This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
File:                     GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft (raw, json)
Hash identifier:          Wbt8LzVRM4jUEmxFDU3L38kghgTtSGyTIyy8MHeo5CU=
Subject key identifier:   81:AF:82:9C:A6:88:FB:D9:18:51:B8:51:FD:75:F6:5B:5B:04:2F:FB
Authority key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
Certificate issuer:       /CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Certificate serial:       019B28892870A857C68B38F7FA66628261F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
Manifest number:          15F4
Signing time:             Tue 16 Dec 2025 19:00:35 +0000
Manifest this update:     Tue 16 Dec 2025 19:00:35 +0000
Manifest next update:     Wed 17 Dec 2025 19:00:35 +0000
Files and hashes:         1: BLv0MO2bhFqNNiooZw7IxddDp8s.roa (hash: q5p1I81STwTqhQhwzqvdFIrA1d1S040nS47//ImyZhY=)
                          2: GKisAxYBXaDeAskgbc6Wc3fNUeE.roa (hash: GH/Viioo0nohDQUGWHkBPqTOX7JrH8stNt792Mljj28=)
                          3: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl (hash: IVQusMui79YkFFtDYIf5YmhSvYTUqtaQXuIeqm9Xm/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 14:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:28:89:28:70:a8:57:c6:8b:38:f7:fa:66:62:82:61:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
        Validity
            Not Before: Dec 16 19:00:35 2025 GMT
            Not After : Dec 17 19:00:35 2025 GMT
        Subject: CN=81af829ca688fbd91851b851fd75f65b5b042ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:46:c6:84:76:ce:53:59:a0:4c:b0:34:4b:13:
                    88:6f:a1:21:bf:c8:9c:95:1a:0f:3b:f7:6f:4b:89:
                    d9:9e:23:0d:54:7c:a5:43:50:1e:38:fb:8a:32:80:
                    24:d3:e8:eb:fe:80:b6:eb:c1:e6:6e:ca:d0:ee:d5:
                    13:e5:4d:34:2e:90:56:12:28:61:29:0d:e3:ca:7a:
                    76:69:3e:f4:f7:07:8e:34:95:00:a1:df:a4:84:9b:
                    c5:d7:4b:6a:1f:67:96:ad:2b:77:2c:d6:4b:37:5d:
                    e8:f8:4a:7f:df:bb:6b:2d:3a:f4:b7:b6:db:36:f1:
                    10:2d:e1:e6:52:fb:46:1b:7a:8a:e4:ad:3c:e3:96:
                    6f:87:65:01:43:4a:ae:3d:a6:47:58:d1:dc:85:ad:
                    d6:81:e3:2d:c9:bf:ac:b8:3e:87:1b:f5:21:0c:e2:
                    6a:f1:3f:e5:a5:bb:02:7e:6d:41:f7:82:c4:f0:b4:
                    f0:9d:57:1a:72:98:82:5e:09:cb:97:d5:02:9e:0d:
                    0f:95:db:d8:24:56:09:e7:cb:54:4b:ce:ee:15:07:
                    12:9b:50:13:85:43:0c:3b:0e:4d:5c:0c:f4:da:02:
                    67:3e:6a:d7:c6:35:d6:cf:56:e2:75:8d:6f:db:7f:
                    66:d8:1e:f9:95:4b:57:66:3b:9e:88:5b:4b:34:b2:
                    aa:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AF:82:9C:A6:88:FB:D9:18:51:B8:51:FD:75:F6:5B:5B:04:2F:FB
            X509v3 Authority Key Identifier:
                keyid:18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:9c:0a:4e:86:b4:d7:03:98:11:e9:3b:79:25:c6:c7:fa:ea:
         55:56:db:ca:fd:52:f9:d7:c7:b1:95:99:ad:02:91:ff:9d:fd:
         a3:ea:22:b1:6e:b3:3e:46:a6:f0:ce:1e:ad:21:e4:a9:de:22:
         39:33:e1:0b:77:2b:66:4b:68:ac:8a:66:79:04:f9:e0:b6:05:
         e0:f8:6a:88:bc:70:12:a6:de:49:7b:5b:ab:e9:ad:c9:fa:10:
         b6:11:5f:af:94:16:5e:9e:1f:65:4b:d9:7c:66:70:a5:0c:2f:
         b9:1e:65:17:77:35:e5:41:1a:e8:c2:68:ea:f9:76:4f:46:62:
         79:7c:76:80:7a:b2:71:b5:fd:0b:bd:9f:24:f9:27:78:93:b3:
         4a:eb:8d:75:a2:f0:57:c5:9c:b9:09:f9:d1:bd:31:14:cb:72:
         be:c3:f8:e8:db:dc:49:81:1d:a4:f0:7b:8c:1b:fe:76:e5:4a:
         b2:d9:cf:8e:90:72:07:26:a8:07:33:ca:fa:2b:9a:1d:ce:20:
         d0:68:4b:6d:7f:15:4b:78:34:50:44:1c:90:ed:23:f8:e4:56:
         ec:0f:50:73:9f:50:af:fb:5b:fd:6e:61:88:f4:12:23:16:1d:
         8d:ca:ba:b6:63:dd:a4:40:8d:28:1d:52:e5:11:9c:c8:d6:6b:
         24:70:e3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 23:24:15 2025 by rpki-client