This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
File:                     gU7b0ZY0y7kaDS2v11nUyafne3o.mft (raw, json)
Hash identifier:          uNKz6LKJkAO8u+GyY3vCjgvXYbww27XKzjgqF3txCSY=
Subject key identifier:   9A:8D:68:71:E8:B7:C4:5F:0F:49:40:61:1E:1E:B2:02:72:37:B1:C1
Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
Certificate issuer:       /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Certificate serial:       019B1ACDF5C15E27D7B1C5988079E7715AFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
Manifest number:          1779
Signing time:             Sun 14 Dec 2025 03:01:03 +0000
Manifest this update:     Sun 14 Dec 2025 03:01:03 +0000
Manifest next update:     Mon 15 Dec 2025 03:01:03 +0000
Files and hashes:         1: _ZGs7yyYUfcWFHaeoN_irFYY-Fs.roa (hash: k/ZQQ+Kv/qHUrbi6eDGukQ6+rynVgaxf2EU7N8rlEaQ=)
                          2: gU7b0ZY0y7kaDS2v11nUyafne3o.crl (hash: wEqyNECk8GTkfjzme8/x8GWwyX6Q4qO5bh2KKZ+63Vg=)
                          3: xpTRCuHlYWLPipg1pf1wuJHDIPg.roa (hash: 8yVx7sKih/ir7FZHTNGaky/UBkdstIszyQkTRTd/9nQ=)
                          4: ywM-ydmbzESoETxNsRnDQ6bbYxg.roa (hash: GmNC6UbYgSd9tbGR+GgvLCmczbY/RBGea7VtxVomphs=)
                          5: zticNdKOcKpGZ7y9nSwo2z1Ata4.roa (hash: 8+4soy6gmx5EG7p1nRpzUiPyWHyd7/QxOctDatWj2cE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1a:cd:f5:c1:5e:27:d7:b1:c5:98:80:79:e7:71:5a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
        Validity
            Not Before: Dec 14 03:01:03 2025 GMT
            Not After : Dec 15 03:01:03 2025 GMT
        Subject: CN=9a8d6871e8b7c45f0f4940611e1eb2027237b1c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:36:ff:48:d0:7b:ce:6d:d0:9b:f5:49:7d:31:
                    c0:c8:a1:2f:72:b0:e4:2d:6c:20:67:71:6d:91:4d:
                    cd:90:b9:82:a2:b4:be:10:b3:7a:a6:7a:ba:ee:91:
                    dd:44:27:75:60:3c:a4:e8:db:d0:3f:7f:bf:ad:50:
                    80:77:b1:6b:5c:d8:f0:d7:ca:24:e3:0a:fb:d2:f0:
                    da:ef:23:eb:53:0b:2d:8f:68:eb:91:0a:ee:c3:2c:
                    0e:9f:6d:9e:78:57:db:c0:cf:10:8c:dc:73:06:02:
                    ff:8d:fb:6c:8e:18:9e:5e:75:40:21:e5:49:13:c5:
                    b8:d1:b8:1b:fe:e5:05:81:8f:ba:69:2f:4a:f0:32:
                    0d:4a:9a:51:d5:ad:10:cc:0d:fd:71:4d:8c:de:41:
                    9a:0e:6f:2f:0f:91:59:83:99:b0:85:ab:99:b1:72:
                    55:2d:65:29:21:d2:04:38:cd:cf:4e:b5:e4:68:01:
                    b6:3a:bc:b4:b9:6b:90:90:98:fe:03:df:aa:21:b3:
                    54:cd:57:39:ac:16:60:e5:20:f5:14:2d:33:b5:7f:
                    b8:a8:ff:4a:0c:10:47:0e:b0:e9:47:24:7c:16:f4:
                    50:d6:83:f3:01:db:ed:4b:01:c5:81:4f:75:2b:9e:
                    a5:cd:ed:5f:46:a9:34:42:0e:78:ec:2e:42:f6:bd:
                    5e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8D:68:71:E8:B7:C4:5F:0F:49:40:61:1E:1E:B2:02:72:37:B1:C1
            X509v3 Authority Key Identifier:
                keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:1a:ad:46:6b:82:53:1a:63:b3:f9:81:2d:e0:3e:a7:4d:a1:
         d4:a6:5c:fc:5f:9d:aa:03:09:bb:c2:48:ff:ce:24:20:6e:86:
         14:0e:b1:59:67:f2:02:3d:be:83:9e:3d:9f:e7:8e:21:d3:7b:
         00:51:5b:69:8d:98:22:23:1b:07:b2:13:38:da:54:e2:64:fa:
         14:a8:61:33:d5:22:34:ef:83:02:72:0d:5c:70:9d:67:59:ef:
         db:ed:8e:02:63:9d:00:96:41:01:89:5f:1e:3e:74:b8:6f:5c:
         95:0c:3b:c3:be:94:79:34:c8:20:9b:2c:2b:36:de:1b:bc:72:
         72:11:a3:fb:44:66:39:98:2a:40:b6:f2:16:1b:62:aa:41:dc:
         a3:94:98:42:29:f1:2d:3a:b9:10:df:9b:94:b9:52:dd:9c:6e:
         5e:26:a4:65:aa:b9:80:98:6b:de:ab:e5:57:9c:e7:f9:c8:95:
         91:9c:1e:0a:36:20:9b:8c:7e:6f:e9:8c:cc:7d:eb:da:aa:89:
         b9:51:89:28:b7:8d:ef:5e:f7:76:3d:66:37:d6:76:a1:03:02:
         3b:b7:e2:25:b0:08:3a:83:f3:f5:dd:b9:3d:b0:8e:b7:9e:47:
         a8:45:67:62:a3:88:87:33:ec:f7:b5:fa:22:06:a0:40:96:bf:
         08:85:c2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 12:03:32 2025 by rpki-client