This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
File:                     g_gpRGn7euwmAbsDdy0BVvRwt00.mft (raw, json)
Hash identifier:          C4ec3FVNw+meQVemeAaVJjp34Rxosy/gRaGRW32u61I=
Subject key identifier:   01:98:EE:72:3B:F5:41:99:A3:D1:B1:7F:82:23:A5:80:98:02:A3:05
Authority key identifier: 83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D
Certificate issuer:       /CN=83f8294469fb7aec2601bb03772d0156f470b74d
Certificate serial:       019B36E9DE185C4720BA83BEC1D22CFF0AAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
Manifest number:          1786
Signing time:             Fri 19 Dec 2025 14:00:54 +0000
Manifest this update:     Fri 19 Dec 2025 14:00:54 +0000
Manifest next update:     Sat 20 Dec 2025 14:00:54 +0000
Files and hashes:         1: atkABp03ezo3IQf9p_BdcUMTGKY.roa (hash: XIGewf/YhXuM1/3dqCaqTKBoy+0/E1uQhatEfe1jkfI=)
                          2: g_gpRGn7euwmAbsDdy0BVvRwt00.crl (hash: cQbHhb2Donw22MQvuYH2rhAT0oKr1VPYl7P1lM/J2oQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:e9:de:18:5c:47:20:ba:83:be:c1:d2:2c:ff:0a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83f8294469fb7aec2601bb03772d0156f470b74d
        Validity
            Not Before: Dec 19 14:00:54 2025 GMT
            Not After : Dec 20 14:00:54 2025 GMT
        Subject: CN=0198ee723bf54199a3d1b17f8223a5809802a305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:36:ff:f3:de:7b:3d:e0:b4:36:0a:01:f2:4b:
                    b3:ee:fa:7f:58:28:1a:c6:4c:21:ce:a5:b3:cd:e7:
                    3e:a5:f1:fd:7b:19:58:76:9b:31:07:ea:fc:b4:3a:
                    ab:6b:c6:cd:4f:39:b1:48:b4:77:9b:1a:b9:69:02:
                    4f:db:e8:34:74:34:8b:7f:38:91:90:d2:08:53:d2:
                    28:c3:2e:ef:1d:d3:4c:2c:e0:88:2d:9f:19:62:a1:
                    5c:ba:25:8a:bc:d5:81:44:bb:99:da:69:c9:40:ce:
                    55:7d:2c:17:d6:f8:f3:fc:4b:1d:01:93:ff:8a:fa:
                    e4:17:25:55:f5:57:70:f9:5d:71:2c:b6:23:86:90:
                    da:10:c9:b6:34:99:f4:85:e4:62:0a:cc:58:8f:d3:
                    dd:b0:7e:d5:99:49:5f:be:cc:ad:37:f1:0f:06:93:
                    1b:19:34:54:84:1b:65:b8:ca:89:d0:a1:ed:6a:83:
                    79:45:4d:ab:4c:41:81:18:28:d7:4f:0e:f3:39:d3:
                    11:a3:d0:02:7b:93:f2:89:a7:8f:09:db:5d:ed:78:
                    db:a8:1a:b8:ce:69:5d:2f:fc:d7:84:ef:fe:89:c1:
                    1f:0f:49:39:84:09:6a:60:e9:40:77:fc:a6:b5:8e:
                    f6:b7:c7:e1:44:55:78:b7:22:b9:03:2e:89:c2:a8:
                    2a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:98:EE:72:3B:F5:41:99:A3:D1:B1:7F:82:23:A5:80:98:02:A3:05
            X509v3 Authority Key Identifier:
                keyid:83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:f8:36:fa:d6:da:b7:82:40:ef:05:c5:a2:6e:33:6f:ea:eb:
         bc:44:22:9c:b5:5d:fd:ce:de:28:9a:26:bd:71:5c:5e:6b:e8:
         5f:83:97:a1:f9:51:a6:63:58:e5:5a:7a:18:8d:fe:33:16:42:
         e0:27:3d:c9:d9:81:97:9e:a1:b4:c9:6f:a8:6c:e2:b4:40:13:
         0b:93:fc:b6:f1:ff:da:7f:83:6b:34:24:0e:84:1a:8d:e7:75:
         56:3f:d9:45:38:ae:41:07:ca:73:73:df:6c:d1:b2:3d:b1:1e:
         0a:15:45:96:22:38:46:0c:98:2d:ea:1e:b7:d2:47:6a:e7:6e:
         dc:bb:32:d2:e7:f1:36:b7:d1:f1:2a:b4:60:c5:7c:a9:2c:2c:
         71:43:d3:04:3d:a5:d7:fa:5c:53:c1:f2:ad:3f:42:d5:ca:10:
         b1:37:ca:4a:14:8f:d1:f6:b9:f1:cc:2d:1f:cb:b7:7c:d6:c2:
         32:ab:51:12:6d:bc:c9:98:20:85:33:1e:ce:e2:06:4f:8b:5e:
         ae:17:1b:03:61:b1:15:1c:dd:b3:b9:a7:cf:15:0b:f5:f8:7f:
         9e:93:2c:d9:b6:09:b2:98:59:64:25:d9:2a:86:90:34:f4:f2:
         b5:af:e0:04:ec:3f:d0:07:73:78:96:77:46:59:ac:22:17:9c:
         0c:a3:f6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:54:29 2025 by rpki-client