This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
File:                     GJ1rVdamiO5eM4GIO7WvaEMyduM.mft (raw, json)
Hash identifier:          IC+iNWI38gMhMtlV4kqbCdvomcbUL0qSksXq5ezVMGs=
Subject key identifier:   6A:DE:6A:7E:A2:D0:16:A6:A3:93:8F:5C:CC:36:91:5F:30:91:04:75
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Certificate issuer:       /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial:       019BFB3FFCCC9ECFD4D02109A76512E02B33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
Manifest number:          099D
Signing time:             Mon 26 Jan 2026 17:00:33 +0000
Manifest this update:     Mon 26 Jan 2026 17:00:33 +0000
Manifest next update:     Tue 27 Jan 2026 17:00:33 +0000
Files and hashes:         1: 2IgI2Ov0Fee-PwRq_weL6Nhj83I.roa (hash: HdYdfg7KzjjDTOgVzLOr5/bwdXvaXOYOwg34rUKYE80=)
                          2: 8d1TGVzn_DMdZ6n8RJ9ANKIdKwo.roa (hash: XGi2dMcjiow8SPFk+dkz5coR9Tc9b4OF22dtNkjQ4js=)
                          3: AefDuTJ4ZK8s2ox-WeMFdNh_-P8.roa (hash: mP9r5bHKqvTF04z/muFWJWKezK9dgv4QboSZ9CrEMjQ=)
                          4: AtTsCBxocJYnVAs43sOHtjGuox8.roa (hash: 6rodAK3l9JGAkmSOq2mMluQTtVgP8JgwhuN5k6JfBmE=)
                          5: GJ1rVdamiO5eM4GIO7WvaEMyduM.crl (hash: Qeh0HZdk0pJWsb+nQtiPrn0r00Q1cuLySUqWABCzH1M=)
                          6: GPDp9plmScdMQY8Xt7PLltMqyFk.roa (hash: kn5LMZ9IDimoqU2fH9sXquKqrIXG35nTc0YpDs18ygU=)
                          7: LNkI4m5Q6DkR7A1HiJYQftYyohM.roa (hash: cpYgRe8eut0U8jQJ6MFVl+er//uQSbxsiZcNyxgf3go=)
                          8: NEq1_nGnRgy9ZqRE-TWWtWlrj0A.roa (hash: hACJLXbiQQybEmA2FC3ErE869vzK4Czo2p45asoCTqw=)
                          9: O5-viCq097sF3_cL7F4wSdYUS9U.roa (hash: eSmerYP3We0BPChWFCRb6LjkZ9xAJBhVg995TBWuALU=)
                          10: PkHhyk16iXPkVs8JIxspom8O8uI.roa (hash: nOzNMNHq9+YfHt2144BtLwNcyjKCG7zDH+CDk93kqV8=)
                          11: U1wExHgLqik9ennJ-zCwA8QG0Es.roa (hash: +krTPLmLg567MpkwQKDO1W1rHWzpDCH1WMo44ZmuLW8=)
                          12: YTveLzFcwn9PCn7P5tldK60DLfI.roa (hash: 080W1R2Jn/sJ4IymzJRkcUVnMXjNylopeVD5gy4tg3c=)
                          13: Z8QfOcCFDhXqdNQ18klfU0gx5Cg.roa (hash: 4yN2dlHzReD/a8HNsMDp9YD/82UrxIQcLwXYi54rfcY=)
                          14: _Fm7TlXl5OFQ6QHeUiBqKDQV6-A.roa (hash: roxx1jTurtbiqD7dYa6cwT1bGXKctEf1858p88Dv+vo=)
                          15: aQL-QgzBoFHwD6FPBMOxZizIfVI.roa (hash: sVeXUiCfsCZvClsm84u2EWIKU3Bpl8jTIXuMZA3WpDA=)
