This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
File:                     gci3Ore963b_SLLKCZYW7b5xxCY.mft (raw, json)
Hash identifier:          7QXkkBo9mWaCa5M/gNcA7UR6Y3y9Gu3RAjRR6zaMnWo=
Subject key identifier:   8E:F1:A5:5E:22:01:51:97:A9:2A:9D:20:F9:5D:BD:AC:A3:0F:52:5C
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Certificate issuer:       /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial:       019BF12A50794C6B1F798E08B5A956B91895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
Manifest number:          1749
Signing time:             Sat 24 Jan 2026 18:00:40 +0000
Manifest this update:     Sat 24 Jan 2026 18:00:40 +0000
Manifest next update:     Sun 25 Jan 2026 18:00:40 +0000
Files and hashes:         1: 6Qgdh3WcW0KDG9I-xMVNXaKtYSc.roa (hash: n217wGPfHiNRTtY8nnF+yR0z3LLQ6JHk8tpE1xzv/GY=)
                          2: 9DOAu8axwGa0FsfS7ExMHAQ6nvo.roa (hash: ObCOCbyuoWr7L7d8fgGC8bt1I+db3t0fWPHAO97QZUk=)
                          3: GiuMv5nemcx-ByyPnBErTP1hwJk.roa (hash: 9Q38r6gXw/wEjKR2jbS1j1CDpeXCBsrsB04HQvgKsPI=)
                          4: UyEyoxYffVHMgek2KWRxc9EkWzI.roa (hash: b9ia7zBPnauhiAFfLtEGaadCmnS7C4S6xG4WG0fb70o=)
                          5: VDK5rygMjyMJ5JHBL2WeMUvvQHw.roa (hash: HQ1V1J6+aXUqpfVBB8t9zNFEnzgS4StmEMgPyMgGXOM=)
                          6: XBEJ733ai7-gmnDdQh8pwux3l5s.roa (hash: Q0EvpOJnp7oR8ap1Xu0coNs93jICexWOPJZwwEl/yME=)
                          7: YFx7AMGBmNvIEEF0rkpFhBQPEA0.roa (hash: BrjcqRRz5NSmt9i/9E/oQ4g12kumuE1CB1/Rk3lBLvM=)
                          8: agNWFJ6lYT9cYM9QENETvOLZPI0.roa (hash: F2addx2SByXtigLyYiMUDmpNtycaXyju8G/xXyoPRII=)
                          9: dM9zh5E81r9UWVSK8u7mzgQlyvU.roa (hash: aq1TqgSAbBjOuDN0o6DtvSCaK7Bm/i/PBbH93DWX1FE=)
                          10: gci3Ore963b_SLLKCZYW7b5xxCY.crl (hash: E1niJ41n/3q0dGaoGQGGSaq/Q+fjxQD0GOE14XpDkeE=)
                          11: wYQUPYTD0bYQdwZYQkAgn3uAbHw.roa (hash: DPOkDtJzUAKeVM1PYYwP4Xv66zWe8nDRva28kFk1TDQ=)
                          12: z2VeS6Cr-FUTndI9erFU_xgXeQc.roa (hash: VfSkmN7U5VY7VVnLMw0WuSWj2FuFIlacIGmckDk9o2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f1:2a:50:79:4c:6b:1f:79:8e:08:b5:a9:56:b9:18:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
        Validity
            Not Before: Jan 24 18:00:40 2026 GMT
            Not After : Jan 25 18:00:40 2026 GMT
        Subject: CN=8ef1a55e22015197a92a9d20f95dbdaca30f525c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:19:be:26:84:bf:ca:9d:f3:46:a5:fd:cd:6a:
                    ac:44:f1:8a:fa:50:8b:e9:e3:0b:a0:22:55:4b:af:
                    0e:23:a4:41:f4:70:36:c7:52:c2:62:ff:31:c8:b0:
                    80:e1:6c:05:96:72:fa:c7:79:20:87:77:d0:a1:28:
                    8d:21:4a:a0:81:cf:cf:f3:0a:3d:7f:fe:b1:a8:01:
                    d5:7f:7d:94:d1:ee:0f:3f:8f:8c:04:91:f9:b0:d6:
                    ef:c6:cb:cc:42:29:51:70:3f:51:1f:aa:9a:44:5c:
                    9f:7f:21:44:10:79:e2:0d:8d:31:ea:4d:45:19:f9:
                    28:49:87:42:7a:01:f8:f6:49:e8:bc:cd:ae:31:ce:
                    51:48:bc:17:14:0e:20:c5:d2:3b:c6:e8:70:b2:31:
                    94:e3:07:d5:0e:76:79:c5:9b:27:ca:10:84:1d:b1:
                    44:28:fe:88:ab:2f:b5:46:7c:e9:a9:fe:97:0f:fb:
                    73:aa:c2:3a:e7:56:b5:75:46:a3:4f:e2:89:6a:da:
                    a8:84:26:77:d9:a8:63:1c:66:bd:af:b6:0a:09:4d:
                    3b:07:7b:b7:81:3f:96:6e:a2:5b:98:b1:19:c6:c9:
                    56:7c:d1:21:cd:f0:b3:c8:e0:7c:91:a0:18:2f:53:
                    cc:53:93:1b:8f:47:7f:a2:33:99:c2:6a:bf:e8:0d:
                    06:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F1:A5:5E:22:01:51:97:A9:2A:9D:20:F9:5D:BD:AC:A3:0F:52:5C
            X509v3 Authority Key Identifier:
                keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:6c:27:a1:e1:c5:51:c3:00:3b:b5:e2:10:8d:32:7c:c1:ad:
         b8:8a:b4:30:28:f4:4a:8f:a9:0d:95:2f:a3:15:a9:2f:f6:61:
         8d:23:48:63:11:09:7d:06:72:7d:37:7e:10:2b:48:aa:f4:24:
         68:e9:9d:03:44:66:b8:d1:a6:18:a8:88:be:83:bd:51:86:5b:
         68:f5:e6:92:74:ac:3e:03:ee:de:b0:dc:10:73:9c:a0:15:b5:
         1b:85:57:bc:b3:6d:a8:09:1c:8b:bc:60:55:ae:18:ef:b9:06:
         85:01:15:8b:36:7f:e3:c9:b0:0d:07:80:75:be:69:43:a4:4f:
         6b:58:5d:22:78:ae:cc:98:2b:9b:49:03:0c:05:13:2a:9e:f2:
         91:45:48:26:75:1e:e6:1b:23:51:e6:96:b3:54:f7:47:20:45:
         1e:f1:91:04:de:7d:9f:13:71:dc:b0:6d:3b:c0:97:af:a0:ba:
         23:09:35:c7:d7:c0:12:3c:8e:42:16:7a:3a:ce:cd:3f:9a:ad:
         03:cf:2c:a5:1a:4e:88:88:3a:5b:dc:78:37:91:43:ae:ee:e2:
         d2:f5:ae:0e:47:42:e4:b3:9e:7d:d6:4e:4d:7b:dd:60:15:c6:
         ce:7d:22:31:e4:ed:70:a9:47:f4:2e:63:1b:c8:7c:79:54:8c:
         dd:e1:b9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 24 21:37:06 2026 by rpki-client