This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
File:                     GUKBeimILUM78buOvFmy_yVugD8.mft (raw, json)
Hash identifier:          qaSH7YjdLqeXHksu5OZ7xeUVXHiW3uKQ/bdmpFfciAI=
Subject key identifier:   31:D4:66:75:01:79:00:D6:6F:6F:4A:32:26:CF:7D:DE:E9:E0:C3:F5
Authority key identifier: 19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
Certificate issuer:       /CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Certificate serial:       019B3F1145C40CBD4A958EF94D3AFD9604ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
Manifest number:          0CC1
Signing time:             Sun 21 Dec 2025 04:00:55 +0000
Manifest this update:     Sun 21 Dec 2025 04:00:55 +0000
Manifest next update:     Mon 22 Dec 2025 04:00:55 +0000
Files and hashes:         1: GUKBeimILUM78buOvFmy_yVugD8.crl (hash: 6DYGvQEHt+u2htKLYlC6D5VXBwMWinmj1Ucksp4aKWo=)
                          2: GcHslNVvtLMqacjR3pPEHzo6qdY.roa (hash: 2lxXQx2L70uMfwd/jJMu4ZB84tprJ69cJOFL2QzMBdQ=)
                          3: Jbshh5-Y5wAYjNhv_trKB-ylliE.roa (hash: 5xQE2hOATpkYgRTE2YQwm3+KGl3F12kDMLW5EC6YqT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3f:11:45:c4:0c:bd:4a:95:8e:f9:4d:3a:fd:96:04:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
        Validity
            Not Before: Dec 21 04:00:55 2025 GMT
            Not After : Dec 22 04:00:55 2025 GMT
        Subject: CN=31d46675017900d66f6f4a3226cf7ddee9e0c3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:de:5c:02:29:13:20:29:74:46:ce:f4:24:68:
                    05:1e:ce:ea:5d:33:59:bb:bf:68:e2:fc:14:cd:3f:
                    af:39:52:c6:db:e4:40:82:05:c6:79:04:3e:55:e2:
                    81:0f:54:aa:3f:a9:c6:86:0e:5a:37:ee:36:11:af:
                    32:34:6a:20:ab:21:2b:86:9f:d4:cb:39:3d:8f:cd:
                    1a:5d:03:9b:2c:d6:26:de:f6:8c:dd:7e:f4:24:14:
                    68:38:25:a1:4e:41:fa:23:bd:21:54:2a:b9:14:35:
                    6a:d4:d5:15:d3:8f:ad:ef:31:ef:58:2d:54:69:72:
                    0b:09:8a:50:e6:1c:d2:a0:bb:77:1d:cb:3f:07:8a:
                    21:17:7a:83:09:47:c4:ae:87:ac:06:8f:d9:cd:b9:
                    47:86:5d:5f:25:eb:bb:7a:b3:47:54:e4:cb:8d:25:
                    e5:d3:99:cd:b2:09:c9:6f:23:6d:1f:01:31:b1:f7:
                    ff:eb:9a:de:12:37:e2:27:51:b9:b9:be:27:89:18:
                    30:cd:e0:45:99:16:db:7b:06:bd:28:55:76:d7:3b:
                    79:62:39:1f:19:12:f4:77:68:2c:e2:27:ea:da:fa:
                    60:29:10:2b:6e:85:2d:ab:28:be:18:1b:2f:04:ee:
                    b7:82:38:b9:4e:d5:25:cd:a4:f4:a1:4c:d8:a2:91:
                    d4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D4:66:75:01:79:00:D6:6F:6F:4A:32:26:CF:7D:DE:E9:E0:C3:F5
            X509v3 Authority Key Identifier:
                keyid:19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:f6:e1:18:d2:1b:ee:f7:86:a4:ad:53:f6:46:04:a9:4e:cf:
         46:a1:80:71:82:3e:cf:f5:e6:4a:63:53:27:05:d1:fe:7a:f6:
         8b:b9:d0:ab:9a:29:62:f9:a0:d0:9d:27:00:67:77:19:5e:18:
         76:c2:2b:e3:00:5a:59:fb:f7:cc:08:24:96:38:f8:9f:bb:38:
         df:c0:ab:70:b3:02:d5:9f:6c:d3:5b:6d:21:bb:6c:ec:c2:6d:
         9b:07:41:87:3d:03:60:06:27:0e:39:43:0f:5c:de:e1:76:88:
         99:d4:5e:a2:c5:b1:69:a7:68:cf:c6:e0:95:2a:b9:85:be:c2:
         eb:f1:57:46:57:ea:e9:40:26:2b:b6:1f:ac:bd:3a:95:7a:af:
         db:c4:87:26:46:6d:f8:02:65:d4:61:af:f8:4a:29:4d:d7:14:
         e7:54:d0:12:6e:a6:ae:64:76:32:c3:33:7b:8b:06:db:f0:f5:
         8b:d2:ea:20:51:a9:b4:49:b0:e6:77:d6:11:d7:41:0d:ee:79:
         92:e4:7d:ca:2b:06:ca:bd:c5:17:b3:1d:f3:7d:01:18:93:5b:
         38:c6:1b:e5:e4:aa:f4:18:2d:d7:da:a3:cb:40:83:91:32:0c:
         e0:ff:aa:20:3a:8f:52:4b:d8:6d:2c:82:62:91:2e:1b:c2:46:
         2a:a1:f4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:44:11 2025 by rpki-client