This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
File:                     g9zjc8GLlAqXg5CycnACebMv7jo.mft (raw, json)
Hash identifier:          xfJtJVSBOllqcCuXU44Z/q7QW7gDGaJhIzh0oR4y+88=
Subject key identifier:   AE:E6:B2:D4:07:0A:EF:B5:77:A7:F7:5E:28:13:FB:68:C6:14:D6:F9
Authority key identifier: 83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A
Certificate issuer:       /CN=83dce373c18b940a978390b272700279b32fee3a
Certificate serial:       019B2A40B143FDD750695200BE9F3B538E0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
Manifest number:          1780
Signing time:             Wed 17 Dec 2025 03:00:41 +0000
Manifest this update:     Wed 17 Dec 2025 03:00:41 +0000
Manifest next update:     Thu 18 Dec 2025 03:00:41 +0000
Files and hashes:         1: Guy7Gbz5rPMc4iFSpd_8frqdYqs.roa (hash: atB7rNB4GngxSgp2zRWRq0GhS+DcIAMSX9Cb0N8BlB8=)
                          2: g9zjc8GLlAqXg5CycnACebMv7jo.crl (hash: aSnv0NrCyNXZT/oV/H5v+IuGpTfdXcWEN1zLIayytiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2a:40:b1:43:fd:d7:50:69:52:00:be:9f:3b:53:8e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83dce373c18b940a978390b272700279b32fee3a
        Validity
            Not Before: Dec 17 03:00:41 2025 GMT
            Not After : Dec 18 03:00:41 2025 GMT
        Subject: CN=aee6b2d4070aefb577a7f75e2813fb68c614d6f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c8:80:cd:2a:99:79:4b:d8:d5:4f:28:73:9e:
                    2e:b9:8a:b4:18:24:8b:b1:39:0f:c2:6b:d9:6d:ce:
                    85:86:4f:ae:23:e5:49:81:7f:45:77:4c:43:8e:7e:
                    6b:7e:f8:73:c4:54:89:c6:36:97:7c:2d:80:e5:ab:
                    85:80:55:9d:bb:bb:f3:6f:93:3a:f1:34:a2:53:23:
                    84:2c:77:e4:28:71:9c:99:e0:92:01:12:9d:84:e8:
                    ce:48:d4:e2:24:3b:68:ba:3e:91:1d:36:c6:f6:a0:
                    76:8b:3e:e6:0c:d2:5d:10:5b:f0:4f:ea:ab:d6:e8:
                    57:42:95:cc:85:95:5d:d0:6c:7a:a3:2a:36:cd:d3:
                    64:ec:20:1f:78:a7:ce:1a:5d:a6:8e:57:a6:9b:6c:
                    9c:4a:c5:41:be:4d:21:29:34:20:df:ea:c8:27:7e:
                    85:45:1a:c3:6c:9f:36:2d:39:24:f9:50:7c:f1:91:
                    ae:67:d7:e1:b2:b2:50:b3:88:b4:cb:d8:45:81:a3:
                    1f:83:59:54:53:a5:35:d4:68:16:aa:48:17:5b:41:
                    b0:a7:8c:18:81:b3:8b:8c:cd:16:c1:bc:e4:4c:8b:
                    a2:5d:39:50:42:8f:0a:5e:c3:29:40:f2:85:6f:90:
                    b9:e5:27:44:56:65:be:a6:ed:90:d0:64:fb:89:5d:
                    dd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E6:B2:D4:07:0A:EF:B5:77:A7:F7:5E:28:13:FB:68:C6:14:D6:F9
            X509v3 Authority Key Identifier:
                keyid:83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:83:3d:12:55:3f:05:75:ca:98:ad:9c:23:db:9a:1b:70:fc:
         c9:0f:0f:b6:67:2f:b4:56:56:66:94:95:9e:85:4e:87:29:89:
         16:70:b5:57:79:f5:6d:52:ec:3e:5e:7d:a8:8e:09:17:57:9a:
         96:8e:64:8e:4a:e3:a7:15:50:34:d1:66:30:08:dc:ca:6e:e0:
         42:a5:5c:6e:07:e0:5d:ae:0a:e5:85:a7:29:b2:ab:08:4a:60:
         8f:b4:36:3a:f9:83:47:1c:da:66:4c:ca:e8:4e:e1:2a:9e:0e:
         ee:21:d2:a7:c9:8a:fa:ca:1a:1e:f7:e8:f7:4e:4e:59:a5:13:
         62:39:86:5f:ea:63:ab:4b:b2:1b:5e:63:d8:4f:07:d6:de:ea:
         ad:b4:9f:26:c4:d5:0e:93:63:cf:d2:3b:d2:84:5b:b8:f3:69:
         e1:ab:4d:37:8d:d1:65:9a:5c:0b:68:04:cb:b8:43:e5:c9:11:
         29:37:c5:68:0a:a1:c2:cf:fb:33:a7:b2:9c:ee:3b:14:61:5b:
         fb:06:0b:fb:e9:b9:8a:aa:67:8e:e4:3a:4d:d9:de:b2:e3:8e:
         82:24:57:19:78:b5:06:ca:a4:b4:b8:39:6d:bc:7a:f5:fb:d8:
         b9:6a:ed:50:15:bc:9f:af:2b:70:23:35:b8:64:2d:bb:f6:37:
         01:ea:a7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 07:57:06 2025 by rpki-client