This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
File:                     GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft (raw, json)
Hash identifier:          BrpNYnoPNtcxb1gD8DXhf35HwMJmGrRS2qeYiyuuufk=
Subject key identifier:   28:A7:A1:71:7C:A3:F4:53:4A:DA:E2:21:D1:36:3E:96:06:11:3A:A7
Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
Certificate issuer:       /CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Certificate serial:       019BFA9C4284E3B0DDA52D49FB0556035C2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
Manifest number:          17F1
Signing time:             Mon 26 Jan 2026 14:01:43 +0000
Manifest this update:     Mon 26 Jan 2026 14:01:43 +0000
Manifest next update:     Tue 27 Jan 2026 14:01:43 +0000
Files and hashes:         1: 2OlXrMHEGCGdCIkFH9DwRH8m-_Y.roa (hash: EyDlhcGNJI5g7xCKKg+SLdnpu6y3b/Owb67XHcNo4LM=)
                          2: GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl (hash: GxwVqCUqhsOqXPmFgUQNEABBNAoo5edGW+P7cXeelYI=)
                          3: frVqf7Qb9l_BsfQariFSVHz8ob4.roa (hash: YJglM4AaABJW1ebpCVy7ykfzKfkx+c4T33VsT0DyZ/M=)
                          4: lfErVfdcsg1i7vmEMxFgsv4bocY.roa (hash: 8hpg8Z6qBYfbCxzlnCltHugOjct8isyofGtd0CKT8v8=)
                          5: xoTCt08cS7BgB_IaDphUNXFIRxo.roa (hash: s3xQf9aSy+8qTNIu1cEAABJrY28zwSkcrisFpnI+ffU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:9c:42:84:e3:b0:dd:a5:2d:49:fb:05:56:03:5c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd
        Validity
            Not Before: Jan 26 14:01:43 2026 GMT
            Not After : Jan 27 14:01:43 2026 GMT
        Subject: CN=28a7a1717ca3f4534adae221d1363e9606113aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ca:d8:86:f5:d5:97:e8:34:b1:e4:bb:1b:60:
                    da:1f:5e:ae:c2:3a:fd:3f:2b:30:ac:49:bf:6a:2b:
                    67:1d:26:df:40:77:47:6a:7a:be:f7:05:02:5a:26:
                    65:64:84:a6:14:2f:aa:a7:e4:f9:b7:ce:0e:63:55:
                    0c:bf:2c:a3:04:a3:c8:34:76:21:69:fd:ae:55:0a:
                    1c:3e:54:d0:ab:6e:69:42:1c:82:b3:d7:7a:26:11:
                    3d:39:0f:77:1d:8c:c1:b3:a1:cf:ed:07:5f:35:9c:
                    dd:7a:e8:13:07:58:73:df:b7:d7:1b:87:11:05:7f:
                    18:b4:6c:4c:9d:d4:ff:88:ee:a3:18:e4:74:5d:b8:
                    74:ea:ad:7a:80:db:5c:14:d5:57:84:ae:ca:16:27:
                    98:58:0b:7b:9b:26:69:3f:e0:41:ca:47:20:66:09:
                    94:c3:e6:e9:f1:aa:89:ac:82:25:94:b5:02:9d:f7:
                    cc:bd:fc:cc:44:d2:f8:79:d4:f1:fe:9e:a7:f8:ca:
                    bc:b0:a5:5b:ce:98:df:4e:23:bd:e4:cb:13:da:b2:
                    b6:b9:e4:0c:9c:3d:44:d9:71:8b:28:37:df:87:bb:
                    ab:2e:06:b7:a2:be:81:41:7e:16:9c:a6:e0:3d:a4:
                    4d:91:fe:29:a5:8d:a0:22:aa:fe:b4:dc:b3:10:b0:
                    db:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A7:A1:71:7C:A3:F4:53:4A:DA:E2:21:D1:36:3E:96:06:11:3A:A7
            X509v3 Authority Key Identifier:
                keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:a0:88:dc:7b:16:a9:77:c1:a1:32:f1:db:1d:f1:88:aa:1e:
         d8:82:2f:07:44:62:7b:7e:53:68:e5:50:08:7e:ad:0e:d7:6f:
         fd:0d:8d:0e:38:98:09:6c:3c:05:99:fb:d2:0b:bb:4b:25:b0:
         11:4e:2d:f2:21:c2:0b:8f:4c:31:45:83:ec:93:ba:27:ce:45:
         db:36:b9:1f:bf:31:8c:f9:0c:bd:99:45:52:c3:54:b2:f9:1c:
         36:94:6a:fd:4b:94:de:b7:1b:16:fd:16:96:c2:59:44:90:71:
         57:30:2a:cc:e4:1d:a1:53:78:dd:14:10:a4:0e:da:42:a1:04:
         7b:ae:ab:f5:3b:70:de:42:5b:6f:14:47:0f:ef:a0:b9:e6:5a:
         75:2b:75:68:57:3f:8f:1b:13:98:3a:6c:c1:ef:d6:d9:80:66:
         89:4a:a9:61:96:07:10:b4:a8:9f:45:11:cc:a5:b6:27:5a:33:
         d9:b4:e5:fa:b8:a3:79:ee:25:59:2a:20:ab:43:7d:c2:2f:3d:
         85:bf:eb:f7:55:f7:b8:a6:3e:35:bc:ba:a2:b5:35:dc:d2:39:
         3d:b0:df:06:7f:81:44:84:01:9d:11:be:9d:0b:2d:1a:f6:f6:
         b8:fd:33:06:37:af:df:21:01:02:32:6e:5a:0d:47:51:23:2c:
         00:e6:2b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:11:53 2026 by rpki-client