This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File:                     guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier:          HCFXLvUbP8k0upouvemyP0uq+Xr5UBD37Wx5Lpv6xZU=
Subject key identifier:   5D:86:A6:88:6F:08:BB:6D:DE:26:E5:60:6D:7D:58:AE:CE:5E:8C:27
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer:       /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial:       019AF6F99674D5832EA396336CB985DDA34B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number:          0B8D
Signing time:             Sun 07 Dec 2025 04:02:23 +0000
Manifest this update:     Sun 07 Dec 2025 04:02:23 +0000
Manifest next update:     Mon 08 Dec 2025 04:02:23 +0000
Files and hashes:         1: XTZ-6WhmzXiDDwFWajhChN4966c.roa (hash: 76eYyVPhyFyHfOEPHeaphAj0SWfwnKjZwUHP7osL/Jg=)
                          2: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: QdjuprArcKaITVUB4CEZMcLipxmspXQdmg753qwA3is=)
                          3: kTc3tdsyRqEwIQUrDzGOak8nANc.roa (hash: 7cesO8GKLYeXhtn4E2bVxqR/wKRQ+h04HAytGr5/XYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:f9:96:74:d5:83:2e:a3:96:33:6c:b9:85:dd:a3:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
        Validity
            Not Before: Dec  7 04:02:23 2025 GMT
            Not After : Dec  8 04:02:23 2025 GMT
        Subject: CN=5d86a6886f08bb6dde26e5606d7d58aece5e8c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9d:ec:55:8b:47:d4:51:62:09:26:b3:78:05:
                    7d:ba:88:8d:1d:43:47:31:98:76:d6:f7:f9:42:31:
                    0e:a0:b9:2d:ae:75:85:88:82:d5:54:11:f7:9a:e0:
                    0a:39:79:ee:6a:58:c1:31:e5:3c:78:73:c6:91:b1:
                    64:4b:cb:a7:85:91:8d:7e:e7:00:c0:89:40:13:35:
                    00:f3:c5:31:9c:26:74:4e:ed:09:86:22:47:83:9e:
                    a9:24:c6:73:8b:3a:85:66:5e:54:0f:86:9a:ce:6b:
                    5a:41:c4:2a:be:29:30:55:a7:ba:69:da:56:37:f1:
                    65:51:5e:85:47:8f:e3:f4:5b:52:47:ca:37:bb:f5:
                    47:40:19:25:56:65:42:5c:12:8f:e5:c6:90:b6:fe:
                    3a:7c:3f:d1:7d:d1:b3:be:a4:33:80:e3:5e:50:6c:
                    c5:a4:59:42:bc:d9:2b:36:bc:d3:b1:16:36:00:9c:
                    b7:5c:b6:bd:f8:c1:40:2f:d8:99:e9:94:a0:49:61:
                    3b:c1:56:40:56:b4:11:b5:bb:83:c8:f4:dc:11:5d:
                    6a:9e:ce:b2:ca:97:43:73:91:19:5a:34:45:da:f9:
                    5d:ad:1d:88:c4:fc:04:37:43:d3:7c:89:07:80:71:
                    18:2d:58:32:d2:01:7c:2c:28:3f:d5:e6:19:0a:8e:
                    2a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:86:A6:88:6F:08:BB:6D:DE:26:E5:60:6D:7D:58:AE:CE:5E:8C:27
            X509v3 Authority Key Identifier:
                keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:13:de:65:a4:2c:09:8f:fb:a3:05:dd:3f:5e:f4:55:b5:7a:
         0c:ce:cd:5a:69:48:ff:9f:7c:1e:7b:fd:57:c0:be:c6:33:0b:
         5b:af:5b:14:87:8d:c6:1c:2b:23:04:1d:d4:19:87:c4:20:11:
         f7:64:35:d8:11:92:df:ee:1d:09:91:c6:a4:8d:2f:01:3a:0c:
         35:ca:0b:34:4d:cf:81:3f:d3:57:84:2a:f5:84:95:ab:0e:07:
         c6:6d:38:02:87:6d:23:75:33:5b:71:b0:fc:6c:ed:8d:22:a5:
         74:4a:a7:16:9b:25:8c:65:2d:8e:69:7c:f3:c0:76:fb:cc:c5:
         1c:26:1a:24:3f:53:cb:5c:b7:ad:55:83:7e:e7:a2:1a:76:18:
         b2:b9:96:df:8c:74:a7:89:68:21:2f:6e:e4:1e:37:37:52:c4:
         c1:12:aa:7c:8d:8e:bd:6a:b1:1b:cd:5a:b0:0f:55:8c:4c:e9:
         d6:4b:16:04:6d:c8:61:e4:9d:e9:9c:3a:06:29:bd:ac:b5:41:
         d9:18:21:ff:da:52:7d:4b:2c:26:b4:3c:6a:79:07:06:eb:30:
         77:bf:8d:9f:be:24:29:6c:6f:ce:85:98:58:8e:26:df:30:77:
         90:28:4e:6c:e5:34:1e:c4:b5:96:ed:a2:94:bd:e0:41:a8:82:
         ef:a3:7d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:24:58 2025 by rpki-client