:c6:8b:04:12:5b:f1:04:1a:cb:63:4a:9f:68:45:5f:d8:46:
         35:e2:dc:8a:98:bb:c2:72:59:5c:9e:84:4a:9d:49:c7:d7:03:
         94:94:08:b4:bb:6f:89:0a:da:07:25:9a:24:28:a7:48:48:66:
         8f:4a:a7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:58:38 2026 by rpki-client