This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
File:                     GstjdqFkjUnVXk17ATcTZ7DcKvk.mft (raw, json)
Hash identifier:          c4oNrlzE/N1GdQJ7qX8fV4D1ZIHGSoAPQKAk7Bb5Wi4=
Subject key identifier:   55:D2:A3:68:78:5F:6E:C5:09:27:A8:5C:A9:9D:1E:D9:B4:53:0F:4C
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Certificate issuer:       /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial:       019C21A9C12DF71FA6DB7C677C76B7E09A06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
Manifest number:          0C3F
Signing time:             Tue 03 Feb 2026 04:01:38 +0000
Manifest this update:     Tue 03 Feb 2026 04:01:38 +0000
Manifest next update:     Wed 04 Feb 2026 04:01:38 +0000
Files and hashes:         1: 7Y5_pXpXkGXQz6r3Ag8VuuKYS-E.roa (hash: PcU8D+QmugZnXWhyt6suY1+91eR4RbUDaup9F17x2j0=)
                          2: DBuCDMr-eMpkAR_hikUInL2urKQ.roa (hash: kBMh2uve9H6ZGJ+wBBoi4Snq4VxIhSy8cm7vuFkDv3U=)
                          3: GstjdqFkjUnVXk17ATcTZ7DcKvk.crl (hash: UyTUEWnZ9gC1vZn3NpHbTB9jJ7qOMwLidl+FlzocZJM=)
                          4: K5IYR-8yKQNbaVCfxNruHxfgy8M.roa (hash: k9/AfvQ6thbh49E8qXhYlNeBQ66bqOlH2PyeFk773uY=)
                          5: S6miaNucSa6NeEC_GGS4tq2izFo.roa (hash: 8+03nZylwUV80dXnpI8qfIF5rMZUoFiALmnLIt2o7b8=)
                          6: SMhGdBkdywnevpYEWhKr1IzaM4M.roa (hash: m3kf4ZVSNKzUhBPVSBlYDUaNyUcw0siodBs/T4U83BA=)
                          7: WtmFuf6cZrghvDAImf8QiXaCIpU.roa (hash: 4EzmQjEOGNW/iYXS0zB7VQgi3+Kgq0BxHT+khs/YIOA=)
                          8: gPl4qnviZ8X01lQ5Z0ysSwANF8I.roa (hash: 3PftaD58PWAe1nqPJMST42Vt40zBG+AVvzxMfB6cylU=)
                          9: iVDK6PCtMfpuZKgZWoFycnHMVRw.roa (hash: GeJfT/LpcdK0hbYcqcrlMnAuUaNLyo2x8WoLR5cuzUY=)
                          10: ohLWgfGRLPEKw04h0DLfOIlNhog.roa (hash: K98aaZcn2W9HA9Zia29dMsLJX/i+ewGU4FK1Pvj0Z10=)
                          11: uXJ4kVp0R1Jf5F3_93hBuWkiwVc.roa (hash: FnTvs0c3/i5yqsDdFaei4bcnSmfeaY6puxtewUwoPcU=)
                          12: w9-s1rg8ZZyOOyxtduxCw6s1Z18.roa (hash: SjJ+kgcVTjrARPsmt0o25UIbqtkMvNHn5HJI2G5k1Mw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 04:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:21:a9:c1:2d:f7:1f:a6:db:7c:67:7c:76:b7:e0:9a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
        Validity
            Not Before: Feb  3 04:01:38 2026 GMT
            Not After : Feb  4 04:01:38 2026 GMT
        Subject: CN=55d2a368785f6ec50927a85ca99d1ed9b4530f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:27:0a:33:71:56:21:be:fc:c5:64:fa:e7:ee:
                    90:f2:8b:8a:50:f0:26:e9:92:14:d0:e3:49:34:12:
                    86:3e:c5:4f:ad:25:09:f7:34:2c:07:dd:a0:ce:bc:
                    48:93:b6:ff:e3:38:59:eb:6d:a4:c7:50:ad:b6:55:
                    17:e5:ec:4b:10:e5:53:a2:1d:11:32:18:d6:4c:4f:
                    66:0d:0a:2b:0b:e2:5f:5f:46:33:0e:bc:fa:0c:11:
                    31:c7:ea:83:d9:01:a6:61:5a:9d:99:97:48:b3:00:
                    3e:7e:d2:1c:6e:bb:7f:6f:ee:ed:8d:b4:06:40:22:
                    14:70:aa:28:57:4e:7e:c7:72:98:03:8f:85:5f:63:
                    55:af:5a:29:7d:5d:05:7f:97:4e:08:5f:82:fd:67:
                    76:c7:73:1e:b6:26:0f:f8:74:f4:33:ca:d9:c1:f5:
                    d7:b0:f0:98:72:7a:7f:4a:5b:5a:51:d4:62:92:ff:
                    56:af:f0:e8:bd:d0:8c:04:c4:47:77:52:b9:91:6b:
                    29:b6:22:75:b7:03:4d:c7:dd:5e:48:36:bb:2c:a7:
                    84:b4:18:8c:89:8c:50:95:e0:59:0d:35:51:30:77:
                    43:1a:62:9b:e5:2c:05:b3:24:39:73:dc:5e:15:7d:
                    35:36:30:cd:e1:ce:b7:b5:89:51:5e:48:25:c2:85:
                    7c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D2:A3:68:78:5F:6E:C5:09:27:A8:5C:A9:9D:1E:D9:B4:53:0F:4C
            X509v3 Authority Key Identifier:
                keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:96:bb:42:fd:db:09:6e:17:df:be:0d:3d:30:7f:32:44:0f:
         a8:ab:89:74:eb:c8:57:3d:75:b0:1a:26:3d:5b:50:d0:b1:9c:
         20:54:a5:a7:94:59:78:8e:bd:1e:81:41:04:a2:3a:3b:1e:f9:
         18:4e:bd:52:4f:25:63:9f:1a:4b:35:81:19:7d:46:1d:56:8e:
         55:17:84:df:b4:81:26:c2:df:d8:77:f8:96:d0:93:bb:d2:37:
         6e:84:18:80:c7:12:79:90:84:84:f0:6f:80:8f:f9:d5:58:b6:
         ff:67:dc:21:b6:8c:15:ca:2a:d2:fa:71:b4:fe:f2:ad:73:c4:
         61:8b:df:9b:6d:fe:e6:96:40:2b:0c:cd:e2:a2:cd:e0:95:24:
         60:46:58:59:2a:ea:c2:51:e1:e4:ac:65:45:77:04:9b:04:53:
         8c:dc:7d:55:da:26:a0:92:dc:40:96:a2:df:82:c0:95:be:7a:
         10:79:6a:12:88:9c:b6:2a:2a:44:98:4a:27:b5:25:1c:b6:7b:
         63:ca:30:77:d3:77:39:a4:7c:00:52:e5:9b:ed:57:98:18:83:
         77:80:82:ed:cf:16:2b:0f:90:ec:74:3b:76:50:2c:e3:96:7c:
         c7:f8:78:b3:b4:a7:47:e7:96:0f:3c:27:0c:6f:8f:b4:6e:ef:
         5d:6a:9f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 14:22:28 2026 by rpki-client