This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
File:                     gci3Ore963b_SLLKCZYW7b5xxCY.mft (raw, json)
Hash identifier:          NYy26/lH3cO4M8z1j2W0quv5KFNEcAtZoz0udb944hY=
Subject key identifier:   F5:9D:62:18:BE:F9:0A:C6:76:B5:D8:73:12:39:B1:2F:C9:D2:96:BC
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Certificate issuer:       /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial:       019BEF3C1CE3BFDDB1FFB735514C191D0965
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
Manifest number:          1748
Signing time:             Sat 24 Jan 2026 09:00:52 +0000
Manifest this update:     Sat 24 Jan 2026 09:00:52 +0000
Manifest next update:     Sun 25 Jan 2026 09:00:52 +0000
Files and hashes:         1: 6Qgdh3WcW0KDG9I-xMVNXaKtYSc.roa (hash: n217wGPfHiNRTtY8nnF+yR0z3LLQ6JHk8tpE1xzv/GY=)
                          2: 9DOAu8axwGa0FsfS7ExMHAQ6nvo.roa (hash: ObCOCbyuoWr7L7d8fgGC8bt1I+db3t0fWPHAO97QZUk=)
                          3: GiuMv5nemcx-ByyPnBErTP1hwJk.roa (hash: 9Q38r6gXw/wEjKR2jbS1j1CDpeXCBsrsB04HQvgKsPI=)
                          4: UyEyoxYffVHMgek2KWRxc9EkWzI.roa (hash: b9ia7zBPnauhiAFfLtEGaadCmnS7C4S6xG4WG0fb70o=)
                          5: VDK5rygMjyMJ5JHBL2WeMUvvQHw.roa (hash: HQ1V1J6+aXUqpfVBB8t9zNFEnzgS4StmEMgPyMgGXOM=)
                          6: XBEJ733ai7-gmnDdQh8pwux3l5s.roa (hash: Q0EvpOJnp7oR8ap1Xu0coNs93jICexWOPJZwwEl/yME=)
                          7: YFx7AMGBmNvIEEF0rkpFhBQPEA0.roa (hash: BrjcqRRz5NSmt9i/9E/oQ4g12kumuE1CB1/Rk3lBLvM=)
                          8: agNWFJ6lYT9cYM9QENETvOLZPI0.roa (hash: F2addx2SByXtigLyYiMUDmpNtycaXyju8G/xXyoPRII=)
                          9: dM9zh5E81r9UWVSK8u7mzgQlyvU.roa (hash: aq1TqgSAbBjOuDN0o6DtvSCaK7Bm/i/PBbH93DWX1FE=)
                          10: gci3Ore963b_SLLKCZYW7b5xxCY.crl (hash: nlgudOKW9ifvgvdhBlFRACShIh7boPvQVLe1BQ3jcM4=)
                          11: wYQUPYTD0bYQdwZYQkAgn3uAbHw.roa (hash: DPOkDtJzUAKeVM1PYYwP4Xv66zWe8nDRva28kFk1TDQ=)
                          12: z2VeS6Cr-FUTndI9erFU_xgXeQc.roa (hash: VfSkmN7U5VY7VVnLMw0WuSWj2FuFIlacIGmckDk9o2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 09:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ef:3c:1c:e3:bf:dd:b1:ff:b7:35:51:4c:19:1d:09:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
        Validity
            Not Before: Jan 24 09:00:52 2026 GMT
            Not After : Jan 25 09:00:52 2026 GMT
        Subject: CN=f59d6218bef90ac676b5d8731239b12fc9d296bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b5:37:e8:78:36:75:00:d9:bc:af:7a:59:8a:
                    b0:99:b4:3c:d4:b2:34:a2:b7:3d:49:bd:c8:ac:1e:
                    a7:d2:da:01:d1:1a:e7:f9:66:ec:e5:39:ef:8c:ac:
                    04:64:2b:54:9d:35:52:44:ec:9d:58:76:8c:6d:c3:
                    7d:5c:55:c8:fc:fd:6c:98:ce:3f:a4:03:f7:cc:58:
                    b7:4b:ef:dd:7b:24:67:95:95:54:23:a5:0d:12:7a:
                    99:f7:d2:05:d2:be:39:67:97:29:44:40:04:3f:8b:
                    4a:b4:4b:3f:a3:e1:6c:21:42:b8:fb:13:43:21:b1:
                    f6:92:eb:d1:aa:a8:b2:b1:a0:28:98:db:34:20:0f:
