This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.mft
File:                     GPAD-6N7ANX5zn7ISj4GaLzQKCQ.mft (raw, json)
Hash identifier:          2rLgzdsGzkU0qOgTz9KlsVJ16w3NvmtOKUfnGMqEDdQ=
Subject key identifier:   3D:11:35:CF:72:8D:2F:CB:5D:19:CD:A6:2E:2C:97:95:91:90:72:0B
Authority key identifier: 18:F0:03:FB:A3:7B:00:D5:F9:CE:7E:C8:4A:3E:06:68:BC:D0:28:24
Certificate issuer:       /CN=18f003fba37b00d5f9ce7ec84a3e0668bcd02824
Certificate serial:       019B19BB0B0D853DC319D565076B8772B925
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.mft
Manifest number:          16BC
Signing time:             Sat 13 Dec 2025 22:00:47 +0000
Manifest this update:     Sat 13 Dec 2025 22:00:47 +0000
Manifest next update:     Sun 14 Dec 2025 22:00:47 +0000
Files and hashes:         1: GPAD-6N7ANX5zn7ISj4GaLzQKCQ.crl (hash: Oaws9Hfv/NhBRpUgK80Or9N9s74BgVKb9VojX5XlSNU=)
                          2: tSP2AeN0TTzbNNS7U3ruVH8nDu8.roa (hash: 294+y86DARdCbg7v10Yetnf9+9TavVZ0zHk0HRwiUus=)
                          3: uxOV7IYIl0nOiPC48ooZo0Bt_LM.roa (hash: lyMZrr+5NelerEo1KC88KcN/f2W5wCKFdUhMA++xkyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 17:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:19:bb:0b:0d:85:3d:c3:19:d5:65:07:6b:87:72:b9:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18f003fba37b00d5f9ce7ec84a3e0668bcd02824
        Validity
            Not Before: Dec 13 22:00:47 2025 GMT
            Not After : Dec 14 22:00:47 2025 GMT
        Subject: CN=3d1135cf728d2fcb5d19cda62e2c97959190720b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:05:8a:2e:b7:ae:c6:db:93:3f:63:79:93:d7:
                    2d:79:2d:4d:6a:00:1b:52:df:e6:d5:da:99:62:b0:
                    1a:76:8e:eb:64:26:e2:84:14:e5:40:ad:74:3d:b7:
                    01:4a:34:1a:33:f6:02:f5:73:49:ff:73:f7:b9:30:
                    16:75:26:20:ee:cf:b5:98:06:23:51:23:7a:b5:c6:
                    dd:95:8d:5e:44:e1:e7:33:78:56:2a:40:7c:5d:3c:
                    fa:42:e8:3d:2e:3a:4c:01:dd:b7:ea:b1:60:f1:7a:
                    a4:e9:02:3c:c1:62:ac:2b:1b:4d:61:dc:bf:52:19:
                    b5:eb:4d:a0:ff:08:1c:c2:f0:0b:9d:a6:bc:bc:b2:
                    6e:62:7d:24:0b:1b:c2:29:c6:02:a4:66:b6:f7:88:
                    1d:06:ef:39:8b:bf:c7:61:f1:95:a9:16:11:7f:d2:
                    69:b9:00:b8:97:e0:04:3d:1f:a4:f6:ac:ed:93:f6:
                    c0:9f:a2:89:ee:27:a5:2e:85:3a:4b:5d:06:ee:8c:
                    e6:21:c8:0b:83:90:2f:e7:18:85:82:74:7f:90:a8:
                    1a:63:10:a1:23:5a:8f:fe:98:3e:ba:bf:01:7b:45:
                    6f:f6:0d:d1:23:2f:c1:17:f1:e1:48:2d:9a:1d:77:
                    54:81:14:0f:3d:6f:ba:20:25:8a:03:6f:3e:1f:22:
                    cb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:11:35:CF:72:8D:2F:CB:5D:19:CD:A6:2E:2C:97:95:91:90:72:0B
