This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
File:                     gz4_XvglVWsBSghdMlZbsMvFrI0.mft (raw, json)
Hash identifier:          PRGpP/XH0MTx+AGmIxfBvYhL6FwPEik6o8qmcWgCcZY=
Subject key identifier:   67:F1:47:AD:25:2C:DF:3E:86:60:CB:10:67:85:73:12:DC:EB:74:36
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Certificate issuer:       /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial:       019BD3FB8605CF9480DFE5991E5C963F36C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
Manifest number:          1069
Signing time:             Mon 19 Jan 2026 02:00:34 +0000
Manifest this update:     Mon 19 Jan 2026 02:00:34 +0000
Manifest next update:     Tue 20 Jan 2026 02:00:34 +0000
Files and hashes:         1: 1GNYNSpLZEV6lJSEiC0uCb45Kkg.roa (hash: DoJnuhEW/B73op3Jk3VX1qudvNpeJmTAZynYtUkq/MA=)
                          2: 1eUoAIo6xrEIuzY53oLNuGkfNYU.roa (hash: iNEypctqng2J/tCrIGFw8rZObGbWUs0ke8HmaNttnWw=)
                          3: 1tifNydRwtyf488xKTezBYrJFiQ.roa (hash: GW02B9y+Bmp0uiTL43lpdUVhMGdNRPKmCRDhy2pUMQ0=)
                          4: 47kFmSy2Gmd9C5gR_j8zVGS8eh8.roa (hash: TyDSYTFqFRZ+nZ7P9qrY4NFiG2V+3ac2Kk6s+JbVeY4=)
                          5: 4gM94ce2HsGaCNVlxIEkArO5Ubs.roa (hash: YoTLJ0Uyj3g81j3JA3Ap3UPIOnKoI9tSgmpCuWD7GLM=)
                          6: 4vC4X9fgJSHfha18dd5w-JcuGGs.roa (hash: VHnk7IjHU9cYsFoYsqAIaPufKi1ZuHssQPmQtJydV1M=)
                          7: 5FPzvveRrCz-9qyh9zTW711G9sM.roa (hash: VuXchz0NkcQUmGkPc2YLEoISBITahfJ9I51Pd9l0//4=)
                          8: 9YtEkRCHIj4dmSp4JS1F5AqaY_4.roa (hash: i9Buut1BCksnh/lH3srnXnRKTpe4zi3FtcU/f7Wiu7U=)
                          9: 9lcnu8wyjs4LbTkWQN1lC3JlmjQ.roa (hash: 0v3dlES9/nmEkLaJKQv/BjTD5ugXnOfmjmVCnWmU+A8=)
                          10: AOL9J_psR2q9MYaDnDfrIS_lBRY.roa (hash: 657kx6f4koOG93rh/2NodetC9NyzK4PWosddpzZD0vM=)
                          11: CX2472qCzO-aaACdj6E1AdJ-DCw.roa (hash: 0wyN/N/OwYzP6UQ6ZbY0ewhUqLTgCYzU7rFxrWxpcbs=)
                          12: Cpm1mrXB_TVX9Tqd1LJGDIuj6q8.roa (hash: hob1uX5ksYP6hXKdks44aYw3gp8SZ9/7iBC9yhN/LL4=)
                          13: GmqEOKBl0o8fjkfXXnhI7WN_Y1E.roa (hash: 1AkHmNV2H+TXIH+GnOXmtbMcCW9x68LumAshb1dvg2A=)
                          14: HTIAXdCN5eCNEwQo1pVJ6ruBeQw.roa (hash: 5DHvZEGvvDn9lAdUlSXKQgTq/9tmDCoHqOFLr/e7z+E=)
                          15: K4GADlpJx7a-ADehO2WgAR3RfPo.roa (hash: dXoSVWob3o9r4eiPJsMBcF4NpFZwbEa5hGIeV5W7+/g=)
