This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
File:                     Gloi28jb0tckjer_R-M5D3f7Sws.mft (raw, json)
Hash identifier:          jXSSz5eyOR8w8A7c74AqWePCKEHVpHUYamK9sfUUQmY=
Subject key identifier:   69:33:5A:06:E7:3B:7C:E0:DB:70:23:C3:6B:69:64:75:F5:58:3D:AA
Authority key identifier: 1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
Certificate issuer:       /CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Certificate serial:       019BFC89A75773C3900577248D2CE75381D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
Manifest number:          17F2
Signing time:             Mon 26 Jan 2026 23:00:38 +0000
Manifest this update:     Mon 26 Jan 2026 23:00:38 +0000
Manifest next update:     Tue 27 Jan 2026 23:00:38 +0000
Files and hashes:         1: 5MAPK6EjPFvP--_1_whI7tG2qbo.asa (hash: FwLbZWiuPVr7vbVsggf9jzbAmnmCltkY5rFT85LSnkQ=)
                          2: Gloi28jb0tckjer_R-M5D3f7Sws.crl (hash: Lks7XdjagXVhf/Qd76/kyGD2hGi7p+zheCRxubeaKb0=)
                          3: nyYsyw_puc-6G9sAkIDHBW-qklo.roa (hash: r1YY5k2s3y2JyRlqz7YZwgJSL6r2URPlvPPK7VlHG6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:89:a7:57:73:c3:90:05:77:24:8d:2c:e7:53:81:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
        Validity
            Not Before: Jan 26 23:00:38 2026 GMT
            Not After : Jan 27 23:00:38 2026 GMT
        Subject: CN=69335a06e73b7ce0db7023c36b696475f5583daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fe:17:8b:d7:30:aa:86:63:3a:99:54:7e:99:
                    fb:27:4a:c2:1c:bd:98:93:c3:e3:0a:91:77:e1:18:
                    63:68:da:90:83:63:6a:1a:3c:d4:58:dd:92:d1:21:
                    39:bc:f1:0b:22:c6:c3:71:34:f2:6b:1a:d5:57:43:
                    3f:b8:7a:ff:a5:c8:52:4b:52:9e:d2:60:dd:bf:95:
                    1e:ec:6b:fb:57:e0:7b:70:df:ce:9b:ca:cf:49:91:
                    a3:d9:0b:79:a8:37:d9:31:9e:d1:ea:c1:d7:f7:58:
                    c2:63:f3:48:de:f2:6d:39:af:4f:42:69:e2:ca:ce:
                    ba:03:54:a2:76:b4:d4:0f:e5:69:84:52:ab:d5:00:
                    dc:3b:8f:ce:d8:9e:03:2b:e9:a3:40:20:3a:db:5c:
                    ed:88:94:ce:0d:76:94:0e:54:a4:a8:8a:3a:ea:e8:
                    ec:ed:79:cc:17:84:af:5d:69:36:6b:0c:b8:e1:ea:
                    cc:04:c9:4f:44:12:fa:9b:19:64:47:57:49:f4:19:
                    a2:8f:34:13:b4:54:bc:b4:13:1b:35:67:1b:26:07:
                    45:71:41:35:e0:16:96:ae:42:d3:81:ca:21:94:24:
                    0f:01:90:49:da:53:a7:69:20:b1:7c:f4:4d:3e:bc:
                    55:24:ad:3b:74:30:58:bf:21:ce:1e:af:87:0f:22:
                    b9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:33:5A:06:E7:3B:7C:E0:DB:70:23:C3:6B:69:64:75:F5:58:3D:AA
