This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
File:                     _gp5GaPtexO12rOchuBKepcjFHM.mft (raw, json)
Hash identifier:          1MVGMYasQzg2B4hd4jU27ayWwaJ/b/sBQu1EuzKEfxM=
Subject key identifier:   C2:9F:B0:56:15:03:41:BC:64:96:9E:03:77:7A:EC:4B:A4:65:66:1F
Authority key identifier: FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
Certificate issuer:       /CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Certificate serial:       019B40920648D1FC145C7C6B49471E8EC6A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
Manifest number:          14D7
Signing time:             Sun 21 Dec 2025 11:01:10 +0000
Manifest this update:     Sun 21 Dec 2025 11:01:10 +0000
Manifest next update:     Mon 22 Dec 2025 11:01:10 +0000
Files and hashes:         1: AIlfpG57oaa0IcaTUnoTGn0e-MU.roa (hash: doNG5v78wDg1ZSRUc5huAPyd+QjLPudy5eWVSUSR05g=)
                          2: HT7grAARmQeTl9rgD_I5_Dh0UNk.roa (hash: lbOrIFQ1pfBggQZzBgBo0lXjKP8U8v/LXvuvO53enSU=)
                          3: _gp5GaPtexO12rOchuBKepcjFHM.crl (hash: A08R/8NaANufODvKZkoUBQS2g2yof/CKRSLiJ2uN2Dk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 11:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:40:92:06:48:d1:fc:14:5c:7c:6b:49:47:1e:8e:c6:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
        Validity
            Not Before: Dec 21 11:01:10 2025 GMT
            Not After : Dec 22 11:01:10 2025 GMT
        Subject: CN=c29fb056150341bc64969e03777aec4ba465661f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6b:6c:a0:87:e2:a3:4a:79:c0:53:a1:cc:d0:
                    86:a7:9d:45:34:5c:7b:6c:63:ad:a8:97:01:a7:4e:
                    2e:c1:4d:7a:e7:e9:94:f3:ef:05:f8:93:aa:9b:31:
                    72:9f:a5:c8:4a:7a:e7:41:e1:0e:d3:2a:ac:25:80:
                    61:fe:ee:ee:2e:c8:20:5f:d1:cb:fc:35:45:b2:ba:
                    d0:f9:d4:6e:1b:46:a0:9a:11:10:a9:90:55:74:83:
                    3a:f4:16:e6:57:d5:c6:bd:cc:1d:1d:ec:9a:b8:04:
                    9d:93:5c:11:41:bc:be:e7:af:29:eb:15:7d:0c:f4:
                    93:71:a7:6c:d8:3a:eb:af:a7:e7:d8:59:ce:aa:45:
                    bf:18:5c:ff:23:1d:fe:35:fc:e5:2a:76:74:a6:03:
                    bf:92:ce:2c:2f:ab:43:6c:c9:da:7f:4a:40:ef:1f:
                    42:99:e1:25:76:a2:d1:2a:50:fc:fd:84:62:07:93:
                    a9:fa:66:50:d1:f9:28:9b:cc:0a:cc:0e:f4:ce:be:
                    2e:fa:cc:51:9e:3b:30:87:fa:bc:88:83:98:8c:35:
                    d5:f7:34:4d:c6:1f:d5:ec:53:e7:11:91:d7:b1:37:
                    87:1d:df:5f:28:ef:6e:4e:1c:db:dd:17:f9:02:82:
                    04:a1:90:f7:d2:1d:53:f5:6f:4d:e4:84:ff:8b:ed:
                    bb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9F:B0:56:15:03:41:BC:64:96:9E:03:77:7A:EC:4B:A4:65:66:1F
            X509v3 Authority Key Identifier:
                keyid:FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:a3:1d:b3:42:5e:14:78:8f:46:f4:98:41:cd:23:2f:bf:80:
         7c:3d:c0:90:69:6e:86:bc:34:65:47:9c:94:89:4c:b3:91:ca:
         19:25:26:a4:30:57:f5:51:36:c3:cd:9d:5e:85:70:af:6f:8f:
         e1:a0:30:d2:65:07:ea:00:1a:36:d3:d6:b9:55:f0:bd:34:e3:
         ce:4b:a9:0a:d9:ed:9d:b5:84:37:97:2e:5c:1f:9e:d3:b3:ce:
         bd:c4:3a:89:c5:7b:91:3b:e8:24:9e:17:21:87:53:de:47:e1:
         61:be:70:2a:70:79:71:8f:3c:60:ef:a0:36:b1:66:87:b1:97:
         ba:e1:29:14:90:d9:6a:d0:ec:bc:aa:b7:bc:ad:25:64:2c:35:
         e5:1a:d0:ad:b4:23:49:59:c0:e3:8a:08:0b:e6:67:a8:b3:7b:
         65:14:9d:77:09:82:a2:e6:35:64:dd:3f:57:89:7c:ac:a5:ad:
         88:22:be:34:4e:45:14:72:37:53:61:1c:14:ff:84:07:ee:87:
         ea:27:c5:9f:28:43:71:c0:fb:ec:a9:6b:0f:2a:6d:f9:d6:a5:
         cf:fa:d2:b7:4a:06:6f:63:61:43:32:b9:1b:2e:b3:c8:7a:40:
         4f:98:05:64:37:78:d0:1e:ee:b0:a3:54:59:81:cb:f6:d0:2a:
         92:d8:83:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 14:13:30 2025 by rpki-client