                          16: KhAj0kZRxD9hoHW9LrLnSS6m9Rw.roa (hash: ZXHa1XgB47vCfQDAX2J8fhoLJiioNc29qBZpFP1LVBQ=)
                          17: LAOjiliw905xAx7igPNLN7aHfJ4.roa (hash: hUAQeh5fs6lQZSPiVdtF+Mmt5TZ/YZWi01UrqTgdHKs=)
                          18: LuV8jZMfpsqO85mEYbDggWV_tk8.roa (hash: r3xhEIVsxg4xLqB3ZMwhRVFMkhRRy3qJnwexiU8KIW4=)
                          19: M9VtHtBwZiyrmU9cQgJyCp9R5o4.roa (hash: 3pDLehtqxff6QwHIJzpKnVjixMBpmhQJ+f1jqAsX7d4=)
                          20: OC03yQTNZ9W5Qm5Fm2niz5AZR0Q.roa (hash: pNfL+CPd4jOBe8Kuav9QASAwo3YBi7Cv9vNweCQO8Uk=)
                          21: OiJP-dwO8vImOl6PRJoAbSLMINg.roa (hash: 0Dr9pDPBhr67/QuciCB5fTYTs6JIhhJIhgZfGpGJIa4=)
                          22: RWI0HtM8FeYVX5Hs3ItET4DgJ1M.roa (hash: WBFgEn+XUdSoblbljKWavGjaLtYyP3Ll0jM3oHMrroc=)
                          23: RoNeMfl0MR-_uIY7Hj4SH1RDZdY.roa (hash: EejUear6PacGFgEC96fMWGR2bUap8PG3bpGpNG9emh8=)
                          24: TR7IOSA8m3wFx7NMsidc1KcXU1U.roa (hash: UtCC5PVJ3p5Y+eaelivN3PCN4ZTmKvcQc60c0+48410=)
                          25: VR9kkM6riL_UnjiPLn997_UOhiI.roa (hash: 7cUMyf8WFPegociCFOdgoKkPKZzdoMo8ElLPrSWbs0w=)
                          26: YoyxMiFpipJ-5w1TGxh3KWk-baU.roa (hash: WUJmJPkcFlO/gjcTzNoZEEvXCJGRF9GitXQf+aN6lXk=)
                          27: YxenGo7FLzgwaa6auNpv9ByDyhU.roa (hash: sD5oiy2KEJVsA4JO35FK73ly6oOVCuMuLRUMFeiau94=)
                          28: ZiibtofVUlIAVrG6aOPuytIypiw.roa (hash: vGZmFz2F7thBEhEVCPaxFWs/PA7r+KWGqAB+lohqfto=)
                          29: _RWG7NYORT3-QWHzAU7L2mdIOjQ.roa (hash: wYpPsSdJc+9RtANDem9TvjeWGC4BCZkBguHfaivuBjs=)
                          30: _WGZTOoeOGRS40hc3bpDyX6gJ9s.roa (hash: AtOBEfXwt2enZxMMjdQAYMoKaxTtNe7RPp/273gbpbg=)
                          31: _vbxvp-HXffJ84Zk1ly9WU2SLGM.roa (hash: blhqn5Sm/kEaD4fJ82nY7yN386YyuDXjYrB4i2nbP5g=)
                          32: cCO9cpeh3RM-17KaHig1fBdbqLQ.roa (hash: qmg9F7v3esV7rN8nOUpgei2VQoEeuoX2de6JDRLva6E=)
                          33: d_FM2NuVG-obm7sbwGIWKeWg-_s.roa (hash: N7T3lweQdDoG6m0R3L3zlFgHxhSrLH0Yjud7d9d5SfY=)
                          34: dkg2cKArD_UoHzfRoyu_qd0I03Y.roa (hash: IrkR8aNLwLtdbVE4LcB+TUoxG29h6kVfhQZLJle+JO8=)
                          35: fAGJ0zZiE23sjBMLXsq0Z_mvXEo.roa (hash: hQSWzXWXEpVRTEJG6Hqx3+kFQWHZ1X1EhYkwPSOVP3I=)
                          36: gz4_XvglVWsBSghdMlZbsMvFrI0.crl (hash: ppHsMKOgTpdiGlTk05GcbpHtOACQQ482tIkaZqFRmOU=)
