This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
File:                     GRk80M-5OVmJNY4DljEs-7HIj_4.mft (raw, json)
Hash identifier:          A/4PsA77kfyeDQF6m3nIkALqrfVjBwCoFp9rOHZw/AE=
Subject key identifier:   90:C6:21:DA:B0:FA:BC:90:2E:B9:15:68:C2:35:03:43:9B:46:77:5B
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Certificate issuer:       /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial:       019BFD9CEB8E4189575C4CF7C85D55239054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
Manifest number:          1923
Signing time:             Tue 27 Jan 2026 04:01:17 +0000
Manifest this update:     Tue 27 Jan 2026 04:01:17 +0000
Manifest next update:     Wed 28 Jan 2026 04:01:17 +0000
Files and hashes:         1: GRk80M-5OVmJNY4DljEs-7HIj_4.crl (hash: pXQaTbDRlnSkt1+idEOhkEpOxfJnGk1H4BEUb6kEvW0=)
                          2: O4IU7iPNzu2A0vwW8vK2sWpcBEY.roa (hash: 5KKl9g7AymUe6yQRBzgksD9k/xpn1hkBb8CCzOtRLBo=)
                          3: Of9TcIYC7-d7z15OSSATpqmkHE8.roa (hash: qQQWgH0Is+wmU5bOnyHk93RvwMBHT9bFgsWHtx13N6c=)
                          4: UZPdwTIQfWKOnGJwcTjWUkEQf5c.roa (hash: JrK8JTJISVqZqxkS99JHhNEb/sltN6+rvR3A7dFrhWM=)
                          5: fWJsYVgQL5CmKB9LVnueb5k5Zmo.roa (hash: bPkpgWGDJi90Zjbu3ytyLe5FiLyyElxalkB8o9TUe7w=)
                          6: oW_FIcyEUkX61KE2IHd2ICPcwP4.roa (hash: HBj5S2pG7gcpSo5gnpuf2s0t9RQaygJDmBwJYZXDb5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fd:9c:eb:8e:41:89:57:5c:4c:f7:c8:5d:55:23:90:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
        Validity
            Not Before: Jan 27 04:01:17 2026 GMT
            Not After : Jan 28 04:01:17 2026 GMT
        Subject: CN=90c621dab0fabc902eb91568c23503439b46775b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8e:75:83:c8:d9:e0:84:eb:19:7d:5b:27:fa:
                    7a:8a:16:32:d8:33:16:33:30:f9:d0:f4:5f:6d:70:
                    3f:14:8f:71:d5:55:4f:0c:79:c5:11:e0:88:88:7f:
                    bb:c0:10:b7:6e:c2:c1:1a:cc:72:9a:85:d6:c4:d2:
                    bc:4f:85:4a:fb:7a:31:a9:f0:ec:fd:bd:1f:b3:d9:
                    3e:44:11:4b:30:d4:b1:8f:e8:ed:f1:71:ab:1f:d1:
                    9f:69:c3:0b:58:ef:59:b4:d2:60:a5:c7:97:5f:aa:
                    bc:c8:5d:aa:ab:59:8a:a5:2a:1a:03:52:89:ba:7b:
                    16:0f:e9:8f:c1:28:ba:f2:f8:12:b9:e0:eb:af:ff:
                    3a:cb:dd:59:8e:ad:57:5d:f8:56:ec:a2:59:d8:60:
                    dd:0e:bd:9e:53:c6:6b:75:67:eb:af:da:bf:d4:5a:
                    c6:e5:56:1c:ef:18:50:4b:87:d5:c1:be:91:2d:c5:
                    13:70:15:d0:13:34:05:7d:bc:d4:e1:ae:b3:0e:c9:
                    31:39:72:8e:20:66:89:0c:40:78:65:12:00:a6:88:
                    d9:23:7d:17:ad:be:58:37:ed:a4:0e:bc:d2:f1:5a:
                    af:e9:c2:16:2d:82:b8:4c:67:2e:90:21:60:c0:03:
                    28:05:30:e4:f8:3a:6d:25:be:49:88:10:a3:82:52:
