This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.mft
File:                     Glnpo_w_tbDVggVqOyRVPFa9J_A.mft (raw, json)
Hash identifier:          l5uQDk7t/TLysaz1G34Os7bCh0wRPkPK9VFXutIMqNY=
Subject key identifier:   7A:94:1B:A0:49:1F:02:B5:6F:B7:6D:62:27:08:7F:4C:51:B9:80:16
Authority key identifier: 1A:59:E9:A3:FC:3F:B5:B0:D5:82:05:6A:3B:24:55:3C:56:BD:27:F0
Certificate issuer:       /CN=1a59e9a3fc3fb5b0d582056a3b24553c56bd27f0
Certificate serial:       019B0F377CD0BDB542AB48823695405D340C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Glnpo_w_tbDVggVqOyRVPFa9J_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.mft
Manifest number:          0701
Signing time:             Thu 11 Dec 2025 21:00:53 +0000
Manifest this update:     Thu 11 Dec 2025 21:00:53 +0000
Manifest next update:     Fri 12 Dec 2025 21:00:53 +0000
Files and hashes:         1: Glnpo_w_tbDVggVqOyRVPFa9J_A.crl (hash: OrGTTaTfM97N+gHYXHN7V0SFQyYWUUDr88ACyFgUjLI=)
                          2: WEeODF8AeAMrqQn5JDaTnapaiqE.roa (hash: 0JaW88/5jjO1ic3oyD2oJbM3cvaS1uYv5p0lLZ/M7WQ=)
                          3: p7AuxpNcn7wn5h3gdKCqnR5ghnQ.roa (hash: c8QwTpmvD8IxxPsM25zVX7iEAieasv29+qOVB/sHVN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Glnpo_w_tbDVggVqOyRVPFa9J_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 19:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0f:37:7c:d0:bd:b5:42:ab:48:82:36:95:40:5d:34:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a59e9a3fc3fb5b0d582056a3b24553c56bd27f0
        Validity
            Not Before: Dec 11 21:00:53 2025 GMT
            Not After : Dec 12 21:00:53 2025 GMT
        Subject: CN=7a941ba0491f02b56fb76d6227087f4c51b98016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a1:97:bb:f8:ec:4e:8d:4d:ad:b9:98:20:dc:
                    24:71:5e:44:2e:ec:e4:71:55:5a:91:4b:28:54:49:
                    c8:53:b5:2b:ad:a4:90:34:d0:8d:29:e4:a4:6a:d6:
                    f9:1b:f8:7c:51:7f:38:96:9d:62:25:69:08:f0:f8:
                    b2:66:50:95:86:5b:8c:2b:33:c3:7a:53:ac:f1:48:
                    e8:d5:ee:30:b8:0c:72:e1:9c:93:64:42:c2:0c:c1:
                    1a:de:92:a1:09:cf:4a:35:f9:87:85:4e:f8:c6:b1:
                    81:a7:ed:02:df:06:b7:ce:fe:c3:89:fd:ff:02:9d:
                    fb:23:2f:b8:8a:ed:4a:06:fd:b4:50:49:dc:91:18:
                    a9:7b:1b:e2:22:93:1a:b6:97:7d:ae:20:2a:45:d0:
                    ac:28:63:a2:5e:8b:05:17:8f:7a:73:59:0b:de:24:
                    46:11:81:b3:4f:d4:31:dc:d9:0a:f2:03:f3:9d:34:
                    1d:79:48:30:cd:a6:93:eb:d8:0a:2f:c0:d1:f8:b1:
                    9f:c6:63:24:ac:8d:11:f3:4a:0a:7d:af:e9:11:c9:
                    44:fc:de:1b:81:ef:cd:a3:5f:4b:5a:26:d3:5b:8a:
                    33:3d:28:28:7f:8c:80:b1:ed:2c:63:98:b4:3d:92:
                    5a:ce:04:6b:b1:29:a4:31:fb:d6:06:99:6e:c6:1f:
                    ec:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:94:1B:A0:49:1F:02:B5:6F:B7:6D:62:27:08:7F:4C:51:B9:80:16
            X509v3 Authority Key Identifier:
                keyid:1A:59:E9:A3:FC:3F:B5:B0:D5:82:05:6A:3B:24:55:3C:56:BD:27:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glnpo_w_tbDVggVqOyRVPFa9J_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d7:10:aa:46:44:25:2d:84:8d:0c:f3:13:77:3a:d3:4c:b1:
         eb:3c:40:3d:72:8d:72:1e:5d:dc:18:cb:a2:d7:8f:46:82:fe:
         f3:b1:b7:9e:f3:44:bf:6c:b9:07:18:f3:41:d2:aa:7a:cb:9a:
         83:a4:6f:47:fc:35:00:0c:ee:95:a2:d0:39:f3:9b:06:66:59:
         1e:1a:17:98:9d:5b:40:9e:e3:e6:27:67:d4:4e:c2:98:b7:05:
         7d:9f:c3:d0:59:44:60:da:d1:63:ba:b5:5e:40:04:ee:f6:de:
         a7:2f:a8:cb:87:9a:8e:35:90:03:83:46:32:b9:e5:cc:6e:f9:
         b8:e8:d5:e2:e6:b8:82:cd:7e:ae:3c:ce:23:41:3e:ab:c4:b5:
         f1:1e:f0:9e:a8:c4:57:19:bd:52:80:d4:b9:c5:40:54:1a:8c:
         ec:d8:ed:16:b2:a3:e4:a0:c3:ad:16:ec:05:ac:4f:13:7a:a1:
         94:fc:c1:18:89:8c:26:98:19:7d:c2:35:79:ee:87:d4:ad:2f:
         fa:bf:03:b4:a6:9a:5d:24:0f:ec:39:c2:e7:77:20:1f:4f:bf:
         ff:46:12:81:c4:0f:84:d6:45:e1:9f:57:24:b0:1d:b7:a0:18:
         9e:f4:45:32:87:57:84:bb:ef:3d:93:4b:53:c0:74:06:04:2a:
         92:c0:68:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 02:10:03 2025 by rpki-client