                          37: ioebsiWj3nggLCD2Uw7YDRHO_Ps.roa (hash: y+2kHdPBSWLKfdS3NRBsD4hzYmHJtjMOYdLETKS+w6Q=)
                          38: jFB-BTUXJFx329IJYiGXl69nsJA.roa (hash: mQOFML8qEnEUWY09YIIiA7gGF74l3a/OMe9PiAGsQSc=)
                          39: jlEERAv_48L6WVc6f1KxqaZzAoI.roa (hash: FsatbDyq1CVw+OBN4JLNJHWzcb014Jx6rYEIG4BUj38=)
                          40: jzKQY-qcPHhXVpAMrKN6jLuaUuw.roa (hash: WoM8kxljrEpcgZDenB5VgkA5gdJ6KKuNHBZdyQe0YiY=)
                          41: lkhPxJCun2Z5dUraPSN6RULYRDg.roa (hash: eFqAJaFBxk27IgOacKteSGKbRvtbv4VmDnVEga8GwnE=)
                          42: m9NhpqaT1oB2GLt0jjDfs6pgSSg.roa (hash: 5b1tI/znVjW73nWc4ORWaXr9KnAQ1h7/N9EmwsKVAIM=)
                          43: oKNCpcCzBqGQkkapGVmQ6yQAuXg.roa (hash: x1VGmz1TvNMJOY5QRynE8J58kRdyz/U6UQCEsYsPPbE=)
                          44: pMgJ7DyqU5HPBbDvW89xshUu4_o.roa (hash: tg7TkerHHxzhjcv8Nh0EANlqkUCu4RNg5jarNVpMb6Y=)
                          45: qJfYvUGvncZwCFwsu8Rm102u7Iw.roa (hash: 89pHj3FKa2cbytktSzaX9xTbeqe909o1UsEL9H14rvA=)
                          46: qduc2jhoP9cMdj01SAWGJl_8Vw8.roa (hash: g0aA1ydGIL3ddT1AZvyhUkAB74q6TZK61pu3cvFNWTQ=)
                          47: rxh464Q5WmKf8fpfEDFQtyxC8Ak.roa (hash: wSIDCxUi6l3CwLgE6LzQTfu3GG3jihp0aUhhGCo4BtM=)
                          48: uVcNONN9TEVV0gKA4BPWh5C9wug.roa (hash: J0klHnL+UNur9YDDzUxXJafdRaVSRx0EF5SeaBDfcdY=)
                          49: uZDw5aQDg9kzqxAtzIUgqnOWO6w.roa (hash: NhfmaZ0kw27eExE8ON4LLs4g9I2IN7wuuGVJMPmFM88=)
                          50: wIdf6vaDJFhtJ8xYIOOIeBucwJU.roa (hash: DMtxfZaOeh5mDXJxHcSwqLFA2Bt6C2O7poIlCzKWZ04=)
                          51: xh2ktDWXopMlUxwLXDcaZmh4chw.roa (hash: KZLHD74s+6ijD7vg9mCkLBFyndzUla57bu6HUOQXpOk=)
                          52: xsgeqHycpDDJ8oVfXE6ofjpdPww.roa (hash: dlAJTOtdWcczqCD/dhRKriqJ4A5ALzTRIw+K/nSzqL0=)
                          53: xzajxbSglJWBTgix_ZbEUSJXGso.roa (hash: G5Ggaw/eKVso3Rejuvt8Y3ASD0rARSSOo4EE3D7ruh4=)
                          54: zHE_Roky3AGIHoilX0Vwt-WQBbk.roa (hash: ib2UHQahYQ7UlRTwpBdnOpyEX+FxhxL9+JKXVCxUxaA=)
                          55: zSPet3ukkZtS1WIOyYYzyhfZzFw.roa (hash: h4L5+wstEU0/JXooPRxQ7bp+VFuQ40/GeZrdbqpTP+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d3:fb:86:05:cf:94:80:df:e5:99:1e:5c:96:3f:36:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
        Validity
            Not Before: Jan 19 02:00:34 2026 GMT
            Not After : Jan 20 02:00:34 2026 GMT
