This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft
File:                     9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft (raw, json)
Hash identifier:          wNjl0TRUSI/dz+Pxx+m6OznmMyt/bURirJi7FVOJfmE=
Subject key identifier:   A0:42:5B:23:14:E9:D8:30:36:48:D1:70:64:AC:87:60:BA:15:32:02
Authority key identifier: 94:95:A8:16:26:FC:F6:E7:9C:AF:B0:FC:72:66:C5:A7:70:B4:57:F3
Certificate issuer:       /CN=9495A81626FCF6E79CAFB0FC7266C5A770B457F3
Certificate serial:       521E19DF7C23D8EE9E3C13EA7EB4A68F4332120D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.cer
Subject info access:      rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft
Manifest number:          3A
Signing time:             Thu 18 Dec 2025 01:03:08 +0000
Manifest this update:     Thu 18 Dec 2025 00:58:08 +0000
Manifest next update:     Fri 19 Dec 2025 03:44:08 +0000
Files and hashes:         1: 326131343a373538303a336666643a3a2f34382d3438203d3e203434383232.roa (hash: B+B2Yl/O36Gn5Y+oNxHVV8LhWuDlCy4ZF9J305MP6uY=)
                          2: 9495A81626FCF6E79CAFB0FC7266C5A770B457F3.crl (hash: vXrNNoCpWr7l0+zaj96bJenAOxsgmnDWXLEro1aEoXk=)
                          3: 326131343a373538303a336666663a3a2f34382d3438203d3e203434383232.roa (hash: Kicy9HxyZzEtWNVt6uGQnpFMpN2VWc9gbNotwWywYxs=)
                          4: 326131343a373538303a336666653a3a2f34382d3438203d3e203434383232.roa (hash: fOomgPnkxPgBzURmASJKUZ+RYP9k6NrKcBNGVrv8WMY=)
Validation:               OK
Signature path:           rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.crl
                          rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 03:44:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:1e:19:df:7c:23:d8:ee:9e:3c:13:ea:7e:b4:a6:8f:43:32:12:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9495A81626FCF6E79CAFB0FC7266C5A770B457F3
        Validity
            Not Before: Dec 18 00:58:08 2025 GMT
            Not After : Dec 19 03:44:08 2025 GMT
        Subject: CN=A0425B2314E9D8303648D17064AC8760BA153202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:28:22:b2:c3:d9:bf:ed:d4:f5:32:2a:9e:5d:
                    89:ce:83:de:fb:cc:b5:21:90:57:69:c9:93:80:a3:
                    9d:c0:bb:8f:38:04:7d:40:e2:bf:27:e0:b3:0f:44:
                    e6:2f:4e:26:4d:6a:c4:07:85:e9:45:c8:0a:60:f4:
                    32:52:5c:cf:71:d5:e3:0e:11:3e:81:f4:2d:f4:7b:
                    59:62:e1:e8:e5:93:b0:50:91:54:71:39:8f:00:a1:
                    79:22:0b:fa:a2:e0:9f:40:cc:cf:2b:53:91:f6:59:
                    21:72:0a:c4:7b:4e:52:24:b4:c3:68:ea:eb:8e:0b:
                    8e:71:ab:c2:d7:70:64:91:43:55:d8:25:76:f0:a5:
                    16:27:86:df:1c:4e:04:30:df:82:55:7b:fd:56:06:
                    18:60:75:f3:5c:27:7b:37:cc:2e:63:1d:43:48:6b:
                    5c:3c:4a:25:12:3c:b1:d4:5e:ae:8a:5e:87:7c:df:
                    b7:4f:90:9b:be:72:69:f9:f0:4f:fc:fb:c0:81:c2:
                    9b:de:35:fc:7b:56:25:3b:07:64:d6:c1:b3:6f:ad:
                    2c:9a:47:09:75:8d:9a:9c:0f:12:f1:5b:6c:d0:24:
                    ed:4c:17:52:a5:1f:c6:dd:a3:61:2d:da:a5:c3:7c:
                    c5:be:20:f9:f9:f5:84:0e:a2:c9:3b:9c:61:4b:1d:
                    d3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:42:5B:23:14:E9:D8:30:36:48:D1:70:64:AC:87:60:BA:15:32:02
            X509v3 Authority Key Identifier:
                keyid:94:95:A8:16:26:FC:F6:E7:9C:AF:B0:FC:72:66:C5:A7:70:B4:57:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f9:76:1c:4e:c5:ec:7f:31:75:c6:04:08:f0:e7:52:b7:ad:
         15:9a:19:ee:b0:25:c5:6d:e5:fc:92:d4:59:e6:46:59:a7:92:
         b0:12:c5:2c:34:24:2e:95:ae:a0:9a:0f:5c:53:b7:3c:30:4e:
         95:ec:8d:1e:ff:5b:10:b5:66:18:00:ac:8f:f3:e0:63:bd:be:
         b2:41:cd:f0:b0:e5:72:56:6d:2f:10:22:db:aa:2c:52:4a:79:
         04:ec:10:bf:72:71:7a:26:92:58:d4:e6:cb:36:c9:38:db:8c:
         dd:00:d4:98:d3:d7:df:28:c8:69:8f:ad:df:f2:9b:10:d3:7e:
         58:bb:59:56:c2:f6:ff:68:48:89:b5:00:33:4e:a1:2d:3f:b2:
         1b:dd:04:67:42:bd:99:db:22:4b:56:d5:30:e5:e5:9d:3e:74:
         36:93:91:9c:a6:29:8e:ba:12:21:a5:5f:49:0a:2f:3f:81:76:
         64:c5:3a:3b:63:f8:2f:63:9f:4b:d0:7a:6e:62:d8:61:02:75:
         62:99:31:e0:e5:c3:b7:ff:33:85:67:58:f8:1f:75:1e:cc:0a:
         59:9e:34:f7:df:cf:ae:3c:ba:21:20:89:d6:a8:3a:d1:3f:cb:
         e4:ef:12:dd:6d:31:dc:f2:3c:c9:8e:27:bc:08:13:9b:da:4f:
         5a:bd:fd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 21:03:19 2025 by rpki-client