            X509v3 Authority Key Identifier:
                keyid:18:F0:03:FB:A3:7B:00:D5:F9:CE:7E:C8:4A:3E:06:68:BC:D0:28:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e2:ad:db:40:50:46:90:2e:79:b6:11:49:c1:79:bd:02:82:
         67:31:3c:68:e5:f1:5e:09:b8:0a:3f:b8:ab:ca:79:5f:6d:4c:
         f5:0a:35:9c:dc:66:f1:1d:73:80:d5:2f:02:a8:7e:4b:8b:c2:
         a4:93:c5:3f:02:3d:6d:a2:8c:64:6b:b2:21:3e:3e:93:8d:61:
         5f:a6:8b:ab:82:4b:eb:d5:a5:25:e7:4f:d2:f2:b3:eb:b8:f1:
         b3:4f:6b:e4:d5:4c:a5:ae:82:f3:2e:ca:7a:4a:33:86:40:12:
         2a:4d:53:13:ba:28:10:f4:ad:97:3e:e8:f0:ac:c9:3d:62:30:
         f0:73:d4:4c:d8:7f:d1:b5:bf:3e:22:6b:f7:b4:46:4c:70:65:
         33:e7:49:75:e5:d7:c6:37:4c:2a:6d:a0:96:f8:75:8a:b0:6c:
         7f:2a:c6:ab:f7:17:45:0d:32:1f:2d:97:9f:4d:ff:cb:b4:04:
         54:02:c1:36:97:f4:a0:34:d8:97:aa:de:38:c8:73:75:47:04:
         d3:a2:02:c9:5c:bb:4b:1a:49:29:8a:ad:6e:93:eb:c9:f5:de:
         7f:9f:02:7e:cb:fe:37:89:27:e7:ff:99:ee:f2:a9:f8:4b:ab:
         e0:22:c2:2a:5e:0f:60:06:d1:ce:c6:4c:2f:db:d0:ac:50:67:
         14:d1:02:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsZuwsNhT3DGdVlB2uHcrklMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZjAwM2ZiYTM3YjAwZDVmOWNlN2VjODRhM2UwNjY4YmNk
MDI4MjQwHhcNMjUxMjEzMjIwMDQ3WhcNMjUxMjE0MjIwMDQ3WjAzMTEwLwYDVQQD
EygzZDExMzVjZjcyOGQyZmNiNWQxOWNkYTYyZTJjOTc5NTkxOTA3MjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwWKLreuxtuTP2N5k9cteS1NagAb
Ut/m1dqZYrAado7rZCbihBTlQK10PbcBSjQaM/YC9XNJ/3P3uTAWdSYg7s+1mAYj
USN6tcbdlY1eROHnM3hWKkB8XTz6Qug9LjpMAd236rFg8Xqk6QI8wWKsKxtNYdy/
Uhm1602g/wgcwvALnaa8vLJuYn0kCxvCKcYCpGa294gdBu85i7/HYfGVqRYRf9Jp
uQC4l+AEPR+k9qztk/bAn6KJ7ielLoU6S10G7ozmIcgLg5Av5xiFgnR/kKgaYxCh
I1qP/pg+ur8Be0Vv9g3RIy/BF/HhSC2aHXdUgRQPPW+6ICWKA28+HyLLewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0RNc9yjS/LXRnNpi4sl5WRkHILMB8GA1UdIwQY
MBaAFBjwA/ujewDV+c5+yEo+Bmi80CgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1BBRC02TjdBTlg1em43SVNqNEdhTHpRS0NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9kMjBmZDItMDcyZS00NzUyLWFmYTQt
MDMzNGVlMWVmM2ZmLzEvR1BBRC02TjdBTlg1em43SVNqNEdhTHpRS0NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9kMjBmZDItMDcyZS00NzUyLWFmYTQtMDMzNGVlMWVmM2Zm
LzEvR1BBRC02TjdBTlg1em43SVNqNEdhTHpRS0NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuKt20BQ
RpAuebYRScF5vQKCZzE8aOXxXgm4Cj+4q8p5X21M9Qo1nNxm8R1zgNUvAqh+S4vC
pJPFPwI9baKMZGuyIT4+k41hX6aLq4JL69WlJedP0vKz67jxs09r5NVMpa6C8y7K
ekozhkASKk1TE7ooEPStlz7o8KzJPWIw8HPUTNh/0bW/PiJr97RGTHBlM+dJdeXX
xjdMKm2glvh1irBsfyrGq/cXRQ0yHy2Xn03/y7QEVALBNpf0oDTYl6reOMhzdUcE
06ICyVy7SxpJKYqtbpPryfXef58Cfsv+N4kn5/+Z7vKp+Eur4CLCKl4PYAbRzsZM
L9vQrFBnFNECzQ==
-----END CERTIFICATE-----
Generated at Sun Dec 14 01:05:49 2025 by rpki-client