This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
File:                     Goed4cdfu9LDHR2QgUBW8n1X13Y.mft (raw, json)
Hash identifier:          YupTEQWHBDWJzEmT2YkXD9UnIFxWfYMKEnti6AlwUK4=
Subject key identifier:   2A:13:CE:45:A9:68:5D:B2:3C:65:F7:22:9E:0E:88:9B:E6:EF:0F:8B
Authority key identifier: 1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
Certificate issuer:       /CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Certificate serial:       019B274111C462029D5A3DFDA5CFF28AB03D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
Manifest number:          177D
Signing time:             Tue 16 Dec 2025 13:02:14 +0000
Manifest this update:     Tue 16 Dec 2025 13:02:14 +0000
Manifest next update:     Wed 17 Dec 2025 13:02:14 +0000
Files and hashes:         1: Goed4cdfu9LDHR2QgUBW8n1X13Y.crl (hash: VqlG3RvkD1UuckBbetHtWCmwv8qY+vy1nbDat+yXops=)
                          2: SY-aLuRiAgoWaZ-G7IiNuENAxfA.roa (hash: FJ99//JtNMttiwoypIrlcD1qx1Pik8unMC0r91//nuo=)
                          3: V7vJK1PzSdzcivTHP2kjHgag3Cc.roa (hash: OnLS3rg6t36BwcZTS3yV6qxgn2/9ln9WoFUEiCOulgw=)
                          4: umrbROcVD8F_XU1iMMOs7YeDor4.roa (hash: OZEW+D1b6/plYCkSsv4RF+haf9Cmn+tdLrcmbAbfFig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 13:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:27:41:11:c4:62:02:9d:5a:3d:fd:a5:cf:f2:8a:b0:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
        Validity
            Not Before: Dec 16 13:02:14 2025 GMT
            Not After : Dec 17 13:02:14 2025 GMT
        Subject: CN=2a13ce45a9685db23c65f7229e0e889be6ef0f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1f:92:a8:16:b5:48:0c:da:43:28:f0:a6:42:
                    d9:45:a2:7e:ce:33:5d:8c:d3:b6:6f:23:ea:1f:d8:
                    9a:e8:c9:d0:dc:f8:d3:d0:36:05:96:16:25:ea:47:
                    44:5d:3e:32:7f:52:83:d8:c8:d0:85:32:c2:94:e7:
                    00:cf:7c:cb:f2:54:1a:70:f4:cc:74:c9:ed:26:32:
                    3d:ca:c2:10:c6:ed:a5:af:75:61:5d:36:51:8d:8d:
                    06:2f:22:58:48:c2:a2:0e:f5:b9:6b:62:2f:20:10:
                    13:f9:95:95:f6:1e:16:0d:f6:4e:b8:7b:e2:64:45:
                    4a:f0:f5:c3:2e:87:df:f4:aa:60:2c:1e:79:aa:93:
                    75:13:b0:64:14:86:69:2f:75:6c:fc:a4:05:1b:49:
                    15:bd:0b:6d:1a:c6:66:03:61:7b:b3:de:c7:ca:ba:
                    51:2a:6b:f3:09:9d:35:08:43:0d:cc:08:d1:11:13:
                    af:5e:bd:ee:09:13:77:a2:9e:1e:6e:4a:c1:be:03:
                    b8:42:e6:54:8c:bc:e4:f0:b8:97:a5:6d:7d:0f:7f:
                    bb:54:1e:10:8c:58:90:fc:a3:59:0f:2d:78:5a:8b:
                    bf:69:7d:f9:8b:27:ea:c8:35:2a:67:81:7b:92:cc:
                    9f:cc:1d:85:92:7e:31:ae:9a:10:f5:a1:76:bb:ba:
                    2d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:13:CE:45:A9:68:5D:B2:3C:65:F7:22:9E:0E:88:9B:E6:EF:0F:8B
            X509v3 Authority Key Identifier:
                keyid:1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:46:25:83:04:0a:ce:b7:b6:88:54:66:89:16:76:81:42:c2:
         b5:ec:33:bc:25:06:f5:82:58:19:b2:56:cf:7d:06:44:dc:4b:
         01:00:c4:5a:38:89:ec:3e:a1:58:92:34:77:0c:48:11:4d:60:
         a9:5b:8e:6a:44:8a:ea:19:37:6c:ab:07:e2:73:4c:53:14:35:
         99:c7:87:3c:fb:1a:3e:cc:8a:8f:9c:12:3e:ca:6c:86:dc:18:
         d5:2b:1b:7b:10:81:ed:00:61:79:83:2d:bc:6f:1c:32:37:d9:
         b8:f1:d0:2c:58:54:e6:48:18:22:cf:73:ca:11:db:e0:b1:43:
         00:af:e9:5e:dd:6a:10:39:bc:13:79:f0:38:98:1e:d7:b1:c9:
         ea:8e:b5:50:c1:a5:86:42:bf:b3:8b:db:9d:d6:bc:fd:d8:d3:
         9e:ce:29:24:29:3b:29:a0:f0:6b:d0:de:8a:10:68:69:e5:fc:
         a6:c7:48:b2:a2:71:92:68:ba:89:7d:3a:25:9d:6a:c3:db:43:
         a5:df:51:17:35:e5:d1:f8:96:48:4e:c7:75:c4:72:7c:f4:de:
         a9:bc:3c:71:ae:33:40:6f:7f:95:2a:4e:30:16:bd:49:fd:a0:
         45:bc:06:44:7c:e7:0e:e6:09:e0:ea:09:77:51:05:8f:ef:ec:
         53:c4:f2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 16:38:35 2025 by rpki-client