                          16: d1OmJ5EbUHtADnyIohLW9jC5Wjo.roa (hash: yBVfSKcBt77ogbUo89PUUnSGbbNLrBsb2eo4WCv4VgE=)
                          17: ffydp0NOmFPZ72JXoCt3YGU40zY.roa (hash: kw9RERQyHNlAIwT4DYgjP3QdAZ/WPIN7ZL0MkKytZVY=)
                          18: kK-6fQrzsRk0MQ6JvvaSNaKSTKs.roa (hash: 0exZUPcXiwTKpSTKVCr4NknGMyTmcx77pbjOlPukMY0=)
                          19: mL8lAxWE1vx2gACaArt4Elb3jj8.roa (hash: Amb3PyWffn1XjgNEsm8nCzUlUMBMyYKDewByQ77WAgo=)
                          20: ob0tki58wxHPraW7cmAWjNuCzNs.roa (hash: 8pm794I9YLrUb9NIEkbxR08BBG7U1MWCb/Ty9fwgJsQ=)
                          21: w2VS6O1Fa2u7X7fNOtFhDoX_RV8.roa (hash: 9WLY+XSWvisF7e//wWcAPmekfE4wm5ifiUJtVovzeGI=)
                          22: xjeDdXf7ijAeReyulaCu9tLAuOg.roa (hash: NZX+NPDqKSDfommugazbgO0SZWT5a+JUA0X/7w1w800=)
                          23: z7Jky_l_vERGZmnbRTbQHo6iSl0.roa (hash: /zMH/gs7zUW2ybBqzyKAL9kXu6AlniUMtgtFZvFiuYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:3f:fc:cc:9e:cf:d4:d0:21:09:a7:65:12:e0:2b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
        Validity
            Not Before: Jan 26 17:00:33 2026 GMT
            Not After : Jan 27 17:00:33 2026 GMT
        Subject: CN=6ade6a7ea2d016a6a3938f5ccc36915f30910475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a1:60:be:fe:61:22:3f:59:8a:85:e1:01:0f:
                    29:4f:92:7d:72:bb:d4:1e:29:c8:3d:5e:5f:26:6b:
                    7a:7e:b9:5f:06:6f:b3:26:21:e8:eb:5a:51:36:01:
                    78:1c:3e:c6:6f:3a:0b:f0:4a:cd:b6:6f:6d:58:fd:
                    f7:d2:fa:e6:55:11:c1:21:24:ee:01:63:bd:87:4a:
                    44:17:d9:13:f5:97:f6:34:a7:7b:5c:c5:ab:51:ba:
                    37:9d:ac:af:95:94:46:5e:25:b4:7c:d1:b0:19:d4:
                    f6:44:91:22:54:6e:62:b6:c9:3a:5e:38:9a:e2:bf:
                    b4:4e:cd:21:94:b2:db:b7:d7:ee:b6:92:c5:98:aa:
                    1f:aa:42:8c:5b:7e:df:a3:df:d5:9c:43:ee:25:00:
                    30:cc:8f:de:88:9d:e9:62:14:15:35:8c:46:3e:75:
                    03:68:76:b0:83:f9:75:f3:0a:6f:75:db:2b:8d:d9:
                    41:9e:25:a7:4a:08:e7:95:86:72:3f:a2:b7:be:41:
                    9a:29:78:86:b9:73:c6:93:7e:31:06:5c:b8:d7:c7:
                    79:83:e8:19:5d:26:ca:71:99:61:1a:3b:45:95:ad:
                    f4:6f:15:2c:33:1c:d7:98:f8:c4:d8:64:dd:0b:32:
                    53:fc:fc:50:b0:72:81:d8:cb:66:e2:df:01:24:d2:
                    08:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DE:6A:7E:A2:D0:16:A6:A3:93:8F:5C:CC:36:91:5F:30:91:04:75
            X509v3 Authority Key Identifier:
                keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f3:47:6a:14:29:61:45:c4:ce:9d:ab:3f:9c:55:98:cf:6b:
         dd:a2:a6:5c:4d:10:d4:cd:7b:94:d5:c1:5e:8f:40:04:85:56:
         22:94:ee:39:64:e3:68:12:9f:70:72:e4:30:70:37:4d:e2:e7:
         a2:42:b0:92:e4:91:76:e8:ce:16:f9:85:7a:64:96:61:84:c4:
         05:70:d8:e2:64:7c:44:e1:d0:3c:8f:5b:c4:0b:e9:0e:00:1d:
         55:ea:ce:eb:57:e8:0e:68:cd:0c:ca:05:6c:ab:18:61:5e:fa:
         f7:c3:02:5b:a9:cd:01:c5:5d:d8:19:b4:cf:f6:5f:b5:f4:60:
         83:7a:a4:8b:b4:07:9c:a7:24:a7:80:c7:4b:6d:99:22:90:bb:
         21:27:96:16:1f:a5:f4:c7:fd:28:52:d2:f9:6f:46:34:23:01:
         56:56:2a:4f:13:fe:38:68:27:f8:77:ff:4e:bf:85:90:59:f2:
         eb:f7:5e:46:89:00:73:70:4a:cc:e4:af:4f:ae:3a:b0:a5:c7:
         55:3d:c7:b0:7a:29:fb:50:e8:6b:8b:7f:09:57:f5:e0:ed:97:
         ae:10:52:b2:de:1e:11:53:79:5f:40:37:5d:4e:fa:d8:27:ad:
         5f:3a:b9:dc:59:93:be:dc:77:31:c4:a6:0f:37:1e:7e:78:9e:
         fb:34:d5:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv7P/zMns/U0CEJp2US4CszMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz
Mjc2ZTMwHhcNMjYwMTI2MTcwMDMzWhcNMjYwMTI3MTcwMDMzWjAzMTEwLwYDVQQD
Eyg2YWRlNmE3ZWEyZDAxNmE2YTM5MzhmNWNjYzM2OTE1ZjMwOTEwNDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaFgvv5hIj9ZioXhAQ8pT5J9crvU
HinIPV5fJmt6frlfBm+zJiHo61pRNgF4HD7GbzoL8ErNtm9tWP330vrmVRHBISTu
AWO9h0pEF9kT9Zf2NKd7XMWrUbo3nayvlZRGXiW0fNGwGdT2RJEiVG5itsk6Xjia
4r+0Ts0hlLLbt9futpLFmKofqkKMW37fo9/VnEPuJQAwzI/eiJ3pYhQVNYxGPnUD
aHawg/l18wpvddsrjdlBniWnSgjnlYZyP6K3vkGaKXiGuXPGk34xBly418d5g+gZ
XSbKcZlhGjtFla30bxUsMxzXmPjE2GTdCzJT/PxQsHKB2Mtm4t8BJNII8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrean6i0Bamo5OPXMw2kV8wkQR1MB8GA1UdIwQY
MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt
YTJhNGM2YTYyMWNkLzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk
LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIPNHahQp
YUXEzp2rP5xVmM9r3aKmXE0Q1M17lNXBXo9ABIVWIpTuOWTjaBKfcHLkMHA3TeLn
okKwkuSRdujOFvmFemSWYYTEBXDY4mR8ROHQPI9bxAvpDgAdVerO61foDmjNDMoF
bKsYYV7698MCW6nNAcVd2Bm0z/ZftfRgg3qki7QHnKckp4DHS22ZIpC7ISeWFh+l
9Mf9KFLS+W9GNCMBVlYqTxP+OGgn+Hf/Tr+FkFny6/deRokAc3BKzOSvT646sKXH
VT3HsHop+1Doa4t/CVf14O2XrhBSst4eEVN5X0A3XU762CetXzq53FmTvtx3McSm
Dzcefnie+zTVFw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 21:53:11 2026 by rpki-client