This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
File:                     Glyq86CZO3auE-EZE22_AGlpiRE.mft (raw, json)
Hash identifier:          s1bSVkfz0RJHdZ8x2ouOvo3tHltpYoJVawgQuRlkxdg=
Subject key identifier:   75:E3:C1:89:38:60:E8:02:5F:0F:9D:6D:56:0C:0A:8E:D4:72:F4:FD
Authority key identifier: 1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
Certificate issuer:       /CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Certificate serial:       019B53E1F2C06AB1AC8007C25BF00218F5C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
Manifest number:          08D6
Signing time:             Thu 25 Dec 2025 05:01:15 +0000
Manifest this update:     Thu 25 Dec 2025 05:01:15 +0000
Manifest next update:     Fri 26 Dec 2025 05:01:15 +0000
Files and hashes:         1: 01hxjCh_nvh6suIkW5jDT7FQ5wY.roa (hash: 4bkvBLwedWb76MBEvCC/C6c3YY5NjD8WJrDif149Vao=)
                          2: Glyq86CZO3auE-EZE22_AGlpiRE.crl (hash: l0cxEdGUrzObw1OPZWRyMK7pWKHgSw+DMjb4z08Aagw=)
                          3: Qy-saNY8_sMM2Rt7ltQaOCM03mI.roa (hash: DmhtR0W/L8xjpyQ+jiNUqtRwA+94a2kvp+LpXXuTce4=)
                          4: vAu0TRUZ6oCOaUrWzBzbupAQywk.roa (hash: eqD14NcTM0qEFrT33cP0ZL7pYdg/PAWVbM43E+i0ncU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Dec 2025 05:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:53:e1:f2:c0:6a:b1:ac:80:07:c2:5b:f0:02:18:f5:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5caaf3a0993b76ae13e119136dbf0069698911
        Validity
            Not Before: Dec 25 05:01:15 2025 GMT
            Not After : Dec 26 05:01:15 2025 GMT
        Subject: CN=75e3c1893860e8025f0f9d6d560c0a8ed472f4fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ba:34:de:5e:ea:87:5c:5a:33:18:5c:ee:04:
                    59:6c:d4:3c:16:f9:01:bb:5e:fc:8f:db:98:c3:a0:
                    6a:61:9b:01:98:e9:a0:5f:d7:24:ca:49:f1:0a:27:
                    b0:7a:3e:52:c8:85:b6:e6:be:32:db:09:d5:a9:f4:
                    b1:59:c9:4b:96:b0:41:0c:64:ea:3e:59:ce:45:15:
                    58:62:dd:7f:42:a8:dc:bb:f8:bb:9e:ce:3d:7f:a7:
                    18:c7:f5:0e:5b:ed:e6:37:f4:c5:d2:29:01:2e:d4:
                    c0:ba:89:0f:9f:12:f6:17:c1:4f:77:16:bf:00:ab:
                    28:41:7a:ca:3a:8e:12:fd:aa:52:15:aa:f6:42:5f:
                    56:48:47:65:60:ca:8f:c0:62:ea:f8:05:38:4a:f5:
                    a5:9c:26:ce:61:d3:8f:49:c5:f1:27:dc:2e:b5:57:
                    30:8c:ab:2c:7c:35:62:8c:b1:40:6f:ea:65:de:54:
                    6f:a4:50:07:80:c9:39:75:19:c2:d6:a3:e6:7b:5e:
                    ce:8f:4f:dd:22:0c:01:d8:2e:df:88:d3:14:99:f8:
                    17:6e:77:8a:ba:db:04:d4:83:f4:57:ba:40:3c:af:
                    25:25:63:af:50:a2:b4:48:b8:d6:55:63:47:73:9a:
                    f6:9d:b6:27:ba:aa:fc:79:1b:67:af:9d:a5:de:a4:
                    23:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E3:C1:89:38:60:E8:02:5F:0F:9D:6D:56:0C:0A:8E:D4:72:F4:FD
            X509v3 Authority Key Identifier:
                keyid:1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:b5:99:62:b8:88:78:3b:f2:4f:18:8d:04:85:4f:0e:e5:df:
         94:f6:c3:30:a5:96:d3:d1:ad:75:3e:d6:95:57:57:aa:7c:87:
         2b:86:8f:5f:6c:f3:4c:ef:2d:c3:57:48:58:68:5a:98:46:37:
         d9:1d:30:32:44:2a:42:d2:76:51:1b:f2:ec:97:33:bd:bd:50:
         c7:78:0c:d5:99:53:39:2a:59:4b:68:5f:b6:5f:ff:ad:ab:d0:
         84:be:64:af:1f:52:57:44:0b:0a:d7:30:ec:dd:09:2e:20:0e:
         34:33:b4:e0:ed:0f:0a:5f:b7:ff:62:9c:61:42:c5:d9:5a:e2:
         88:af:ec:fc:11:93:02:ca:d8:d6:d2:9d:ae:25:2e:f4:bf:65:
         7c:77:eb:5e:01:3e:02:63:aa:99:bf:33:3f:23:44:5c:a3:05:
         3f:3f:c2:36:c0:53:74:ea:25:a7:ee:88:48:52:f3:31:95:40:
         c2:14:ce:67:5a:04:7e:7d:6b:d0:70:b3:60:dc:b7:fc:07:ba:
         07:b6:87:e3:dd:37:cb:1a:9b:a7:e6:ac:df:46:68:f9:b2:c4:
         b7:b9:12:0a:84:b3:8a:c6:fe:32:b9:34:6e:15:b9:52:e1:94:
         8c:1c:0b:6d:7f:14:c9:cb:d7:93:63:f3:29:9d:d9:21:2a:2b:
         ab:57:d8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 14:16:39 2025 by rpki-client