This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
File:                     GJ1rVdamiO5eM4GIO7WvaEMyduM.mft (raw, json)
Hash identifier:          WaNZ98sl7LgBLbVDe3jxW1peVX1TdMvrCYJ7lm1Ypjw=
Subject key identifier:   97:62:98:39:25:45:2D:19:7E:76:E4:A7:62:BE:20:3F:2F:D0:1A:69
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Certificate issuer:       /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial:       019B37C5B28B9EA2CA83C0D351F9F9202B8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
Manifest number:          0936
Signing time:             Fri 19 Dec 2025 18:01:01 +0000
Manifest this update:     Fri 19 Dec 2025 18:01:01 +0000
Manifest next update:     Sat 20 Dec 2025 18:01:01 +0000
Files and hashes:         1: 4Nx299_TQvy3DRbYA7iwzq7JjNc.roa (hash: lqzptIVvbunLfULsQ2uHHm/+WtHXrvvhdJnhnZaxJSA=)
                          2: BjnyGiZGjHiQKk_KiK2yHf9VV5E.roa (hash: yPmoHixaBGhSn0ytp1vI4gHgRuEEubgW3Qlg0aIFvLw=)
                          3: ByxFjr3Toz51tTrCgyJcZ9ROTDc.roa (hash: MC65BQj3HwbXh+vS6odPDeaoBTY9byCzkoFUHQFoK8Q=)
                          4: DwaqxzmRSIx0-STl7nKTGpQzuOY.roa (hash: MZmP0bhKRokke3K++mx2NwZxuOVWVJCAYgwxbhXA9iI=)
                          5: GGbF9-zGjyTDR6c_8u9_YjrTpyA.roa (hash: bwO8/hNalFS0BhivjgCF+g+jV4ja4h3km9adCluqbWA=)
                          6: GJ1rVdamiO5eM4GIO7WvaEMyduM.crl (hash: gMWHSevUSKzgX1rIVHWOOIhLV+NvPIndsZsjS9ohPjU=)
                          7: I4lk-K4vzADVCX6yUHNgiwhmEpI.roa (hash: GGA95oFZZ8h6ELEvN/tBAFl4TyZuEFRFl/1TZUQ+VFk=)
                          8: KWHdrLH6yltG_lXTKMjWm06JymU.roa (hash: gXJ+eakLyWc/URtc7hQ4mdwbuyCLmf/qcAevtcOTkKE=)
                          9: MqSMr4SHl_2pRnKp2kxe3xf9us8.roa (hash: 35jRHvNXfyo825+J2hBOdYQpQKTNSs5hrfo5icVPFJY=)
                          10: OjNkZBsD7_7ya1gvmoZ6C9IcKqA.roa (hash: QIsvbi1JaiVHwDu3LNY+DC4jKpBlQxMAMFNWUB09hyg=)
                          11: P01TFLNm2nh_j5KhWwp6U978sM0.roa (hash: JvVgk8H+6nOQP0eoyck3XAHJsZYLI4+jRADR0OtFB1g=)
                          12: PB1BeL4uZ3QF6gY3DHiXfq0456E.roa (hash: yBSu3OCxbV3AaOMypdJ28XmEmDKMRu8A8am1l/di17A=)
                          13: RU0VjHC0Gx5VAZu3sAebN3Eb3B0.roa (hash: sLvdvyaimGAwP9lQDkB5KPqmI4pCn0zMIuqnoropnrk=)
                          14: UEFTphc5r_X08VC4KXcQxiS2shg.roa (hash: 7dECbcqaLL4E/mWcxOkfhjwmM0MPjpjuitKlI7h4KmU=)
                          15: XLUh0v_eWb4ByZlyr_8IFlpagYM.roa (hash: OZc6IBFQYjTFaecuhGPDb6Fno7u24w/UXmkci73bi8k=)
                          16: _tLY2AcAdWRvwdZR8fw9dgC6usY.roa (hash: 8FbSntAqb1vPRNolvw7xNzFoMIv/5oK0hfXLYY2d6X8=)
                          17: hJs7BwdPJtFYLQq0bVGZUKpU10g.roa (hash: udLU5+3hl1CSeTq17eAwjiTh21Pv9BRH7rPLD09ftTY=)
                          18: izylkdHb8K1XiexJr07bxHzS70o.roa (hash: +WAoXiTTcbRjvuFJ+mdToEXjYNYtqJBIbb39TwPcmHE=)
                          19: qR3RdSbRRb7JtoPItdAFVcmOfm4.roa (hash: 0YUFu35h0q7ZeWw1RWxv5JvuYja078PVd4Tt+tY/B3M=)
                          20: tlIT9EE8YpMp8nWSniI3miatB10.roa (hash: hMUJkDEHVtxIORugCsH16m3DT06lYDeH6qg/65YvGew=)