                    f8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C6:21:DA:B0:FA:BC:90:2E:B9:15:68:C2:35:03:43:9B:46:77:5B
            X509v3 Authority Key Identifier:
                keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:38:a3:c9:bd:a9:ee:ea:7c:00:57:1c:fc:c2:7a:91:09:51:
         d0:8e:e2:e3:9b:5c:2a:cf:2e:c1:b8:26:e1:99:f2:de:df:70:
         2c:7e:c1:c6:9c:b6:35:5d:d6:83:26:ff:51:2f:6f:26:45:74:
         87:61:36:0b:aa:0c:2c:c4:b5:c1:a6:ec:b7:7a:58:2c:18:04:
         68:8c:16:09:a7:c4:50:e6:28:10:ca:59:5d:86:50:de:5e:df:
         94:0d:c3:f2:2d:ef:3a:e6:8f:6e:99:d1:af:93:68:fc:d8:44:
         b3:27:39:56:8d:68:88:c6:2a:d5:37:09:20:b0:4d:ce:29:7f:
         13:9c:7c:34:c1:3a:77:04:fe:e3:b9:cc:2d:50:f6:51:95:77:
         79:e1:91:a8:c5:56:73:52:66:dd:03:fb:95:8c:8b:e2:90:ea:
         c5:ca:1c:dc:8f:d1:d0:74:ec:ce:00:7b:df:91:4f:7f:1f:98:
         71:83:8e:41:4a:7d:05:ed:ef:7a:98:3f:d4:67:f5:1b:23:45:
         3d:8c:be:2b:fa:ed:da:f3:99:eb:8c:49:63:cf:47:b4:a9:ae:
         8a:ab:68:49:1d:c4:1c:7c:51:4f:cd:cc:9e:2a:94:d5:93:23:
         a4:72:43:29:5a:91:75:df:7b:98:a2:74:07:4e:c0:83:8e:1e:
         eb:98:2c:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv9nOuOQYlXXEz3yF1VI5BUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MTkzY2QwY2ZiOTM5NTk4OTM1OGUwMzk2MzEyY2ZiYjFj
ODhmZmUwHhcNMjYwMTI3MDQwMTE3WhcNMjYwMTI4MDQwMTE3WjAzMTEwLwYDVQQD
Eyg5MGM2MjFkYWIwZmFiYzkwMmViOTE1NjhjMjM1MDM0MzliNDY3NzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Y51g8jZ4ITrGX1bJ/p6ihYy2DMW
MzD50PRfbXA/FI9x1VVPDHnFEeCIiH+7wBC3bsLBGsxymoXWxNK8T4VK+3oxqfDs
/b0fs9k+RBFLMNSxj+jt8XGrH9GfacMLWO9ZtNJgpceXX6q8yF2qq1mKpSoaA1KJ
unsWD+mPwSi68vgSueDrr/86y91Zjq1XXfhW7KJZ2GDdDr2eU8ZrdWfrr9q/1FrG
5VYc7xhQS4fVwb6RLcUTcBXQEzQFfbzU4a6zDskxOXKOIGaJDEB4ZRIApojZI30X
rb5YN+2kDrzS8Vqv6cIWLYK4TGcukCFgwAMoBTDk+DptJb5JiBCjglL4lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDGIdqw+ryQLrkVaMI1A0ObRndbMB8GA1UdIwQY
MBaAFBkZPNDPuTlZiTWOA5YxLPuxyI/+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1JrODBNLTVPVm1KTlk0RGxqRXMtN0hJal80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wZDY4ZDQtYWRiMy00ZmY5LWI3OGEt
NGVmOWQwN2M0NDA1LzEvR1JrODBNLTVPVm1KTlk0RGxqRXMtN0hJal80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8wZDY4ZDQtYWRiMy00ZmY5LWI3OGEtNGVmOWQwN2M0NDA1
LzEvR1JrODBNLTVPVm1KTlk0RGxqRXMtN0hJal80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDijyb2p
7up8AFcc/MJ6kQlR0I7i45tcKs8uwbgm4Zny3t9wLH7Bxpy2NV3Wgyb/US9vJkV0
h2E2C6oMLMS1wabst3pYLBgEaIwWCafEUOYoEMpZXYZQ3l7flA3D8i3vOuaPbpnR
r5No/NhEsyc5Vo1oiMYq1TcJILBNzil/E5x8NME6dwT+47nMLVD2UZV3eeGRqMVW
c1Jm3QP7lYyL4pDqxcoc3I/R0HTszgB735FPfx+YcYOOQUp9Be3vepg/1Gf1GyNF
PYy+K/rt2vOZ64xJY89HtKmuiqtoSR3EHHxRT83MniqU1ZMjpHJDKVqRdd97mKJ0
B07Ag44e65gs9Q==
-----END CERTIFICATE-----
Generated at Tue Jan 27 07:17:45 2026 by rpki-client