This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
File:                     GpRvSoJtYiozjtg-CvzfeMh2BPg.mft (raw, json)
Hash identifier:          mewwZT0qmmyY6x8xhAKd/kQBf7a8xipbR2LsEnHEOb4=
Subject key identifier:   DB:4D:08:5D:3E:08:ED:7F:5B:55:6F:0F:A7:F3:34:BC:86:11:1C:6C
Authority key identifier: 1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8
Certificate issuer:       /CN=1a946f4a826d622a338ed83e0afcdf78c87604f8
Certificate serial:       019B5CADEA980FADD5DE9081B36ABC1B9FCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
Manifest number:          1095
Signing time:             Fri 26 Dec 2025 22:01:00 +0000
Manifest this update:     Fri 26 Dec 2025 22:01:00 +0000
Manifest next update:     Sat 27 Dec 2025 22:01:00 +0000
Files and hashes:         1: GpRvSoJtYiozjtg-CvzfeMh2BPg.crl (hash: 2h6eDVOHYsPu9RZtIs44k83tgZDBwrA2irSkiz+VVDA=)
                          2: PSwPdvpJ8F0S-rG7_N9WITcEKDI.roa (hash: /jo3ttsndkopDRSIl+Ye5A4QZZMm+sbwX25b3bVaXnY=)
                          3: l-86N1xNtY5uScFI7-RKcu_tM1g.roa (hash: tjaw/t7FWkVaKVLFK1mB9oeSnERDlbutQFZnLHnYIbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5c:ad:ea:98:0f:ad:d5:de:90:81:b3:6a:bc:1b:9f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a946f4a826d622a338ed83e0afcdf78c87604f8
        Validity
            Not Before: Dec 26 22:01:00 2025 GMT
            Not After : Dec 27 22:01:00 2025 GMT
        Subject: CN=db4d085d3e08ed7f5b556f0fa7f334bc86111c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ad:3d:06:e4:55:f1:f5:ed:f4:cd:d4:99:7d:
                    81:83:1b:32:1d:29:ab:47:f1:11:6e:7b:78:0d:64:
                    eb:4a:c7:92:87:8d:7e:13:5b:6d:93:ae:eb:6e:93:
                    a2:aa:74:f9:4c:35:04:47:83:be:f8:86:95:af:ca:
                    c2:51:21:f6:5e:db:5c:ca:c2:ee:4d:91:d8:65:b2:
                    80:e6:9a:75:20:bd:2c:bd:37:91:6f:dd:de:69:62:
                    30:e5:6e:a3:bc:13:01:f8:bd:b6:cc:0c:03:4c:5a:
                    1a:5d:b5:cc:b3:aa:c5:8f:b2:75:d5:0a:8f:03:3d:
                    96:d5:7a:b4:8d:8d:87:e4:15:12:e1:30:95:2f:f6:
                    8c:f0:58:be:b0:33:ce:8c:d9:38:9e:b0:f7:14:a5:
                    b5:70:eb:a1:e1:ac:96:bc:46:70:f9:48:6b:d3:2d:
                    81:9a:10:2b:ac:55:fa:46:0e:13:82:24:7a:8b:3f:
                    a2:b1:09:63:ce:ff:61:fd:6b:86:37:47:e5:2c:e9:
                    62:01:80:1c:85:a5:cc:23:af:26:fd:3c:d4:44:99:
                    dd:27:cb:a2:bb:15:a8:ec:4e:9a:ff:c9:6f:75:3d:
                    09:57:50:5d:0c:d7:8b:ce:78:83:cd:09:04:f9:01:
                    29:43:34:99:74:67:5f:e0:ef:39:e3:04:ef:fb:9a:
                    0a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4D:08:5D:3E:08:ED:7F:5B:55:6F:0F:A7:F3:34:BC:86:11:1C:6C
            X509v3 Authority Key Identifier:
                keyid:1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:66:30:66:da:42:80:3a:7a:1f:a6:f4:70:64:a3:cb:a5:2e:
         78:8c:93:d7:a7:f2:08:e6:29:6a:b8:52:72:b5:f5:cf:67:dd:
         03:d7:86:2d:0e:22:a2:d1:60:b5:d1:88:1f:c4:c9:3d:6a:7e:
         fd:be:62:26:b8:ca:fe:b2:e2:e4:1d:dc:1b:05:8b:dc:47:e6:
         27:fd:7c:af:b6:8f:85:ef:b2:2c:7f:20:00:26:9b:1c:b5:8c:
         a9:f6:9e:43:e1:5a:40:f7:f6:3b:e2:13:48:4f:66:c2:ac:cf:
         d4:d2:f8:25:39:23:1e:6c:3b:3a:be:a0:91:55:59:2c:02:2c:
         32:20:f2:1e:a4:42:01:96:90:79:e0:09:68:aa:3e:a7:97:97:
         a9:9a:20:b0:dd:0e:de:33:41:1a:66:1d:23:a3:16:06:d8:b3:
         53:14:1a:9c:69:8a:9b:c8:a9:79:75:ca:25:c7:1d:92:99:20:
         08:2d:61:be:cb:65:5e:20:21:39:0c:1e:87:d6:b4:a8:33:53:
         2e:d4:b0:3f:84:40:a1:74:f8:8c:8e:04:8a:44:63:6e:4f:11:
         4d:5f:6e:e7:66:70:6d:db:f5:93:09:68:ee:44:ff:33:43:b7:
         d3:4a:18:bc:96:7c:86:b5:e0:33:75:e5:dd:db:b9:d5:d0:85:
         05:db:17:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 02:19:32 2025 by rpki-client