                          21: yTtcVU9ChNydH2mKs4iN5Ah2HPs.roa (hash: ro/KjPOdv9iitLmrbKrmD5i/eJZ/0hcJVF+hmNRnyAs=)
                          22: zl_FIWsQsU9TjHfL29rvbfo1pm8.roa (hash: plWBBKMU1eDxoN+f9JQHw2+baxWKk/tH9YtUnkFUaOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:c5:b2:8b:9e:a2:ca:83:c0:d3:51:f9:f9:20:2b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
        Validity
            Not Before: Dec 19 18:01:01 2025 GMT
            Not After : Dec 20 18:01:01 2025 GMT
        Subject: CN=9762983925452d197e76e4a762be203f2fd01a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7f:fa:a6:ea:d3:d4:44:70:53:88:2a:a8:d0:
                    6e:92:16:03:7c:16:21:47:2c:6c:ff:13:5d:06:a0:
                    05:84:92:37:11:bf:80:c0:9a:6a:ad:bf:55:94:7f:
                    97:4b:42:c0:23:84:67:5e:5b:a4:55:c7:81:9d:ab:
                    da:81:6f:55:04:f3:e2:50:6f:14:7b:f2:d3:e8:85:
                    e9:d0:12:e9:15:2f:15:f6:28:ae:5a:d0:51:02:60:
                    49:80:07:29:a3:3a:71:aa:11:17:cb:9d:5b:7f:d3:
                    eb:f8:4c:97:1f:44:46:5e:2e:26:cd:13:68:07:54:
                    db:cf:4d:77:c4:52:c0:28:5d:1b:8e:71:0f:5a:76:
                    f6:d6:3c:91:a9:ce:ef:02:05:cf:37:92:f2:87:26:
                    fc:37:5a:5a:e5:ee:90:57:8d:95:37:4a:8e:28:b6:
                    12:65:41:7b:1d:7c:40:5f:0b:cf:67:8e:5f:8c:b0:
                    1d:19:b6:46:60:cb:a0:77:c5:51:a7:95:03:bc:90:
                    b7:2d:c4:4d:7f:d8:40:be:e2:01:16:e7:16:7c:ef:
                    8b:59:bd:af:8a:11:57:0a:d4:2d:dc:66:b3:ba:e8:
                    a7:b9:25:2c:5e:01:e8:15:c3:3d:9f:cf:e6:55:1a:
                    f6:48:60:3a:cc:3a:d4:43:16:3d:ef:1c:eb:c5:77:
                    59:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:62:98:39:25:45:2D:19:7E:76:E4:A7:62:BE:20:3F:2F:D0:1A:69
            X509v3 Authority Key Identifier:
                keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:8b:e1:38:2e:26:ec:1d:b4:21:13:1f:f2:25:6e:90:64:15:
         0b:8c:67:16:9e:20:23:fd:6a:2e:e5:78:46:bc:4d:ba:36:06:
         24:1e:37:88:6e:ea:1e:f0:90:72:45:9b:90:b6:d7:51:6e:d3:
         b3:5f:39:ba:cc:1b:16:56:05:3d:21:09:c0:b3:fe:d7:47:26:
         c9:e0:dc:bf:64:04:da:49:0b:29:12:3f:ae:86:11:b9:aa:f8:
         80:71:c2:cf:d2:7d:43:78:a8:b4:b8:96:23:0e:4f:f7:d8:6d:
         5d:29:e4:dd:03:af:26:a7:e7:45:28:3e:0d:5f:de:19:55:c1:
         cf:31:61:e1:f3:42:22:06:fa:9f:39:b5:0b:b7:74:ea:38:2b:
         2b:cd:a0:c5:b2:b3:53:1d:1d:a2:0c:f8:72:4a:12:36:03:08:
         74:dd:35:e8:91:68:20:39:f4:21:c7:31:c3:73:4b:f2:b6:b2:
         93:08:b3:62:81:5d:39:5b:69:6d:02:48:00:36:85:a2:99:82:
         55:98:57:2c:22:8e:01:9e:6d:27:d7:ae:a4:3e:e4:b7:41:e1:
         42:d3:4b:0f:ab:a3:b4:86:05:96:1d:70:20:e9:c9:f1:d4:21:
         82:53:6e:a1:12:aa:a8:f4:9d:dd:74:de:b4:55:92:5c:01:2d:
         2c:fa:f7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:07:13 2025 by rpki-client