                    6b:c9:94:60:88:6e:90:64:da:c6:83:76:d6:62:5d:
                    8c:2e:29:45:29:50:8d:70:3c:b2:38:a9:b5:ea:48:
                    04:af:8e:08:52:c1:1c:f8:4e:cb:68:1f:25:43:10:
                    77:2f:75:a0:36:23:f0:a7:e5:a6:fa:f2:db:40:7f:
                    a9:7f:3a:a7:25:b5:e9:df:b6:28:bb:31:41:a5:c9:
                    2b:ad:61:d8:45:8e:b3:d0:6e:d0:c3:cd:51:82:b3:
                    af:7c:9a:87:66:ea:0b:e4:62:a3:42:64:1d:e0:1e:
                    f3:22:6a:b2:4f:39:6d:50:21:83:88:b4:f4:39:9d:
                    02:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9D:62:18:BE:F9:0A:C6:76:B5:D8:73:12:39:B1:2F:C9:D2:96:BC
            X509v3 Authority Key Identifier:
                keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:04:29:af:dc:f7:01:0d:11:c5:ec:a5:e5:e6:47:6e:43:2c:
         37:9f:26:c3:df:9d:28:75:53:d4:15:25:77:d1:09:a8:7f:df:
         8f:25:fa:86:3f:61:15:43:fa:95:38:dc:92:08:87:b1:c0:68:
         3f:db:1f:71:e1:29:7c:1c:53:17:0a:3f:1e:7e:dc:6b:16:15:
         a5:69:a3:33:cf:6f:a1:03:b3:83:0a:ea:8a:25:d2:91:0a:dc:
         27:03:fb:ed:39:ef:5d:06:6d:e3:b6:69:6a:96:a2:d8:21:e1:
         31:59:26:71:41:32:e1:30:82:d1:12:f7:d1:c2:f9:a9:9a:a4:
         5c:f2:a6:35:f3:c8:69:c1:82:39:d1:31:c0:3b:cf:58:59:00:
         46:a0:0a:c6:a2:38:96:cf:83:36:e1:ed:89:b2:c6:dc:4f:77:
         42:d5:ca:a6:d4:10:e7:e3:2f:b0:3e:ff:eb:98:88:54:fc:74:
         74:56:8b:c3:8f:ac:cc:d3:27:2a:d9:53:35:72:f4:ee:e4:cb:
         ad:38:da:08:25:9e:ff:2f:a9:4c:b8:0e:54:a3:f8:16:d9:7b:
         d0:3c:ac:5a:fd:a8:37:53:9f:b4:80:ef:4f:d6:41:56:60:5f:
         1b:e7:d9:b4:66:0b:f0:8a:02:7a:7a:63:93:56:4a:6f:24:91:
         d3:c5:ec:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvvPBzjv92x/7c1UUwZHQllMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYzhiNzNhYjdiZGViNzZmZjQ4YjJjYTA5OTYxNmVkYmU3
MWM0MjYwHhcNMjYwMTI0MDkwMDUyWhcNMjYwMTI1MDkwMDUyWjAzMTEwLwYDVQQD
EyhmNTlkNjIxOGJlZjkwYWM2NzZiNWQ4NzMxMjM5YjEyZmM5ZDI5NmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbU36Hg2dQDZvK96WYqwmbQ81LI0
orc9Sb3IrB6n0toB0Rrn+Wbs5TnvjKwEZCtUnTVSROydWHaMbcN9XFXI/P1smM4/
pAP3zFi3S+/deyRnlZVUI6UNEnqZ99IF0r45Z5cpREAEP4tKtEs/o+FsIUK4+xND
IbH2kuvRqqiysaAomNs0IA9ryZRgiG6QZNrGg3bWYl2MLilFKVCNcDyyOKm16kgE
r44IUsEc+E7LaB8lQxB3L3WgNiPwp+Wm+vLbQH+pfzqnJbXp37YouzFBpckrrWHY
RY6z0G7Qw81RgrOvfJqHZuoL5GKjQmQd4B7zImqyTzltUCGDiLT0OZ0CIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWdYhi++QrGdrXYcxI5sS/J0pa8MB8GA1UdIwQY
MBaAFIHItzq3vet2/0iyygmWFu2+ccQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt
ZDg0ODhiM2FiNDJmLzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm
LzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgQpr9z3
AQ0Rxeyl5eZHbkMsN58mw9+dKHVT1BUld9EJqH/fjyX6hj9hFUP6lTjckgiHscBo
P9sfceEpfBxTFwo/Hn7caxYVpWmjM89voQOzgwrqiiXSkQrcJwP77TnvXQZt47Zp
apai2CHhMVkmcUEy4TCC0RL30cL5qZqkXPKmNfPIacGCOdExwDvPWFkARqAKxqI4
ls+DNuHtibLG3E93QtXKptQQ5+MvsD7/65iIVPx0dFaLw4+szNMnKtlTNXL07uTL
rTjaCCWe/y+pTLgOVKP4Ftl70DysWv2oN1OftIDvT9ZBVmBfG+fZtGYL8IoCenpj
k1ZKbySR08Xs4w==
-----END CERTIFICATE-----
Generated at Sat Jan 24 20:14:04 2026 by rpki-client