This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.mft
File:                     Glnpo_w_tbDVggVqOyRVPFa9J_A.mft (raw, json)
Hash identifier:          hDTnJ/xkd4zBLi85Whvzy+x6Ou7raBIXtUzVB1SUEMQ=
Subject key identifier:   B5:8B:81:42:C8:1E:17:D6:C7:EC:BD:3D:A2:74:08:2D:33:DF:B3:BD
Authority key identifier: 1A:59:E9:A3:FC:3F:B5:B0:D5:82:05:6A:3B:24:55:3C:56:BD:27:F0
Certificate issuer:       /CN=1a59e9a3fc3fb5b0d582056a3b24553c56bd27f0
Certificate serial:       019B454A54E2AE7DC04FFAC0614333A9C78B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Glnpo_w_tbDVggVqOyRVPFa9J_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.mft
Manifest number:          071D
Signing time:             Mon 22 Dec 2025 09:00:57 +0000
Manifest this update:     Mon 22 Dec 2025 09:00:57 +0000
Manifest next update:     Tue 23 Dec 2025 09:00:57 +0000
Files and hashes:         1: Glnpo_w_tbDVggVqOyRVPFa9J_A.crl (hash: EjPvPIS70trMyQeiK2wT1zmiPPFkf7pKorJxkXGe3ew=)
                          2: WEeODF8AeAMrqQn5JDaTnapaiqE.roa (hash: 0JaW88/5jjO1ic3oyD2oJbM3cvaS1uYv5p0lLZ/M7WQ=)
                          3: p7AuxpNcn7wn5h3gdKCqnR5ghnQ.roa (hash: c8QwTpmvD8IxxPsM25zVX7iEAieasv29+qOVB/sHVN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Glnpo_w_tbDVggVqOyRVPFa9J_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 09:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:45:4a:54:e2:ae:7d:c0:4f:fa:c0:61:43:33:a9:c7:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a59e9a3fc3fb5b0d582056a3b24553c56bd27f0
        Validity
            Not Before: Dec 22 09:00:57 2025 GMT
            Not After : Dec 23 09:00:57 2025 GMT
        Subject: CN=b58b8142c81e17d6c7ecbd3da274082d33dfb3bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ed:22:eb:15:c6:e1:bf:f8:2b:14:97:31:28:
                    55:00:cc:78:19:65:10:87:c4:7a:6b:c8:0d:1f:1c:
                    38:2a:cd:0f:0c:26:95:a1:be:c7:0a:4b:51:68:83:
                    f6:6d:e4:1d:1e:bd:ec:17:4a:c2:ad:aa:3b:91:9a:
                    cc:6d:62:a4:38:3b:14:cc:57:92:f2:24:c6:1e:af:
                    35:11:20:c2:6e:64:d7:ec:98:87:d7:95:63:c9:4b:
                    f6:ee:8c:84:13:26:b8:70:1d:a6:81:c5:4e:0a:db:
                    4c:6a:d9:b8:83:18:ec:5c:14:6b:03:77:c2:b5:0f:
                    09:24:cb:c1:d5:f9:54:55:c4:08:90:b9:16:aa:24:
                    6d:72:fa:2a:73:e3:c3:93:a7:ca:76:bb:9b:df:c5:
                    d7:8e:f6:64:16:90:32:6b:47:c3:1e:f2:4e:23:6f:
                    b5:dc:09:cf:cb:26:37:9f:bf:32:fc:07:c7:7d:b1:
                    f8:f1:47:60:b7:f3:7a:f8:b0:88:0c:79:cb:39:30:
                    e9:16:2a:55:e9:03:07:7f:36:93:a9:c0:ee:fa:13:
                    8b:99:e7:9f:05:8e:bd:ab:c4:15:98:8f:f8:97:2f:
                    ff:71:40:ca:a1:5f:75:99:80:d4:3d:fe:78:86:6b:
                    35:aa:e6:18:54:41:26:62:80:63:4b:5f:0d:42:c1:
                    f0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8B:81:42:C8:1E:17:D6:C7:EC:BD:3D:A2:74:08:2D:33:DF:B3:BD
            X509v3 Authority Key Identifier:
                keyid:1A:59:E9:A3:FC:3F:B5:B0:D5:82:05:6A:3B:24:55:3C:56:BD:27:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glnpo_w_tbDVggVqOyRVPFa9J_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:44:e5:74:b1:0e:e6:4d:da:77:4f:f6:94:00:68:dd:b7:1c:
         dd:8e:bc:b2:24:8a:51:1d:14:c1:26:aa:89:c4:af:3b:17:ca:
         2d:b2:5f:9e:04:22:f0:52:40:75:d1:36:32:e8:9f:53:94:0f:
         e0:03:bb:5a:b0:45:42:62:80:d4:fe:88:6d:a8:92:dc:96:f4:
         48:67:49:c5:46:91:1a:5e:81:32:2b:11:6e:b1:02:4b:3f:4a:
         11:fb:0d:27:85:af:88:2a:a2:6f:fe:68:7a:c8:71:bb:1b:89:
         bf:a3:73:85:6b:25:62:fa:f2:74:ee:4b:0c:7e:54:3d:bf:16:
         84:ed:e6:d0:e9:34:d0:3d:ef:44:4d:5b:d4:fe:11:de:96:b0:
         d5:f0:09:35:36:12:29:df:a8:a0:01:b0:10:7f:e3:fe:77:05:
         26:cd:26:b7:c1:22:37:29:4b:f0:24:6c:e1:ce:f4:6b:64:19:
         7d:70:35:88:c0:c9:b8:25:11:3a:ca:32:5f:6f:4d:3a:b9:fa:
         98:10:66:9c:ab:8d:29:b3:84:2b:5c:79:a3:b0:10:19:7a:1b:
         99:eb:c6:ba:fa:9b:7b:43:db:8e:d2:b8:be:1a:0e:28:21:c5:
         0f:77:28:48:20:4c:5f:3f:13:e9:9d:6e:0b:75:3c:81:16:3a:
         e8:06:a8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:48:24 2025 by rpki-client