This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
File:                     g_gpRGn7euwmAbsDdy0BVvRwt00.mft (raw, json)
Hash identifier:          AVfoZiM/yzIl30bj4hkc3rNJQ2H3CFc7FRzdtak+BCc=
Subject key identifier:   6D:A2:8D:21:08:DA:C4:6F:38:0A:AE:E4:1B:46:6E:49:8C:31:ED:D5
Authority key identifier: 83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D
Certificate issuer:       /CN=83f8294469fb7aec2601bb03772d0156f470b74d
Certificate serial:       019B427FCBD809A9FFC87684A0DFAA5E36AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
Manifest number:          178C
Signing time:             Sun 21 Dec 2025 20:00:29 +0000
Manifest this update:     Sun 21 Dec 2025 20:00:29 +0000
Manifest next update:     Mon 22 Dec 2025 20:00:29 +0000
Files and hashes:         1: atkABp03ezo3IQf9p_BdcUMTGKY.roa (hash: XIGewf/YhXuM1/3dqCaqTKBoy+0/E1uQhatEfe1jkfI=)
                          2: g_gpRGn7euwmAbsDdy0BVvRwt00.crl (hash: 7I9puhS+r3/VWaBJvluNd8vJOqHqc2TUd1exZ23JQ0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:42:7f:cb:d8:09:a9:ff:c8:76:84:a0:df:aa:5e:36:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83f8294469fb7aec2601bb03772d0156f470b74d
        Validity
            Not Before: Dec 21 20:00:29 2025 GMT
            Not After : Dec 22 20:00:29 2025 GMT
        Subject: CN=6da28d2108dac46f380aaee41b466e498c31edd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b4:78:ad:06:3e:65:82:2f:9d:e6:9e:f0:1e:
                    42:60:f7:15:71:b7:c0:c6:61:52:3b:d7:51:be:3f:
                    be:8a:98:ad:c5:1f:c6:9d:eb:ff:bf:99:c9:36:6c:
                    6c:7b:45:ff:c5:e7:b0:36:07:c4:5f:62:50:7f:fa:
                    b6:fa:a4:1e:17:4e:e9:74:6c:0a:95:87:11:da:c2:
                    04:8b:90:f0:df:f0:f8:1a:f3:cb:3a:7b:d7:f2:da:
                    7f:99:2d:da:a1:98:36:fc:d2:f2:0e:cf:66:f7:5c:
                    fa:0b:20:56:b2:88:8f:ef:54:d6:c8:94:22:92:ea:
                    48:e5:d5:53:a0:76:1f:7b:88:d9:4d:74:a4:c4:07:
                    4f:f0:54:31:49:5c:68:b0:b0:41:00:0e:11:74:ee:
                    4b:c3:85:94:9d:ae:28:06:cc:7e:a2:18:34:af:cc:
                    e8:d8:ed:ab:7b:22:55:c5:8d:77:fa:74:ee:cb:c3:
                    6b:31:8d:1a:68:d3:56:ea:87:c7:ca:d0:a7:68:40:
                    f7:e1:f8:2c:1c:86:2a:2c:4b:53:1d:a7:f7:6c:72:
                    b8:90:59:5d:cf:3c:ef:f4:5d:bc:2a:44:6f:06:66:
                    24:38:77:ce:7c:d7:c9:18:eb:9e:55:9c:1b:e6:19:
                    4b:0f:05:53:80:6e:a6:02:1b:97:1b:f6:5d:09:e9:
                    48:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A2:8D:21:08:DA:C4:6F:38:0A:AE:E4:1B:46:6E:49:8C:31:ED:D5
            X509v3 Authority Key Identifier:
                keyid:83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e1:11:52:1f:20:72:32:8e:98:85:dc:fc:44:16:fd:8f:90:
         fe:0f:ae:19:c7:e5:83:d2:01:87:3a:2b:38:ac:53:df:85:6a:
         e9:e2:1e:da:1c:12:89:bc:ce:3b:91:a3:16:c0:07:f8:88:b6:
         45:f4:30:28:ef:95:42:2d:5e:ca:59:86:4d:94:3e:a0:b1:f2:
         84:0e:d0:a1:61:43:f6:c6:d1:a2:00:88:38:10:2b:89:ba:07:
         20:5c:03:4f:00:70:6f:9e:a2:5c:92:71:01:ad:a5:ac:42:6b:
         d9:a3:c7:96:02:e3:d9:e1:ac:33:a1:dc:10:79:71:94:10:c0:
         61:dd:ea:83:12:bf:a8:48:24:ea:7f:d4:c3:b9:c4:ca:c7:8b:
         52:19:6a:09:ec:73:7e:a6:a1:3f:3f:e1:97:13:a9:56:c2:e7:
         b9:ba:cf:b8:e0:ed:bb:0f:fa:24:3c:25:9a:2c:b1:16:ee:58:
         0a:18:b8:ea:01:67:ef:48:76:64:7c:fb:f2:6f:4d:48:2c:99:
         21:a7:d7:53:29:a2:93:c7:02:0d:04:5a:84:55:c1:f7:34:a4:
         13:43:72:08:fb:25:81:f4:bc:9e:8c:c7:e3:00:91:e5:13:37:
         2f:e0:84:11:c1:fa:40:46:c3:ff:f1:0c:1e:98:17:8e:4b:8f:
         74:61:e0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:16:40 2025 by rpki-client