This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft
File:                     9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft (raw, json)
Hash identifier:          c5MLAXhlvKhYbPyO7RUbpkU7isjxLg22w0ig7Nk8TpY=
Subject key identifier:   E9:1F:79:6A:5C:18:EF:FC:1F:05:91:22:D1:2E:49:35:3D:E7:E8:E5
Authority key identifier: 94:95:A8:16:26:FC:F6:E7:9C:AF:B0:FC:72:66:C5:A7:70:B4:57:F3
Certificate issuer:       /CN=9495A81626FCF6E79CAFB0FC7266C5A770B457F3
Certificate serial:       6D30D45FB19DCB0CE59680D82034E18EE95A2305
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.cer
Subject info access:      rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft
Manifest number:          67
Signing time:             Tue 20 Jan 2026 14:03:17 +0000
Manifest this update:     Tue 20 Jan 2026 13:58:17 +0000
Manifest next update:     Wed 21 Jan 2026 15:04:17 +0000
Files and hashes:         1: 326131343a373538303a336666643a3a2f34382d3438203d3e203434383232.roa (hash: B+B2Yl/O36Gn5Y+oNxHVV8LhWuDlCy4ZF9J305MP6uY=)
                          2: 326131343a373538303a336666663a3a2f34382d3438203d3e203434383232.roa (hash: Kicy9HxyZzEtWNVt6uGQnpFMpN2VWc9gbNotwWywYxs=)
                          3: 326131343a373538303a336666653a3a2f34382d3438203d3e203434383232.roa (hash: fOomgPnkxPgBzURmASJKUZ+RYP9k6NrKcBNGVrv8WMY=)
                          4: 326131343a373538303a333033303a3a2f34382d3438203d3e203434383232.roa (hash: Z8b3CXR+NYpLiWL8vo85cxs+rnI+69wtmeZr+Sekgos=)
                          5: 9495A81626FCF6E79CAFB0FC7266C5A770B457F3.crl (hash: DtvY2KevA+46JG0Iw6Mjh7Mw199Ep1wEntHKn9L1C+g=)
Validation:               OK
Signature path:           rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.crl
                          rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 15:04:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:30:d4:5f:b1:9d:cb:0c:e5:96:80:d8:20:34:e1:8e:e9:5a:23:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9495A81626FCF6E79CAFB0FC7266C5A770B457F3
        Validity
            Not Before: Jan 20 13:58:17 2026 GMT
            Not After : Jan 21 15:04:17 2026 GMT
        Subject: CN=E91F796A5C18EFFC1F059122D12E49353DE7E8E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3a:02:c7:fe:ee:79:c9:bd:28:71:42:16:ec:
                    39:e5:22:d0:25:eb:80:fe:4c:fe:b9:54:5e:3c:c0:
                    45:bf:c9:5c:fe:65:e2:58:5c:7b:bb:bc:d3:a4:53:
                    cd:65:85:9b:cf:7e:ec:b1:f3:0b:c5:25:ba:21:d5:
                    02:69:2f:49:7a:08:bf:16:13:5b:08:8f:25:72:3a:
                    2b:fd:d4:71:dd:e9:e9:4d:83:ce:2f:7b:07:fd:84:
                    a4:87:5f:67:29:dd:5c:67:17:47:3a:f9:4b:0d:c7:
                    7e:5d:4e:37:f9:45:37:15:d2:c5:5d:9e:41:fa:5a:
                    42:43:bf:52:34:8a:ca:00:55:76:7f:53:63:81:32:
                    79:9f:e6:8b:50:2a:63:3a:58:c4:d0:d1:f8:02:e0:
                    dd:ea:a3:14:d3:ab:46:28:5e:63:37:94:83:a1:dd:
                    a4:95:37:18:19:90:ae:f3:a4:ad:3e:da:5b:02:30:
                    6b:f6:95:97:f5:45:50:78:a2:0b:ba:f2:06:a2:18:
                    25:b0:b5:5b:f2:47:5e:ea:d0:0e:2c:36:df:d4:75:
                    d0:cc:bd:a5:82:aa:30:8b:47:6d:fc:5a:e2:02:b3:
                    57:78:f1:79:79:f7:93:a9:75:19:39:45:0f:e4:0d:
                    5e:26:2d:3c:21:c2:8f:57:30:02:2d:d6:c6:8f:61:
                    45:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1F:79:6A:5C:18:EF:FC:1F:05:91:22:D1:2E:49:35:3D:E7:E8:E5
            X509v3 Authority Key Identifier:
                keyid:94:95:A8:16:26:FC:F6:E7:9C:AF:B0:FC:72:66:C5:A7:70:B4:57:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:d6:42:54:57:b0:ef:39:08:48:75:84:85:7f:7f:d0:51:3b:
         e5:4f:a7:ca:70:76:50:7c:73:1e:92:f2:05:45:57:d8:d5:e1:
         3c:37:5c:43:d9:bb:2f:c1:cd:be:83:92:75:57:5d:7b:f1:81:
         96:c6:b3:12:53:c8:78:5e:fc:a2:b9:66:66:ba:db:65:60:b8:
         86:f6:52:c4:af:d4:ea:c4:0e:66:f4:04:f9:cc:71:fc:d6:4c:
         fd:99:25:2f:06:ba:a2:38:d5:6b:b0:57:fb:8a:b1:55:8b:86:
         ca:90:0f:2a:64:c6:fc:b6:4e:53:bb:a5:6b:a6:40:78:98:f6:
         35:e8:ea:3f:cd:33:76:ab:34:fc:e8:4d:87:c6:00:4c:fe:13:
         cf:08:71:d9:7a:ee:42:14:e5:e3:32:85:54:44:b1:f5:1c:3b:
         7d:1e:94:3a:1e:e2:5c:a8:e2:26:4d:8d:02:39:37:20:b3:be:
         e5:c7:87:10:5d:45:cd:96:3e:ae:58:f7:47:31:f0:77:04:41:
         d2:c6:68:a4:f5:b4:a3:ac:fc:f7:34:16:5f:8d:c9:fc:ae:1d:
         ca:ea:47:00:2b:f4:67:bb:64:0e:77:da:f1:0f:29:c0:9f:d1:
         8d:87:0a:cd:94:38:14:e1:f3:c2:f7:09:50:ba:e9:a7:17:c0:
         bc:d6:e0:f3
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIUbTDUX7GdywzlloDYIDThjulaIwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ5NUE4MTYyNkZDRjZFNzlDQUZCMEZDNzI2NkM1QTc3
MEI0NTdGMzAeFw0yNjAxMjAxMzU4MTdaFw0yNjAxMjExNTA0MTdaMDMxMTAvBgNV
BAMTKEU5MUY3OTZBNUMxOEVGRkMxRjA1OTEyMkQxMkU0OTM1M0RFN0U4RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdOgLH/u55yb0ocUIW7DnlItAl
64D+TP65VF48wEW/yVz+ZeJYXHu7vNOkU81lhZvPfuyx8wvFJboh1QJpL0l6CL8W
E1sIjyVyOiv91HHd6elNg84vewf9hKSHX2cp3VxnF0c6+UsNx35dTjf5RTcV0sVd
nkH6WkJDv1I0isoAVXZ/U2OBMnmf5otQKmM6WMTQ0fgC4N3qoxTTq0YoXmM3lIOh
3aSVNxgZkK7zpK0+2lsCMGv2lZf1RVB4ogu68gaiGCWwtVvyR17q0A4sNt/UddDM
vaWCqjCLR238WuICs1d48Xl595OpdRk5RQ/kDV4mLTwhwo9XMAIt1saPYUWZAgMB
AAGjggIqMIICJjAdBgNVHQ4EFgQU6R95alwY7/wfBZEi0S5JNT3n6OUwHwYDVR0j
BBgwFoAUlJWoFib89uecr7D8cmbFp3C0V/MwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud
HwRiMGAwXqBcoFqGWHJzeW5jOi8vcnBraS5neHQubmV0d29yay9yZXBvL2d4dC1h
czQ0ODIyLzEvOTQ5NUE4MTYyNkZDRjZFNzlDQUZCMEZDNzI2NkM1QTc3MEI0NTdG
My5jcmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9y
c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2Zl
LTQyOTktYjA3OS0zMDllZDk3ZjM4MjQvMC85NDk1QTgxNjI2RkNGNkU3OUNBRkIw
RkM3MjY2QzVBNzcwQjQ1N0YzLmNlcjB0BggrBgEFBQcBCwRoMGYwZAYIKwYBBQUH
MAuGWHJzeW5jOi8vcnBraS5neHQubmV0d29yay9yZXBvL2d4dC1hczQ0ODIyLzEv
OTQ5NUE4MTYyNkZDRjZFNzlDQUZCMEZDNzI2NkM1QTc3MEI0NTdGMy5tZnQwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAJDWQlRXsO85CEh1hIV/f9BRO+VPp8pwdlB8cx6S8gVFV9jV4Tw3XEPZuy/B
zb6DknVXXXvxgZbGsxJTyHhe/KK5Zma622VguIb2UsSv1OrEDmb0BPnMcfzWTP2Z
JS8GuqI41WuwV/uKsVWLhsqQDypkxvy2TlO7pWumQHiY9jXo6j/NM3arNPzoTYfG
AEz+E88Icdl67kIU5eMyhVREsfUcO30elDoe4lyo4iZNjQI5NyCzvuXHhxBdRc2W
Pq5Y90cx8HcEQdLGaKT1tKOs/Pc0Fl+NyfyuHcrqRwAr9Ge7ZA532vEPKcCf0Y2H
Cs2UOBTh88L3CVC66acXwLzW4PM=
-----END CERTIFICATE-----
Generated at Tue Jan 20 23:52:09 2026 by rpki-client