This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
File:                     GpFU4cVXiw_virt3n4EX5k6ITRg.mft (raw, json)
Hash identifier:          Qe20MPEKzBLW5r3dr16pKJwe6Qn2vxDd44cyljy1KSc=
Subject key identifier:   B4:CB:81:11:A9:A9:59:5B:31:23:57:9A:4C:43:37:9A:FB:98:DB:89
Authority key identifier: 1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18
Certificate issuer:       /CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
Certificate serial:       019AF27686FC49CE629AADAD8192A9929AD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
Manifest number:          0E10
Signing time:             Sat 06 Dec 2025 07:00:44 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:44 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:44 +0000
Files and hashes:         1: F-U-cDtSSag2W1wAvfbUo3fdaQs.roa (hash: 2Ga8t3NnP1c8+shLsR913ttQ8XGLyvFZpunmc/03AyI=)
                          2: GpFU4cVXiw_virt3n4EX5k6ITRg.crl (hash: I429MDfanujUu6yRUHHSrauCZpSt3bmjA+Vtyzu3T4c=)
                          3: ey-_9xxGKnsOGGPU15--RgSssm4.roa (hash: 0cRLbNHAlwoA+yxbwyO5Q2GpY1t4qSENfOLW5G8ijZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 07:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:86:fc:49:ce:62:9a:ad:ad:81:92:a9:92:9a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
        Validity
            Not Before: Dec  6 07:00:44 2025 GMT
            Not After : Dec  7 07:00:44 2025 GMT
        Subject: CN=b4cb8111a9a9595b3123579a4c43379afb98db89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c4:7e:52:e5:11:ec:01:c8:4b:d5:21:4a:65:
                    5c:94:27:0f:d3:34:12:65:96:78:3a:99:b8:1e:74:
                    3f:7b:df:03:b0:69:7e:f8:4f:50:a3:a1:d0:5c:07:
                    eb:d1:80:22:b5:fa:eb:67:54:e8:d1:76:01:db:ff:
                    ad:68:13:78:f0:8d:20:02:c3:30:00:4a:2f:45:03:
                    89:7b:13:23:5e:41:22:69:a2:35:01:9c:b6:23:6c:
                    3b:ee:b9:8e:19:78:31:6f:b6:34:e4:5f:0a:48:51:
                    31:9b:99:00:35:ad:e9:2f:4c:2c:f7:30:9f:48:e5:
                    d4:39:1b:98:dd:d9:ee:3e:a9:8f:e3:7f:64:14:25:
                    c4:a3:95:05:ed:28:3f:14:ca:99:6c:a4:89:b5:8c:
                    0c:e7:a4:c9:71:21:0c:5c:cc:8a:40:d7:71:50:05:
                    b2:d1:14:f2:80:bc:b1:e7:87:c3:4a:d0:84:01:36:
                    ad:4d:14:a3:80:ef:90:9b:cb:b5:29:78:31:a4:93:
                    ec:00:ab:a9:34:fb:85:95:f6:8b:ee:1b:44:6a:2d:
                    fc:55:17:9b:be:7a:4e:b1:37:fa:8e:ab:75:68:a9:
                    d1:63:2c:02:b0:b2:5f:08:bf:33:2e:b5:92:8e:08:
                    6b:82:4a:4d:9d:29:42:f9:be:6f:8b:31:ff:8f:b2:
                    c1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CB:81:11:A9:A9:59:5B:31:23:57:9A:4C:43:37:9A:FB:98:DB:89