            X509v3 Authority Key Identifier:
                keyid:1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:87:92:cd:0e:43:24:69:2b:5c:b5:e4:c9:1f:4e:d4:eb:3e:
         21:04:f6:3f:60:10:e7:b0:36:3d:50:45:7a:b6:f9:cb:87:97:
         33:2a:5c:77:01:26:e9:7d:10:85:da:b5:77:2b:fe:7d:6a:ff:
         b8:f9:6f:0c:8c:c1:ab:ae:3a:cf:b7:92:15:d2:88:99:ca:2c:
         cc:26:dd:2f:3b:1f:7f:cb:78:99:50:59:87:e8:dd:7d:6f:a9:
         de:b9:71:ab:6c:65:d9:db:b9:97:31:30:c7:b4:cf:f2:c0:33:
         f0:71:17:61:13:d1:32:4b:aa:d9:f2:16:9f:ea:32:ed:df:b4:
         c4:c4:9e:a3:df:47:43:de:42:b3:c1:96:08:f5:53:62:1c:15:
         06:a6:e7:e3:65:4f:bf:f7:d1:8f:c2:e3:88:bb:e4:bd:0d:8e:
         3a:41:aa:5f:95:d0:9d:6f:5a:53:ee:5d:18:2d:ac:de:6c:98:
         b8:df:2b:01:b9:c6:7b:cd:a1:4c:76:15:94:ce:b6:02:3d:85:
         5b:88:05:9d:ac:6d:59:b9:73:f6:d0:82:ed:3f:15:be:38:a6:
         48:7f:12:72:d5:33:18:f4:d7:7f:e1:ed:13:25:a5:79:c6:c3:
         84:53:1e:54:84:bf:0d:ad:18:96:47:a4:8e:fe:f3:41:6c:c8:
         a8:4c:02:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv8iadXc8OQBXckjSznU4HXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNWEyMmRiYzhkYmQyZDcyNDhkZWFmZjQ3ZTMzOTBmNzdm
YjRiMGIwHhcNMjYwMTI2MjMwMDM4WhcNMjYwMTI3MjMwMDM4WjAzMTEwLwYDVQQD
Eyg2OTMzNWEwNmU3M2I3Y2UwZGI3MDIzYzM2YjY5NjQ3NWY1NTgzZGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/4Xi9cwqoZjOplUfpn7J0rCHL2Y
k8PjCpF34RhjaNqQg2NqGjzUWN2S0SE5vPELIsbDcTTyaxrVV0M/uHr/pchSS1Ke
0mDdv5Ue7Gv7V+B7cN/Om8rPSZGj2Qt5qDfZMZ7R6sHX91jCY/NI3vJtOa9PQmni
ys66A1SidrTUD+VphFKr1QDcO4/O2J4DK+mjQCA621ztiJTODXaUDlSkqIo66ujs
7XnMF4SvXWk2awy44erMBMlPRBL6mxlkR1dJ9BmijzQTtFS8tBMbNWcbJgdFcUE1
4BaWrkLTgcohlCQPAZBJ2lOnaSCxfPRNPrxVJK07dDBYvyHOHq+HDyK5+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkzWgbnO3zg23Ajw2tpZHX1WD2qMB8GA1UdIwQY
MBaAFBpaItvI29LXJI3q/0fjOQ93+0sLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2xvaTI4amIwdGNramVyX1ItTTVEM2Y3U3dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xOTIyYzktNDk0OS00MDU1LWE2NmUt
MTVkMzI3MDliZDBmLzEvR2xvaTI4amIwdGNramVyX1ItTTVEM2Y3U3dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8xOTIyYzktNDk0OS00MDU1LWE2NmUtMTVkMzI3MDliZDBm
LzEvR2xvaTI4amIwdGNramVyX1ItTTVEM2Y3U3dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4eSzQ5D
JGkrXLXkyR9O1Os+IQT2P2AQ57A2PVBFerb5y4eXMypcdwEm6X0Qhdq1dyv+fWr/
uPlvDIzBq646z7eSFdKImcoszCbdLzsff8t4mVBZh+jdfW+p3rlxq2xl2du5lzEw
x7TP8sAz8HEXYRPRMkuq2fIWn+oy7d+0xMSeo99HQ95Cs8GWCPVTYhwVBqbn42VP
v/fRj8LjiLvkvQ2OOkGqX5XQnW9aU+5dGC2s3myYuN8rAbnGe82hTHYVlM62Aj2F
W4gFnaxtWblz9tCC7T8VvjimSH8SctUzGPTXf+HtEyWlecbDhFMeVIS/Da0Ylkek
jv7zQWzIqEwCfA==
-----END CERTIFICATE-----
Generated at Tue Jan 27 02:15:25 2026 by rpki-client