This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft
File:                     g0eVFJWTl8Xj-nbh6klejh9sMZs.mft (raw, json)
Hash identifier:          dOzetrEdnCQv6IxxCKw7zrSJ2pmPIJ7GrE6/yjl6CNg=
Subject key identifier:   60:7E:A2:10:7C:54:A8:63:09:C3:41:F8:B6:4B:DF:E1:65:BD:86:AE
Authority key identifier: 83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
Certificate issuer:       /CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Certificate serial:       019B11942C28DAE2D67515E87B6A97D00BF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft
Manifest number:          177B
Signing time:             Fri 12 Dec 2025 08:01:21 +0000
Manifest this update:     Fri 12 Dec 2025 08:01:21 +0000
Manifest next update:     Sat 13 Dec 2025 08:01:21 +0000
Files and hashes:         1: PAOEGXpGQsJvw33MiKgLxU-N9pw.roa (hash: SIleoKFm0+RmqPPjQ8NBeYamDKWHFmuPAgbu+GZPgRQ=)
                          2: ePEY-OvNb5lRfmn8bdNkVwoufIc.roa (hash: waMVDfU557kvvA8oYsX2Z8+jr8xTt0T1pl/hE8kaxzI=)
                          3: g0eVFJWTl8Xj-nbh6klejh9sMZs.crl (hash: oHj3oHM5IaIFt0Ogkc1Cg3RrFSaPP4rVZcG5JcsUfWE=)
                          4: rTKSwyD4bSu0V_OTB6JmkjQohdI.roa (hash: F3/bo+ceS2+kTH3oRunm6ME2Zkm2RRhJyAWZ0mxY7dQ=)
                          5: sZhd0PoWKQb_t3dDn3jTQ-3HgM0.roa (hash: U9YTpBnSvYsfK4xAqu4ZCzzOhEdFcLlSb9+Ct8I8V4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:11:94:2c:28:da:e2:d6:75:15:e8:7b:6a:97:d0:0b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
        Validity
            Not Before: Dec 12 08:01:21 2025 GMT
            Not After : Dec 13 08:01:21 2025 GMT
        Subject: CN=607ea2107c54a86309c341f8b64bdfe165bd86ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a1:f3:ae:54:49:ea:f3:f0:b0:d8:0b:9a:07:
                    6d:8d:8d:1c:f2:b1:02:0f:2a:82:df:64:02:05:86:
                    6f:43:61:ba:e2:fc:1f:bb:6b:7d:2e:da:b6:e5:e0:
                    08:25:b2:a2:6e:aa:3c:48:a4:90:13:01:7e:13:4b:
                    18:24:e1:36:23:6d:b9:d0:43:b2:36:2a:01:f4:ab:
                    92:a8:c4:7f:0f:00:bb:69:1f:7a:e1:bb:8e:2c:5e:
                    7f:8c:e9:70:ea:12:49:30:c2:88:88:71:2e:a3:ad:
                    d5:69:d0:f6:f9:e5:be:c3:67:fe:af:69:a3:5a:c4:
                    94:f9:44:d0:3b:bd:87:51:d9:4c:6e:ac:5a:87:c4:
                    e0:ab:e2:09:7c:48:1b:76:52:2a:30:ed:48:e7:01:
                    d6:f5:14:73:de:91:55:16:b8:07:ba:59:13:67:f3:
                    2d:61:a6:21:ac:d0:4e:5c:f2:59:67:e7:73:26:cc:
                    f0:86:37:69:aa:9a:64:41:7a:28:9e:ee:af:b6:a6:
                    05:92:30:a1:0e:5a:7e:fc:69:9c:a6:6a:b7:b5:3a:
                    b5:d4:52:39:0a:f6:cf:f2:07:f1:ae:79:9a:b1:42:
                    ae:88:a5:4d:ad:c8:9c:8c:9e:0f:73:c9:eb:84:d4:
                    ab:ac:9f:d3:f9:fa:de:b7:80:06:e0:22:81:2a:2b:
                    01:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7E:A2:10:7C:54:A8:63:09:C3:41:F8:B6:4B:DF:E1:65:BD:86:AE
            X509v3 Authority Key Identifier:
                keyid:83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:8f:68:90:e1:34:fb:45:b6:86:da:a0:bb:85:6f:a0:35:97:
         c8:a2:d1:fc:af:fb:23:54:72:56:61:ca:ea:57:5b:fe:46:3f:
         1f:c8:3b:72:86:d3:9f:b5:31:e1:76:f9:6e:ef:25:85:6c:48:
         2d:56:1e:12:04:08:da:ee:1c:c8:a3:7f:f5:03:c9:bb:4d:96:
         64:e7:13:59:a7:b8:7f:d4:b6:7b:fc:f4:d9:1c:31:c7:ce:3a:
         f7:d4:79:fb:51:da:d7:8b:d0:44:dc:3e:20:c5:4a:77:01:f7:
         45:f9:90:bb:f2:5e:58:73:f5:e1:48:41:db:0e:d1:fb:5b:d5:
         90:5e:65:a9:92:71:4e:a7:1e:4c:37:03:2f:91:77:79:b8:1b:
         df:98:2f:0f:97:3a:0d:ca:1c:e7:f6:5d:e0:f1:02:74:f3:f6:
         cb:f4:e2:ac:24:b7:3c:55:7e:fb:8a:3e:63:f0:da:39:95:1d:
         4b:07:84:d7:9b:aa:d5:63:7c:fb:70:23:92:e4:a9:be:48:2c:
         2e:cc:ee:9c:59:e6:4c:b3:ee:53:d8:3a:42:4a:82:b2:03:3f:
         78:61:70:ee:8e:d4:a6:25:4a:ea:c7:31:6c:b8:45:82:30:99:
         9b:2a:a4:8d:cf:9c:52:26:8a:aa:58:ae:e0:63:ec:56:03:a3:
         8d:e5:92:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 13:21:18 2025 by rpki-client