        Subject: CN=67f147ad252cdf3e8660cb1067857312dceb7436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bb:82:96:1e:99:b1:94:67:3f:1b:21:a8:ee:
                    e9:90:d5:c8:37:be:e2:f8:39:51:5f:15:91:7c:7e:
                    02:bc:7d:dc:21:bf:97:96:8c:db:3f:35:44:a7:b7:
                    62:0e:7e:11:43:42:b7:30:50:96:32:a5:3b:6b:03:
                    e8:bb:c3:1f:f3:3b:75:65:3f:44:49:36:13:15:31:
                    24:28:0b:4d:c8:51:37:08:31:ff:5e:09:23:ce:c7:
                    2b:41:31:51:cd:51:01:76:62:75:c3:05:7d:43:ca:
                    23:da:d9:92:97:63:a3:b6:27:3e:fe:db:39:1b:76:
                    69:e7:df:c9:fd:99:d3:1f:73:d5:ae:73:bd:ff:d4:
                    55:c6:f2:3a:69:0f:6f:08:7e:91:41:d2:09:66:8c:
                    31:48:8a:bd:2c:f4:df:26:e5:a7:23:56:52:0a:60:
                    d6:b7:7d:a0:78:79:52:8b:94:39:1c:c4:e5:d5:e6:
                    7e:ae:df:9b:c4:a2:23:64:cc:0d:15:a7:bd:42:03:
                    bc:06:06:3c:2b:96:99:8c:6f:83:3d:e5:41:05:7c:
                    f9:a1:9b:26:5b:62:3c:66:5b:a4:90:c9:d0:4f:04:
                    d4:f8:07:11:62:23:4f:fc:21:47:5a:5f:30:f3:50:
                    4b:27:dc:70:64:d4:fc:6a:38:ad:a9:83:30:d9:20:
                    5a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F1:47:AD:25:2C:DF:3E:86:60:CB:10:67:85:73:12:DC:EB:74:36
            X509v3 Authority Key Identifier:
                keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e2:a8:7e:42:a3:b0:53:46:d8:ab:46:27:66:32:63:e0:37:
         f1:f4:52:71:d1:f2:74:91:fb:e4:c2:7e:00:3e:49:81:45:64:
         ed:5b:0d:20:ef:09:2f:73:9c:2c:a0:42:6a:13:c7:f3:60:ba:
         47:00:f1:58:2f:ef:4d:a8:f4:02:1e:ed:a3:13:e2:90:d6:47:
         22:06:a7:71:cb:16:d9:33:22:8e:7c:ed:5f:6e:a2:3a:a6:18:
         49:14:6f:54:56:73:28:3c:e3:55:83:0a:43:e7:9e:9f:b1:0c:
         dd:c9:31:e6:09:7a:b3:3c:17:d5:29:85:09:65:c9:6d:8a:ec:
         85:04:43:ee:9f:33:19:6c:96:f9:b3:ad:8a:c8:49:8c:37:97:
         db:2c:87:6c:45:a2:57:0a:2d:90:02:4a:1a:ab:1e:49:31:3f:
         35:2c:1a:a9:dd:b3:85:6d:02:33:c5:e6:81:72:8c:57:80:93:
         bc:23:c0:51:2a:c3:a6:98:11:d1:af:44:29:26:44:e2:c7:f4:
         23:e7:5b:cd:b7:53:b2:c0:a9:18:cf:a1:08:fe:71:33:fb:98:
         6e:2e:e4:76:9f:d1:55:16:77:56:86:94:e2:0d:5a:d7:43:bb:
         3f:17:a2:43:4e:af:1e:90:92:20:b7:a9:e8:8c:85:a5:67:c0:
         87:c4:87:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 12:21:57 2026 by rpki-client