This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
File:                     gLBji4dvOXjKe9KNfeNwmWs5aj8.mft (raw, json)
Hash identifier:          30sunvlg46gqUBjDU+cg2QlIg+HNnl8vE7Q/FEX8Emk=
Subject key identifier:   E8:21:9F:C1:65:3D:EE:83:60:DE:E7:71:08:37:25:0D:D2:90:71:D5
Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
Certificate issuer:       /CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Certificate serial:       019BD76AD7ADBACCDAA8D31D5DD99F6EF380
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
Manifest number:          08FF
Signing time:             Mon 19 Jan 2026 18:01:02 +0000
Manifest this update:     Mon 19 Jan 2026 18:01:02 +0000
Manifest next update:     Tue 20 Jan 2026 18:01:02 +0000
Files and hashes:         1: VBmr-5LpIjSQ6myjINReT6R1vMo.roa (hash: qg+Z2r3TWn/McCuaCe1xwiAMWjaHkNEjXrq2W1LrDUU=)
                          2: Y61lvfTY0IfOHOaNCazwXGsL2N8.roa (hash: 52xFh0jAqOfccjKrhy8KiqEx7vruviP8tzZ1IxwQ/As=)
                          3: gLBji4dvOXjKe9KNfeNwmWs5aj8.crl (hash: Twsxj6KLI13o1lz+Y1fZIEzEebFT6u22mTPUBag1zLI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d7:6a:d7:ad:ba:cc:da:a8:d3:1d:5d:d9:9f:6e:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f
        Validity
            Not Before: Jan 19 18:01:02 2026 GMT
            Not After : Jan 20 18:01:02 2026 GMT
        Subject: CN=e8219fc1653dee8360dee7710837250dd29071d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1b:6d:0a:63:c8:8b:89:aa:a5:ad:20:d7:54:
                    a7:5a:11:83:f8:cd:91:4c:cf:58:ea:18:7d:18:41:
                    07:2e:04:9f:df:1e:54:6f:43:c4:ac:7b:d5:f6:a6:
                    66:c8:d5:d2:95:f5:8d:96:d3:a5:2d:f1:6a:1e:74:
                    57:7a:df:c4:27:24:72:2c:2e:1f:73:58:3a:d8:9f:
                    bb:1b:c3:fe:af:fd:5d:54:b3:4d:f0:a4:2c:f9:58:
                    b0:c9:b5:ad:96:2a:09:5b:d7:ec:04:f6:c6:ab:9b:
                    1d:36:b3:9d:4c:19:28:ce:3a:a0:45:60:5d:3d:fb:
                    ce:e9:7d:b5:11:67:be:f7:07:b7:88:a4:87:3d:37:
                    fe:8c:76:e1:66:1b:89:5e:31:06:91:c2:aa:0d:64:
                    58:00:10:3b:2c:e6:94:84:6b:46:e8:fd:58:cf:9f:
                    67:91:b2:66:6b:cb:36:06:35:aa:3e:75:e7:a3:ed:
                    8a:d7:1a:ab:65:4a:1f:f6:91:18:28:9c:03:29:96:
                    37:90:5d:40:69:26:d8:1a:5e:e8:d3:ff:42:9e:90:
                    15:2f:a1:ab:ac:9b:ba:77:f8:88:f3:3e:33:4c:1c:
                    50:5a:e2:dd:99:53:3d:b4:8f:2d:38:3a:c3:2d:13:
                    fe:d1:81:1c:93:c3:a0:65:ac:69:1c:57:b2:17:34:
                    de:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:21:9F:C1:65:3D:EE:83:60:DE:E7:71:08:37:25:0D:D2:90:71:D5
            X509v3 Authority Key Identifier:
                keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:13:5e:12:23:24:cf:20:71:20:d2:3b:16:a4:6f:5f:38:92:
         a0:ec:bb:6b:4c:ff:a5:8c:ca:5d:f4:72:7e:45:fb:5d:dc:c1:
         b7:a1:46:71:0c:13:51:f3:e4:ce:8e:6e:eb:16:c0:bf:8c:90:
         ba:90:6e:75:d9:b3:6d:2b:7f:d8:c0:b1:38:c1:61:3f:db:45:
         be:96:d6:f2:63:c0:e7:45:ac:97:fb:26:62:a9:29:38:22:ec:
         52:c2:70:f9:3e:ce:02:1a:64:92:d4:94:b4:ae:53:ac:c0:09:
         34:c6:0f:62:72:fd:4f:09:47:d6:a1:b5:c1:00:ed:0c:b5:55:
         0a:46:e3:72:e5:b2:45:71:a1:ca:1f:fa:10:86:87:21:83:8a:
         f8:89:fb:5f:85:09:04:e0:e9:f0:df:f9:9c:66:ed:09:57:63:
         27:bb:97:38:ec:66:60:42:37:d3:95:0b:5f:dc:22:fa:aa:e2:
         85:f9:9d:b6:95:a6:cb:8a:b3:62:ad:48:4f:4e:90:18:aa:df:
         bd:9c:74:8f:d1:c5:ef:29:c1:d3:f7:c2:8e:c6:b1:65:38:a0:
         70:6d:c1:9b:7e:fe:1f:60:cf:40:11:97:da:f1:77:eb:57:9c:
         c8:77:97:fa:e0:5f:6d:65:80:f9:f6:a6:2c:95:bc:51:42:d3:
         09:a5:d0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 03:00:51 2026 by rpki-client