This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
File:                     gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft (raw, json)
Hash identifier:          19p+ycqj0Ub2PoI/yH7JIETJ2CQxoHc24Fb+yLahB/I=
Subject key identifier:   8B:19:9D:8B:21:B4:59:D2:96:8F:B8:E1:15:3D:6F:66:5B:0E:FD:6F
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Certificate issuer:       /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial:       019B3DFE4C5BAAA69250408C1A756A518399
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
Manifest number:          181C
Signing time:             Sat 20 Dec 2025 23:00:34 +0000
Manifest this update:     Sat 20 Dec 2025 23:00:34 +0000
Manifest next update:     Sun 21 Dec 2025 23:00:34 +0000
Files and hashes:         1: TVTY8940R-JLK3g0bC-55INlCR4.roa (hash: G8fybb1dVxSY3d5NiOJGlSrI9zs27WohVNGxcPiP+KM=)
                          2: XVwZQRv1vz6JSSnd8P8GyNHVWKI.roa (hash: UKsEAKn0FU1wyu4cVCRnP9Y8nY4SlsAm5Omp7LeDq8o=)
                          3: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl (hash: 7b4Zu3PE+ZBp6+OOsyO9G694e1wkcJTTuCtV4k8m8i0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:fe:4c:5b:aa:a6:92:50:40:8c:1a:75:6a:51:83:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
        Validity
            Not Before: Dec 20 23:00:34 2025 GMT
            Not After : Dec 21 23:00:34 2025 GMT
        Subject: CN=8b199d8b21b459d2968fb8e1153d6f665b0efd6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:69:0a:d4:e6:08:9f:bb:c6:e7:1b:c5:4c:e9:
                    f1:16:0c:ca:83:eb:f2:e8:85:83:3a:9e:8a:02:1b:
                    5a:a5:20:7e:0d:87:c9:f5:7e:b0:34:ae:e3:33:fb:
                    11:50:a1:11:dc:c9:5a:81:86:4e:7c:b6:84:f0:a1:
                    8a:ee:c5:cb:7c:b1:01:f9:ee:8f:c6:bd:18:e8:3e:
                    dd:ef:40:17:17:00:c6:12:15:57:c6:78:a3:10:8e:
                    b0:03:84:9a:45:c0:a0:d7:a7:87:1e:5f:9a:2f:35:
                    b9:8f:09:bb:bb:ea:48:e7:69:bc:12:ef:19:fa:b0:
                    f4:1d:da:f9:02:a7:fb:51:10:c4:b1:66:01:97:67:
                    d6:b4:21:2b:d2:15:d2:96:79:b8:8c:93:e1:02:82:
                    b5:1d:ae:90:a6:2b:fc:93:bb:ee:3f:e7:50:03:f0:
                    bf:bb:d5:71:fa:42:12:ee:12:d4:e9:45:dd:36:16:
                    29:46:53:65:27:0a:a0:dd:b7:7a:a7:bb:74:6a:a6:
                    a2:42:08:5d:62:41:ac:92:45:6e:46:b0:74:23:71:
                    f8:e7:c7:ef:d4:f5:c2:94:34:92:22:b6:8c:c6:08:
                    ff:3f:ef:55:16:61:b5:9e:bc:4b:6e:47:f8:6c:e8:
                    aa:b1:d8:0f:e4:bc:e7:4a:0a:3b:62:e9:bf:3d:7c:
                    5b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:19:9D:8B:21:B4:59:D2:96:8F:B8:E1:15:3D:6F:66:5B:0E:FD:6F
            X509v3 Authority Key Identifier:
                keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:0a:f9:4d:f7:3a:06:6f:30:d5:52:a3:69:81:63:fa:45:06:
         08:d9:f1:c4:a9:a3:56:2b:b0:eb:07:31:51:25:fb:83:12:b8:
         32:7b:b1:2b:7a:9d:84:f5:80:42:76:32:ca:56:ef:78:a6:a4:
         e1:6b:4c:67:ab:36:be:fb:ed:4e:d5:69:98:cd:ca:21:06:da:
         2b:0d:0a:86:78:d3:cf:8f:f2:ed:91:71:7c:e2:7a:21:f0:6f:
         dc:14:9e:64:d6:a9:04:3f:f2:6a:4f:a0:21:e2:bf:4b:0b:14:
         19:06:dc:d3:61:2c:64:5c:07:62:aa:c3:f2:64:db:d2:62:ff:
         4b:e5:6b:2b:78:64:b1:5c:4a:49:1b:20:e4:7c:0b:f0:0e:05:
         00:24:09:fc:87:86:bc:1a:90:63:1b:73:7b:a6:ad:34:e2:65:
         54:6e:d6:67:d8:b3:c8:c1:c7:0b:c9:79:9d:40:4b:ce:84:ad:
         cd:19:51:45:c6:38:a4:47:0d:64:24:b5:ca:ce:c7:06:04:49:
         d2:97:c2:92:1f:0b:ed:84:6e:dc:e8:59:1a:47:9b:6d:a8:e8:
         14:25:d9:52:bb:86:03:82:af:95:82:7e:a0:43:52:d4:bf:84:
         0e:04:39:05:07:e7:9c:82:5f:78:89:76:77:b7:88:2a:f1:4d:
         f5:82:ad:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:38:36 2025 by rpki-client