This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
File:                     gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft (raw, json)
Hash identifier:          qyo/JBpAgxSPnK4s3+tQzKMmadlv9e0VxYIDemfKUz8=
Subject key identifier:   0B:E1:D0:79:D4:17:9B:40:E6:7D:90:09:69:98:03:B9:D7:75:FF:7F
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Certificate issuer:       /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial:       019B1B3B95750DFDCC91274D978AE2241418
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
Manifest number:          180A
Signing time:             Sun 14 Dec 2025 05:00:48 +0000
Manifest this update:     Sun 14 Dec 2025 05:00:48 +0000
Manifest next update:     Mon 15 Dec 2025 05:00:48 +0000
Files and hashes:         1: TVTY8940R-JLK3g0bC-55INlCR4.roa (hash: G8fybb1dVxSY3d5NiOJGlSrI9zs27WohVNGxcPiP+KM=)
                          2: XVwZQRv1vz6JSSnd8P8GyNHVWKI.roa (hash: UKsEAKn0FU1wyu4cVCRnP9Y8nY4SlsAm5Omp7LeDq8o=)
                          3: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl (hash: XN21FOgtXk71owmJiX7GHjlc4aOnXuvBZ21WdEHmXv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1b:3b:95:75:0d:fd:cc:91:27:4d:97:8a:e2:24:14:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
        Validity
            Not Before: Dec 14 05:00:48 2025 GMT
            Not After : Dec 15 05:00:48 2025 GMT
        Subject: CN=0be1d079d4179b40e67d9009699803b9d775ff7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ae:09:75:8c:95:1e:cd:48:a9:4e:db:45:6d:
                    04:22:2d:c0:63:e5:e3:c4:7b:95:0d:4b:4d:b1:ce:
                    74:cc:61:e4:a7:3a:f7:97:a8:66:19:eb:5f:7a:8a:
                    01:33:1f:b7:6c:25:63:e4:33:47:c5:26:77:82:e6:
                    9d:b3:dd:e4:ae:45:dd:6a:1e:85:1a:bc:97:ee:19:
                    db:05:f1:e7:13:3f:69:0f:d9:f4:e3:4b:d8:d5:d5:
                    33:52:c8:31:d9:43:80:d8:b7:cf:44:56:53:3c:f0:
                    5d:06:a2:99:31:3e:42:90:d3:02:b5:a0:21:95:10:
                    41:cb:7e:25:92:67:a7:19:a6:26:3f:ab:58:64:da:
                    da:b9:40:33:8c:9f:5f:32:34:c1:7e:1b:8a:1f:20:
                    a7:b4:d2:fc:79:9c:c0:fe:c3:85:6e:ad:58:18:de:
                    d0:00:42:9d:a9:5a:2f:42:90:3b:f1:2c:76:66:0a:
                    d7:74:0b:35:d8:34:e2:99:da:1a:7e:28:50:1c:11:
                    21:e9:0c:f3:0e:00:c6:ea:b5:27:55:99:3c:b3:28:
                    58:c5:ef:bd:02:67:10:63:6d:bd:99:72:e4:85:3b:
                    e4:ef:04:9c:63:d3:36:65:5f:db:59:68:59:8a:28:
                    51:92:38:be:52:51:ab:90:7a:12:c2:5f:db:21:a3:
                    3f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E1:D0:79:D4:17:9B:40:E6:7D:90:09:69:98:03:B9:D7:75:FF:7F
            X509v3 Authority Key Identifier:
                keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:74:1f:7f:e7:c4:e0:41:2f:df:8a:c5:e0:48:fa:3c:0a:94:
         cb:19:00:fe:42:17:60:9d:b6:46:36:30:2e:a0:d2:84:df:4c:
         89:bd:54:87:95:86:2a:a6:f9:1f:81:f4:11:35:e2:13:52:e7:
         b2:ef:b2:3f:d5:17:7b:34:80:b8:57:2c:93:54:d6:d6:f1:cd:
         90:c0:e0:5c:72:0e:89:52:19:17:2c:f6:a7:c6:84:53:30:fb:
         26:69:7f:3f:35:27:fd:b4:58:a5:a3:0d:ee:c6:ca:c2:63:7d:
         98:34:01:44:32:7e:e8:33:40:f5:6d:a1:1b:0b:dc:1c:df:7d:
         2a:53:b8:2e:32:48:f5:ee:b5:65:ec:06:e7:c9:c5:a0:38:80:
         d7:08:62:5a:35:02:b0:92:1e:25:73:30:b1:c7:87:03:a2:9a:
         b7:a9:f0:1d:94:72:20:ae:36:96:fb:51:df:43:70:ee:17:97:
         8a:53:5c:23:24:ac:68:0a:39:a8:85:84:b3:27:16:f9:89:a2:
         81:59:6b:99:cf:ce:7b:59:7d:ff:d4:76:a6:38:86:08:64:7c:
         80:3a:ef:f9:02:b1:a1:99:09:0e:72:47:9f:66:a9:5d:f5:eb:
         fe:07:e7:25:84:94:ac:6b:12:45:39:36:8f:28:76:5e:4b:3e:
         90:e7:a7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 08:43:03 2025 by rpki-client