This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
File:                     GTdDRntNpBxilek1EVMwlYa6I5k.mft (raw, json)
Hash identifier:          e3zP8X67qBSc290iZqiXZZ44tkXqTwtK1FpJjMij8CQ=
Subject key identifier:   96:1D:69:17:DC:66:BA:B4:A8:07:CE:A4:49:79:D9:97:A5:70:39:91
Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
Certificate issuer:       /CN=193743467b4da41c6295e9351153309586ba2399
Certificate serial:       019B1C178F55656348A29B01EA0960CA5857
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
Manifest number:          13F8
Signing time:             Sun 14 Dec 2025 09:01:04 +0000
Manifest this update:     Sun 14 Dec 2025 09:01:04 +0000
Manifest next update:     Mon 15 Dec 2025 09:01:04 +0000
Files and hashes:         1: 1TdnBIQpLOCBWH2mt28aivouF4I.roa (hash: OXerkvpTMgtDn41YlP30T5MtsanNBIBwFIzBvbUKvGE=)
                          2: 4wV3tNw8L-G2g-REyKg7rTv19xc.roa (hash: mlDNB6DLTguCsOh+3JJiKoaNz1XvyyZU+vhtwaeg1hU=)
                          3: GTdDRntNpBxilek1EVMwlYa6I5k.crl (hash: 1EQBL7p+04mXyAjz91YwzFx4sLURBgZE/3xk1sZ++Hs=)
                          4: K4x7WnCPM92IfHKWVCrULIlUaVA.roa (hash: KVnqPoeOrxHfk6WulHu6MwITd97JNsKLMzaXFdfZRTU=)
                          5: L0erWF8zE1RnGBSaNfbAKYl2kd8.roa (hash: /zy+SS2a9gbTjEnXkpsItTqQEn8dlA3GKuajYSpZLoU=)
                          6: bGl-O1VWsJiqIgDexKk7dKheHQQ.roa (hash: 6KFHpVYSoKMAphsv2/6O6zAXDRyPyfaziYVLYjZHZ0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1c:17:8f:55:65:63:48:a2:9b:01:ea:09:60:ca:58:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193743467b4da41c6295e9351153309586ba2399
        Validity
            Not Before: Dec 14 09:01:04 2025 GMT
            Not After : Dec 15 09:01:04 2025 GMT
        Subject: CN=961d6917dc66bab4a807cea44979d997a5703991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ae:7b:04:2b:1e:b4:06:6a:76:32:86:b5:f1:
                    14:d6:19:90:35:60:04:68:90:29:2e:85:f4:84:7a:
                    06:97:21:28:16:ff:b3:ad:c9:a2:75:11:20:de:92:
                    3b:aa:ac:72:09:8e:08:e6:26:ae:a2:db:37:ad:3d:
                    eb:6b:3b:49:b1:cf:dd:3d:8b:8c:aa:48:dd:cb:e6:
                    fb:09:12:78:4c:62:6b:53:c7:55:dc:ac:96:57:51:
                    b8:05:55:88:53:4f:01:62:52:32:c5:de:8d:d0:c6:
                    5e:03:8d:8a:bd:f1:36:4f:7d:ca:84:1d:f1:00:45:
                    b4:ee:16:bf:d5:be:72:da:e9:2e:d4:1a:84:2c:cc:
                    71:96:56:30:9c:f6:44:2b:e4:60:ab:0c:f2:09:33:
                    27:7f:51:0d:40:4d:d3:17:c3:f5:f3:be:ee:c6:e8:
                    4d:9a:f9:42:42:35:fc:cd:ae:e9:84:91:64:86:63:
                    20:b8:ca:6f:9e:2f:98:01:3d:2f:fd:18:af:49:09:
                    34:4e:06:eb:cc:00:8e:6d:95:10:b2:ff:4c:50:17:
                    60:d7:22:1a:b9:24:0f:3b:3d:90:ae:92:87:91:85:
                    3b:69:48:25:38:ce:5d:6b:a7:34:76:45:92:6f:ce:
                    03:45:96:99:a0:06:f2:85:1e:08:17:c2:32:b4:1a:
                    3c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1D:69:17:DC:66:BA:B4:A8:07:CE:A4:49:79:D9:97:A5:70:39:91
            X509v3 Authority Key Identifier:
                keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:6f:cd:0f:d3:fb:2a:2d:dc:38:61:0d:d4:84:cf:46:75:ee:
         20:b2:42:59:6f:8d:00:c3:06:12:ad:f5:c9:3f:6e:4b:92:ca:
         c4:b5:43:a4:ed:1b:2b:7a:05:cb:18:8f:79:9f:be:13:d9:e3:
         e2:b3:ad:34:4b:b6:ba:60:f6:bb:be:51:be:69:4d:1d:49:10:
         a8:d6:c6:83:4e:4d:0a:8d:57:e4:b7:5f:87:f6:ca:ba:d3:ae:
         8b:b1:96:5d:40:41:31:a5:b4:d1:e0:89:d8:bc:cb:8e:0e:16:
         cd:bb:2d:72:3c:74:0c:53:5f:9f:f2:55:ea:da:f4:01:88:be:
         e1:8e:58:11:69:f1:4e:57:5a:09:51:39:f3:ae:59:49:c4:34:
         fb:27:66:99:30:ae:0a:27:10:c1:0d:ff:a3:29:0e:77:cd:e0:
         ef:dd:22:f8:9d:c2:9e:bd:b3:ae:ed:74:61:ed:f2:24:8e:85:
         24:a5:8f:d0:12:42:de:59:8b:d6:e0:61:8c:aa:de:aa:5f:00:
         06:a3:3f:74:21:cf:8d:f8:70:ef:e9:82:c1:0e:cc:09:19:4c:
         48:77:cc:66:92:f3:38:e8:80:c5:56:4c:c2:0b:f5:09:31:16:
         63:8f:5c:ec:00:3b:46:a4:3a:58:85:8c:72:e5:4f:00:74:9f:
         c6:46:cb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 15:20:10 2025 by rpki-client