This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
File:                     Goed4cdfu9LDHR2QgUBW8n1X13Y.mft (raw, json)
Hash identifier:          ApJ/GNFBIgj5YDQ4JZW+KQRnvk/gyzo1bKZtndxE3PA=
Subject key identifier:   C5:92:5F:F3:51:65:E9:42:38:2A:89:5C:96:60:CF:17:BD:C3:78:4F
Authority key identifier: 1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
Certificate issuer:       /CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Certificate serial:       019B32D790642BF9F043AD4196C9A69B5C46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
Manifest number:          1783
Signing time:             Thu 18 Dec 2025 19:02:26 +0000
Manifest this update:     Thu 18 Dec 2025 19:02:26 +0000
Manifest next update:     Fri 19 Dec 2025 19:02:26 +0000
Files and hashes:         1: Goed4cdfu9LDHR2QgUBW8n1X13Y.crl (hash: mtXT+/lLOiuOrCVdOGPnB7l1/ztxWlURYiY7reokxB8=)
                          2: SY-aLuRiAgoWaZ-G7IiNuENAxfA.roa (hash: FJ99//JtNMttiwoypIrlcD1qx1Pik8unMC0r91//nuo=)
                          3: V7vJK1PzSdzcivTHP2kjHgag3Cc.roa (hash: OnLS3rg6t36BwcZTS3yV6qxgn2/9ln9WoFUEiCOulgw=)
                          4: umrbROcVD8F_XU1iMMOs7YeDor4.roa (hash: OZEW+D1b6/plYCkSsv4RF+haf9Cmn+tdLrcmbAbfFig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 19:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:32:d7:90:64:2b:f9:f0:43:ad:41:96:c9:a6:9b:5c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
        Validity
            Not Before: Dec 18 19:02:26 2025 GMT
            Not After : Dec 19 19:02:26 2025 GMT
        Subject: CN=c5925ff35165e942382a895c9660cf17bdc3784f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e2:96:c0:25:ca:d3:2b:06:c0:06:25:b4:5c:
                    07:21:07:d5:8d:c5:8f:97:b4:af:3a:15:06:49:6e:
                    bd:3e:78:6d:aa:ae:1c:ff:58:ba:10:52:59:ba:30:
                    b1:9a:41:2b:56:7c:a2:f3:aa:8d:2b:3b:d8:5d:1f:
                    bc:66:77:28:88:c9:a6:d5:06:6f:84:af:c2:38:ec:
                    d4:70:6c:99:bc:9f:ee:f4:3b:0b:10:09:bb:57:0a:
                    1e:94:be:bf:dd:7e:f3:4c:8f:0b:59:36:a5:c6:e3:
                    76:da:e9:79:96:36:ad:b6:c1:a8:f1:64:26:52:e0:
                    5f:f6:02:3c:9d:f9:8f:43:7e:24:8d:02:cc:c0:fc:
                    7d:aa:ea:20:4d:3e:35:f9:7f:d8:14:4f:3b:88:05:
                    d5:f9:3e:c2:8e:b7:ca:4b:37:46:80:8d:ef:65:db:
                    1e:9f:de:92:da:9e:67:7f:18:ac:2f:3c:5b:0c:d9:
                    07:37:bc:e8:bb:ef:c5:b9:b1:74:3d:79:9d:9c:6d:
                    e2:d8:e7:31:dd:df:a7:09:5d:0b:fb:61:bc:0b:5d:
                    7d:d0:08:4e:01:5e:aa:48:4a:ea:4f:e0:76:9a:bd:
                    f9:fd:da:97:87:71:4c:87:8b:c8:85:47:16:79:59:
                    24:57:fa:52:ed:13:85:5a:9c:0c:43:b5:34:81:f5:
                    e7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:92:5F:F3:51:65:E9:42:38:2A:89:5C:96:60:CF:17:BD:C3:78:4F
            X509v3 Authority Key Identifier:
                keyid:1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:23:5c:53:0e:36:b0:80:a4:87:55:3e:0d:9a:9c:03:d1:67:
         35:6d:3d:6f:a6:38:5d:f9:12:d6:4b:57:7f:f1:91:ac:d2:9e:
         3c:79:ed:aa:cf:06:0f:32:3d:56:b3:27:29:f1:61:da:38:6a:
         47:e4:1e:c1:d7:09:c9:90:7a:1d:21:b4:af:89:71:6e:b7:96:
         e6:16:90:3a:71:d5:92:0f:e2:c7:bb:c5:03:03:9b:bd:c8:f4:
         ce:a2:5a:a6:b1:c6:fd:be:67:b3:f7:3d:54:96:61:2a:75:00:
         5f:e8:2c:23:8e:bb:1f:92:26:85:4d:fb:d0:e3:f9:b2:7d:94:
         8d:18:9c:9e:81:22:0c:68:2e:3d:7f:0b:56:71:83:a4:cd:5e:
         c5:61:cd:fe:8a:c7:68:ac:96:a4:1d:d9:9d:51:1b:83:c5:34:
         d4:48:db:59:53:58:1a:1d:37:cc:de:00:46:4f:f0:bb:65:ae:
         0f:30:1d:55:10:dd:36:a4:aa:cc:1c:d5:9f:99:3f:47:bf:0e:
         1c:ed:f5:15:52:b8:78:e7:0d:7b:87:43:e4:c9:16:2d:dd:29:
         06:6b:b0:79:7c:c0:6f:bf:0a:58:02:c4:35:47:4e:83:27:0d:
         26:39:9e:bd:f4:de:5a:a5:4b:e7:1c:e8:d9:85:cb:28:33:79:
         c3:4b:0e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 00:14:09 2025 by rpki-client