            X509v3 Authority Key Identifier:
                keyid:1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:14:82:4a:1b:58:59:2d:cc:2b:1e:fc:f1:ed:d4:ce:40:98:
         0b:b3:1c:9b:e6:40:e2:f4:c1:12:b6:7d:36:e6:9d:8c:96:25:
         2c:d7:a5:8c:48:f6:4d:c0:c9:6a:e9:20:48:e7:0e:7e:25:27:
         87:50:e6:0d:1b:96:fb:dc:aa:8a:4a:2d:f4:dc:6e:60:e7:5a:
         86:8f:43:e4:64:cb:51:e8:cc:1e:4c:31:8d:10:5e:e6:03:20:
         cc:51:b8:3a:28:2a:d2:dc:dd:b4:0d:d8:aa:5a:a7:f5:85:13:
         f2:3e:de:02:2d:72:27:0d:f2:6d:a1:a6:e4:a1:20:0f:b5:a2:
         27:b5:02:da:90:b6:19:0f:fe:77:0e:7f:50:2b:33:00:53:73:
         33:69:61:72:b7:2c:d6:0a:64:2a:d6:76:1d:9f:d9:52:18:7a:
         fa:b3:86:d4:2d:54:c9:67:36:4d:91:0f:58:77:19:ec:4f:8d:
         67:d3:a5:8a:bf:3a:e8:33:a8:12:c7:6f:f8:a5:bc:55:6f:1f:
         dc:a3:29:ea:80:12:f1:bc:46:5c:ad:52:c8:9f:1f:e0:05:7a:
         09:1b:d6:9c:21:f3:22:24:4a:80:d5:5c:de:2e:d5:40:a7:cc:
         77:94:7a:10:9a:12:aa:50:7f:82:d0:e8:42:de:79:83:a4:70:
         1b:2b:db:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrydob8Sc5imq2tgZKpkprUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhOTE1NGUxYzU1NzhiMGZlZjhhYmI3NzlmODExN2U2NGU4
ODRkMTgwHhcNMjUxMjA2MDcwMDQ0WhcNMjUxMjA3MDcwMDQ0WjAzMTEwLwYDVQQD
EyhiNGNiODExMWE5YTk1OTViMzEyMzU3OWE0YzQzMzc5YWZiOThkYjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78R+UuUR7AHIS9UhSmVclCcP0zQS
ZZZ4Opm4HnQ/e98DsGl++E9Qo6HQXAfr0YAitfrrZ1To0XYB2/+taBN48I0gAsMw
AEovRQOJexMjXkEiaaI1AZy2I2w77rmOGXgxb7Y05F8KSFExm5kANa3pL0ws9zCf
SOXUORuY3dnuPqmP439kFCXEo5UF7Sg/FMqZbKSJtYwM56TJcSEMXMyKQNdxUAWy
0RTygLyx54fDStCEATatTRSjgO+Qm8u1KXgxpJPsAKupNPuFlfaL7htEai38VReb
vnpOsTf6jqt1aKnRYywCsLJfCL8zLrWSjghrgkpNnSlC+b5vizH/j7LB5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTLgRGpqVlbMSNXmkxDN5r7mNuJMB8GA1UdIwQY
MBaAFBqRVOHFV4sP74q7d5+BF+ZOiE0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3BGVTRjVlhpd192aXJ0M240RVg1azZJVFJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81NGJhYzgtYmY1MC00NGQyLWFkNDIt
Mzg4ZDhhZDJhNWJiLzEvR3BGVTRjVlhpd192aXJ0M240RVg1azZJVFJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS81NGJhYzgtYmY1MC00NGQyLWFkNDItMzg4ZDhhZDJhNWJi
LzEvR3BGVTRjVlhpd192aXJ0M240RVg1azZJVFJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxSCShtY
WS3MKx788e3UzkCYC7Mcm+ZA4vTBErZ9NuadjJYlLNeljEj2TcDJaukgSOcOfiUn
h1DmDRuW+9yqikot9NxuYOdaho9D5GTLUejMHkwxjRBe5gMgzFG4Oigq0tzdtA3Y
qlqn9YUT8j7eAi1yJw3ybaGm5KEgD7WiJ7UC2pC2GQ/+dw5/UCszAFNzM2lhcrcs
1gpkKtZ2HZ/ZUhh6+rOG1C1UyWc2TZEPWHcZ7E+NZ9Olir866DOoEsdv+KW8VW8f
3KMp6oAS8bxGXK1SyJ8f4AV6CRvWnCHzIiRKgNVc3i7VQKfMd5R6EJoSqlB/gtDo
Qt55g6RwGyvbBw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:10:53 2025 by rpki-client