This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
File:                     GryfszEqSr8d3ChRjnYI4Owydd8.mft (raw, json)
Hash identifier:          NNlAXKu8RqE120CqhF6wHxy6u1Qe1xwcOiEgX2xXKHQ=
Subject key identifier:   35:16:E4:DE:7C:39:87:E6:16:39:2D:6A:20:5F:2B:E0:64:7F:7F:C0
Authority key identifier: 1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF
Certificate issuer:       /CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
Certificate serial:       019AEE99DA9F6D8C80D659E84AFC26A0477B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
Manifest number:          0E
Signing time:             Fri 05 Dec 2025 13:00:51 +0000
Manifest this update:     Fri 05 Dec 2025 13:00:51 +0000
Manifest next update:     Sat 06 Dec 2025 13:00:51 +0000
Files and hashes:         1: 5zKpxo06ZotmTkgOl7qLdtQlPF8.roa (hash: AacG7xxNKndGGBdKjipHCKUNNm/+m4yG1PsJKPfONKw=)
                          2: 98i3Sl-SVX0lpDc75YAMSzat4vY.roa (hash: 9lFUyk5c07EpRsIY8lyUNHmS+FtMIqyYvJKJxjtLoKI=)
                          3: FuNQyguetL9HUiuWXSYdXghLjdI.roa (hash: mnRKzXCVNJHAPGVrHNh8Q+nK1Fo7PynOoyKcNt2f8Cc=)
                          4: GryfszEqSr8d3ChRjnYI4Owydd8.crl (hash: VN/Q7HHSdV9wXlKKb5Q85a77GaKJ94tf5/ultq+k/i4=)
                          5: PKUvfHbMyWxol9e6o_KImjFDt1M.roa (hash: Uw1mXrwQRaqUc4sj0hqORTjZRxV0jUwss0xyBFHdDfA=)
                          6: YlVsrGk2FZaYHg9DL_b6T31F-PE.roa (hash: 6ghnnb7YLDy1rZ3UtZpJiI6PWk771A2KY0/uSf7gTno=)
                          7: _RelMXyqVvatSoVuVmnYjAhfL1g.roa (hash: 9i79ip05V8wfMGU8MmuJQC48JRJKFZbVh5oydWx0TJQ=)
                          8: qThv5Dn9-qqsuNIICPACaTpfi2Y.roa (hash: MxnlHH8jSB1lnRDj8hbwISSVcoLyKx3BOa7K+Kz+tQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ee:99:da:9f:6d:8c:80:d6:59:e8:4a:fc:26:a0:47:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
        Validity
            Not Before: Dec  5 13:00:51 2025 GMT
            Not After : Dec  6 13:00:51 2025 GMT
        Subject: CN=3516e4de7c3987e616392d6a205f2be0647f7fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d0:1d:1f:d2:e3:4e:b9:b5:e6:3b:69:1d:5b:
                    e4:35:1b:fa:4f:bb:22:4a:4d:77:1e:0b:71:6b:16:
                    54:65:3a:9a:f9:64:29:63:f3:da:0c:ca:97:b1:db:
                    19:e6:e9:dd:a0:00:1b:7e:a3:d9:77:17:02:62:43:
                    ff:df:64:35:c7:92:ea:e8:6f:7d:30:cd:a9:f9:fd:
                    cf:ce:47:fe:87:af:52:61:4d:1e:16:96:1b:99:01:
                    ce:7b:75:82:bd:50:a5:ed:df:02:f4:2a:6c:49:16:
                    6f:0e:f1:d4:83:41:b8:1b:64:ee:5d:2f:a2:82:16:
                    82:c0:40:e4:4f:65:9e:22:af:39:1e:f7:6a:ac:fa:
                    ce:c5:50:37:e6:da:4e:51:a5:fb:8d:10:35:2f:e1:
                    1c:2e:05:9e:52:cf:9c:5c:e4:ca:96:2a:7c:17:41:
                    2c:d2:4a:26:0d:bd:b5:06:74:62:ec:5b:33:cc:1d:
                    63:20:2c:4f:91:26:c0:a5:2b:30:62:c8:98:6e:e1:
                    77:a0:2b:e0:8b:a9:2a:27:02:13:01:ee:55:6c:94:
                    fb:d4:f5:c7:21:0f:3c:3d:ed:f9:c4:37:ff:eb:67:
                    ae:b9:a0:3c:9f:61:a1:63:6d:a7:79:47:0c:25:12:
                    78:65:e1:cd:49:bd:33:e7:58:dd:01:88:d7:94:83:
                    56:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:16:E4:DE:7C:39:87:E6:16:39:2D:6A:20:5F:2B:E0:64:7F:7F:C0
            X509v3 Authority Key Identifier:
                keyid:1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:60:19:10:39:6d:3f:77:8f:f0:91:16:2c:6e:a0:c3:fb:f8:
         a6:6e:42:a9:c8:19:b9:1b:30:20:ac:3e:63:79:0b:d9:24:6f:
         d4:9c:20:64:a5:7d:12:8b:65:27:2c:39:52:f5:4c:de:35:2c:
         17:5e:33:3a:27:1a:ea:12:f4:44:09:9d:0f:84:4b:fb:aa:28:
         bb:ee:8a:36:c9:36:c3:76:e6:87:af:a1:ba:e7:e7:0f:6d:fe:
         93:62:8b:91:4a:08:da:98:f9:fb:0f:6a:9a:8e:2b:b5:b9:2b:
         29:56:b4:f1:fa:a2:d1:2a:e3:5c:9e:c2:06:6c:f8:a1:95:0e:
         06:8d:db:52:63:94:59:a4:24:e0:32:c0:5c:31:1b:af:77:5d:
         a1:dd:31:ac:f8:b6:9e:c5:db:59:bf:8f:70:cd:08:d9:06:77:
         4f:d8:fd:59:35:38:78:ef:20:2d:4c:11:48:cf:3a:5e:e6:ab:
         18:ab:62:46:13:76:b5:09:b5:ed:2d:da:d2:f6:09:15:8a:03:
         9f:32:4f:ec:29:05:44:51:00:2a:23:e0:37:90:d3:16:95:c0:
         c2:50:f3:e3:96:f2:8c:22:2c:d3:29:4c:54:77:90:11:e0:cb:
         6f:ce:f6:5a:70:a3:41:c6:0a:93:39:e4:fd:1f:7a:1d:1b:e5:
         c1:09:de:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 16:52:08 2025 by rpki-client