This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
File:                     GfGp3RJvNyN84gD7hhb_k3vKlmw.mft (raw, json)
Hash identifier:          8z+ch9tClAAMczJnd+bfzMvLglXiGMyKV40Uv7HxFxA=
Subject key identifier:   51:2A:ED:FB:37:EA:A8:45:2A:D1:07:89:5D:1E:9B:3C:09:8B:B9:B6
Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
Certificate issuer:       /CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Certificate serial:       019BF988E7B6372AA84EB992E7809FAB698D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
Manifest number:          17E8
Signing time:             Mon 26 Jan 2026 09:00:57 +0000
Manifest this update:     Mon 26 Jan 2026 09:00:57 +0000
Manifest next update:     Tue 27 Jan 2026 09:00:57 +0000
Files and hashes:         1: 7owqXESGy_RXh39I2zXYrOmIRmY.roa (hash: uD/kXqY4+DVU4PEvK0O92LooxshLndRFHktHnH9fzjs=)
                          2: FhTqn0nI2AOefAde-zGtbwEbRRY.roa (hash: pvmj7N2aWwyL4DhPFHc9oWpCfcCMtoks7zjIuX/XA3M=)
                          3: GfGp3RJvNyN84gD7hhb_k3vKlmw.crl (hash: X2MJF2BeGypSMTQIg7gHOh49NI+Iw4DurNO8bGw1XVQ=)
                          4: IjVQWwZv9EJg_zhL2dYrs3DlkR4.roa (hash: 9Z9gCW1kabV4H10WypJ+CcaUnOFek5gLKpjj5o/RjC0=)
                          5: nnLZ_anjPSOLRayVOL-RzewgHwI.roa (hash: 2WaAIYb59kGhe6tvXHb5ioUayH6vLhFoDq8NRlocKJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 09:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:88:e7:b6:37:2a:a8:4e:b9:92:e7:80:9f:ab:69:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c
        Validity
            Not Before: Jan 26 09:00:57 2026 GMT
            Not After : Jan 27 09:00:57 2026 GMT
        Subject: CN=512aedfb37eaa8452ad107895d1e9b3c098bb9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9d:0e:6a:74:36:a0:11:f0:7f:f3:24:0c:12:
                    9f:ee:57:df:81:bf:33:7c:83:d4:f7:df:82:1a:61:
                    cd:72:88:b2:90:a8:76:3d:fb:05:c3:91:41:11:cd:
                    da:bd:d1:f4:81:9c:30:b5:a5:37:d3:ee:73:de:ef:
                    be:29:34:eb:56:eb:6b:4b:7e:30:14:5c:60:90:49:
                    23:8a:86:30:25:27:c2:28:15:9d:15:62:e1:84:bc:
                    86:aa:50:5b:52:7b:f5:07:dd:43:b0:5c:f5:0e:9e:
                    db:7e:9e:ae:5f:35:99:97:ad:a0:cf:6b:fc:ee:87:
                    13:ef:f5:93:3e:c3:3b:db:7c:f2:32:c4:34:01:90:
                    63:1a:cd:c9:53:06:c0:d5:0c:b2:01:ae:32:a3:d1:
                    ec:f6:ca:ad:e8:20:4f:9b:ea:84:c7:fe:95:8d:68:
                    49:1c:13:8f:9c:d7:51:ea:e3:73:4b:30:ff:a3:51:
                    2f:45:14:ff:23:02:7e:ea:67:90:0b:76:c8:19:06:
                    38:04:d9:79:28:ac:db:a8:0b:dc:50:2b:29:3c:72:
                    76:bf:cf:5b:b8:a5:e9:34:02:35:7a:22:53:ba:ec:
                    79:86:7b:b0:0d:88:f9:7f:11:33:50:55:f3:9f:b3:
                    1f:a7:db:f0:ee:90:93:55:04:47:e0:40:eb:3a:3f:
                    45:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2A:ED:FB:37:EA:A8:45:2A:D1:07:89:5D:1E:9B:3C:09:8B:B9:B6
            X509v3 Authority Key Identifier:
                keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:8f:f7:84:72:cb:9d:af:61:80:4c:68:4f:2b:c8:a8:db:08:
         4b:50:1c:3f:34:82:3c:82:ba:2a:6b:3b:27:67:f0:70:03:c4:
         fd:ce:3b:2c:fc:35:f6:eb:a0:75:09:c3:db:77:6a:08:d5:b1:
         b5:f6:d9:35:33:37:d7:cf:d0:6a:12:2b:d6:9a:5e:68:1b:4a:
         a8:64:98:8b:33:d8:d4:46:ba:a9:c1:e0:85:b2:bd:e5:a9:71:
         78:cf:ed:05:1b:dd:4c:3b:29:4c:5a:3c:cb:a2:64:04:67:77:
         fb:5a:dd:d3:23:e9:72:4b:a2:ed:d1:c3:f0:87:41:8e:d1:80:
         ab:54:b2:49:b8:c5:b5:f4:82:0b:c6:a7:06:db:29:9f:76:f9:
         a8:e2:5a:19:69:a3:c0:93:d3:c4:a3:1f:09:67:43:bd:ce:7a:
         54:2e:e6:ef:a8:34:93:16:16:b7:54:a9:69:cf:ca:43:96:d5:
         e0:6b:96:52:e1:44:d8:af:ee:74:06:e2:fc:8b:ff:6c:4a:df:
         d1:8b:9f:89:7b:67:82:7d:ae:0e:d4:5b:4d:3a:88:47:79:c1:
         51:45:36:37:a0:80:cc:d5:d0:6a:3b:cd:81:17:7b:18:58:09:
         d8:a3:77:3c:ed:b0:e7:7d:cf:c8:ec:03:57:c1:1e:55:76:7a:
         36:bd:7a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:59:50 2026 by rpki-client