This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
File:                     gVeAUy7Smj-A57pBTvyzednsl8k.mft (raw, json)
Hash identifier:          9/vKIWgM8KFOqJarMAS6JNKZpvVGc4q5bchJJqDWnXg=
Subject key identifier:   EC:66:18:1F:8D:3F:6F:2E:FD:F4:25:ED:08:8E:56:90:8D:D7:C4:BB
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Certificate issuer:       /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial:       019B33B253D91150A61CDEA8A493381F2119
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
Manifest number:          0A40
Signing time:             Thu 18 Dec 2025 23:01:23 +0000
Manifest this update:     Thu 18 Dec 2025 23:01:23 +0000
Manifest next update:     Fri 19 Dec 2025 23:01:23 +0000
Files and hashes:         1: 8830yksUtOARQk3UFlh-4PNgBiA.roa (hash: EmMvReS/jq/SYrfMRIBrAHCck7YrsLYqaTcJWkpKgFg=)
                          2: EFk_WP_A_QvGCbPv627jqVmsHfg.roa (hash: k68DoPvpgB6wKb8qFWWLmBs9+urZUeVvssLhdMSBf6k=)
                          3: Qoyp_KSFKsVEEg02fUYTNo7SRXs.roa (hash: mLCh1eZnjR+MrenmFjvdAR50ujw/VIYVRd5MKC5x8OQ=)
                          4: ZE3Pd2Bv3QzdWxKRnPV6C_9jTsQ.roa (hash: ULlmWYQOwziva5U7xH3+US8Vy16wr3u3qWj4qpwczMo=)
                          5: c3zA2IV4VwS8jnesB0LpZBsDyEU.roa (hash: hofK+2Uxhr/bTuv6Zx9VkqisU5DNhllbJwm0jIPd9ao=)
                          6: gVeAUy7Smj-A57pBTvyzednsl8k.crl (hash: ghT/1WkegkO09EIjCKCZZfN+CSeA2j+H/HPEStnCFc0=)
                          7: xufGdiw8vu26zsmML7UeTUou5hA.roa (hash: FPD/rr/c4+/3+ME4ysyP2eNMHG6cFBZQMwG4yZOWY+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:b2:53:d9:11:50:a6:1c:de:a8:a4:93:38:1f:21:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
        Validity
            Not Before: Dec 18 23:01:23 2025 GMT
            Not After : Dec 19 23:01:23 2025 GMT
        Subject: CN=ec66181f8d3f6f2efdf425ed088e56908dd7c4bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a3:36:6c:8f:90:f9:35:9d:a4:ff:43:22:80:
                    86:1c:00:c4:cb:af:24:68:fc:c3:c0:bf:e9:9e:48:
                    41:e3:4b:f4:da:bf:36:31:06:44:72:ba:6b:aa:b0:
                    11:08:1d:3a:ee:77:00:6b:4c:38:7a:a6:0a:e9:e2:
                    61:e5:fa:00:1a:1b:98:c6:0b:7a:a9:97:d5:02:9e:
                    78:14:8f:7e:38:db:ee:d0:47:a1:78:f6:6d:90:cf:
                    79:a6:73:ba:4f:78:8f:f8:cb:ea:10:6c:64:b7:70:
                    0b:5c:eb:50:33:0d:b0:5f:63:ab:ee:f7:e2:6a:07:
                    66:61:13:20:bf:3b:b7:c6:e9:85:dc:10:64:62:e6:
                    5c:b2:40:49:0b:bd:68:62:10:73:5a:fa:ae:7b:8c:
                    3c:c6:a0:3a:4c:8e:59:37:e9:15:46:29:c4:ec:3d:
                    ea:35:b4:8b:10:4c:1a:7f:36:c0:6d:e2:7a:80:33:
                    69:fc:31:bc:6b:12:2a:05:7a:c7:e4:76:79:79:92:
                    eb:55:68:54:75:3c:52:f9:c5:0e:38:58:e2:1b:e9:
                    5b:8f:2c:32:fa:ab:10:a8:b8:48:3b:26:0c:f8:30:
                    70:3d:ad:0b:15:d5:43:2a:07:b7:3e:e6:17:9c:aa:
                    c7:3a:e1:4a:47:c6:fd:c5:d0:d9:54:4c:e1:27:33:
                    b6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:66:18:1F:8D:3F:6F:2E:FD:F4:25:ED:08:8E:56:90:8D:D7:C4:BB
            X509v3 Authority Key Identifier:
                keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:53:53:4c:67:da:83:69:df:aa:b6:7f:a0:77:94:8e:5a:00:
         02:10:68:a8:67:e1:b1:bb:7c:d2:77:39:b0:65:47:7a:59:a0:
         08:a8:b6:04:c0:20:0f:56:e6:7f:5f:78:1d:c8:46:b5:d3:03:
         26:6f:2f:3a:76:a4:19:7f:c5:d3:ab:f7:5c:fb:a5:42:f8:b5:
         45:19:85:fe:a7:ef:9e:e3:d9:82:4d:66:31:46:4f:25:c0:d0:
         35:5e:40:9c:1a:06:a6:3d:aa:93:0b:21:3e:0e:54:1a:c9:5e:
         0e:b5:78:8b:86:c9:e7:aa:b1:f4:3d:f9:4e:3a:d7:3d:80:ed:
         c9:32:6a:c8:be:9e:3a:29:83:72:b1:f3:ed:21:1c:4f:47:83:
         e0:1c:12:24:35:08:bf:17:61:1f:4b:5b:44:db:b8:1e:0e:06:
         59:5d:45:69:85:d2:d5:6e:fa:11:4e:f0:a9:65:99:f9:61:3b:
         d9:21:85:5c:bf:14:c8:e8:9a:36:d4:91:a1:5c:7b:92:3c:dc:
         42:78:7a:32:27:a9:ef:05:b1:e4:c2:7a:9e:70:51:56:c5:a8:
         d0:6f:49:65:90:b3:c0:b0:aa:20:c1:1b:99:f7:e1:69:a0:be:
         fd:3c:7e:05:cb:2a:ce:a5:20:4f:61:9a:c3:64:26:de:5d:ee:
         25:b8:13:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 06:28:57 2025 by rpki-client