This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
File:                     GMpt4aSKToxbivHq6bXoC_z5LEU.mft (raw, json)
Hash identifier:          cOj/9IIxWVKjFs/2FT5Y4l+Uz29mtRcOi0fRk86WYas=
Subject key identifier:   10:EA:BE:48:69:7B:DA:1C:D2:AD:01:AD:61:34:03:2D:4F:78:C0:87
Authority key identifier: 18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
Certificate issuer:       /CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Certificate serial:       019B3A8FFF053E4330AF207BDBBCDAC5D50C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
Manifest number:          067B
Signing time:             Sat 20 Dec 2025 07:01:14 +0000
Manifest this update:     Sat 20 Dec 2025 07:01:14 +0000
Manifest next update:     Sun 21 Dec 2025 07:01:14 +0000
Files and hashes:         1: Ad6-aAH05MI6kkdiGCD95ctRfFo.roa (hash: fVAs8Cty7zb84H/EMD3Y1sNjkv+r8koDIXGOWy5iQEM=)
                          2: GMpt4aSKToxbivHq6bXoC_z5LEU.crl (hash: iwci2UiXJtBWOSkQVtzcK69RsOD7GpRjjbuQFTtOW2Y=)
                          3: MI1jFBgK_l4WcCB5iK5o-v2Otyo.roa (hash: gK5APSFH+TPMOKicKkMlgu3wLez9QxNVfPdLmJNKB6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 07:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:8f:ff:05:3e:43:30:af:20:7b:db:bc:da:c5:d5:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
        Validity
            Not Before: Dec 20 07:01:14 2025 GMT
            Not After : Dec 21 07:01:14 2025 GMT
        Subject: CN=10eabe48697bda1cd2ad01ad6134032d4f78c087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:24:3d:c7:12:83:18:b0:77:80:8d:03:f7:19:
                    d1:c4:e0:5d:85:1e:3f:f5:c9:36:77:b3:a4:75:23:
                    e0:b5:38:52:b5:51:0b:ba:bb:03:3a:3d:9a:2b:48:
                    68:44:db:e2:c8:8b:dc:4d:45:b7:49:76:be:06:51:
                    ab:83:9e:2c:ca:ce:b9:b8:1e:25:59:91:1e:75:a1:
                    5b:82:89:a4:c7:fe:a3:c3:1c:81:36:03:e3:f3:44:
                    31:8e:4a:3b:48:74:df:7f:6e:fc:bc:46:ac:82:8e:
                    3b:ab:2d:7f:a2:22:c3:1d:1c:57:6f:c9:76:ce:e7:
                    22:9e:64:12:3a:ee:df:a4:01:24:f6:77:9d:14:63:
                    fa:00:d3:59:0b:2b:87:ba:ef:4b:7e:21:ed:ee:bd:
                    97:b4:4d:14:86:a4:2a:70:8b:d4:68:00:7c:a3:14:
                    4c:19:02:a4:60:a5:06:dd:f4:49:6c:34:5e:8d:4b:
                    df:03:9c:d9:6c:c2:f1:90:a9:0c:8d:35:78:aa:22:
                    24:84:3f:b0:36:6f:ae:86:4b:f1:a5:a6:51:fe:2b:
                    69:95:b1:bb:f5:a0:a3:c1:bf:2b:d4:ca:09:e9:34:
                    51:5b:cc:e8:42:a7:47:7f:0e:d4:7e:41:13:8a:80:
                    94:e7:fb:42:20:b7:8f:3a:79:f2:a8:31:c2:52:cf:
                    45:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EA:BE:48:69:7B:DA:1C:D2:AD:01:AD:61:34:03:2D:4F:78:C0:87
            X509v3 Authority Key Identifier:
                keyid:18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:2e:a0:7f:fe:53:84:72:76:68:4d:58:7e:fb:15:c0:c2:65:
         97:a2:ca:81:d6:98:c8:e2:26:9d:23:62:60:37:0e:b0:c2:e9:
         02:fb:5c:06:01:5b:9b:eb:87:6b:ac:57:6d:03:03:8c:3b:51:
         f6:91:86:f2:8e:35:77:92:f1:86:d1:70:61:c2:a4:b2:21:ab:
         9f:ba:a4:17:cd:45:62:86:a3:d6:5b:10:41:26:40:da:de:d2:
         17:15:15:44:37:12:a5:9c:e9:41:2e:ba:19:b3:37:25:65:16:
         56:3b:70:ff:82:ef:19:82:30:42:c6:5e:9c:4f:62:89:c7:97:
         c6:5d:2d:82:73:9c:2b:45:9c:14:d4:84:db:94:a9:c2:de:7d:
         2a:0e:d1:d3:ab:1a:d7:2d:d7:79:7e:51:f0:68:33:5c:a9:e5:
         e2:d1:87:a8:d7:39:b6:7b:74:5a:63:8b:30:1e:26:83:95:81:
         e3:88:ca:d9:78:4c:5f:a4:c6:84:02:9f:5f:a9:eb:71:cb:b0:
         b0:bc:1b:3b:18:58:a6:c5:80:8a:c0:9d:ab:0a:38:28:4d:b5:
         30:59:f6:71:0e:d1:9f:da:c8:2f:e4:2f:18:0a:bb:6a:78:31:
         bd:32:4f:56:01:05:a4:6d:e8:8d:fd:e1:97:50:3a:21:83:a1:
         04:8b:de:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs6j/8FPkMwryB727zaxdUMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4Y2E2ZGUxYTQ4YTRlOGM1YjhhZjFlYWU5YjVlODBiZmNm
OTJjNDUwHhcNMjUxMjIwMDcwMTE0WhcNMjUxMjIxMDcwMTE0WjAzMTEwLwYDVQQD
EygxMGVhYmU0ODY5N2JkYTFjZDJhZDAxYWQ2MTM0MDMyZDRmNzhjMDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiQ9xxKDGLB3gI0D9xnRxOBdhR4/
9ck2d7OkdSPgtThStVELursDOj2aK0hoRNviyIvcTUW3SXa+BlGrg54sys65uB4l
WZEedaFbgomkx/6jwxyBNgPj80Qxjko7SHTff278vEasgo47qy1/oiLDHRxXb8l2
zucinmQSOu7fpAEk9nedFGP6ANNZCyuHuu9LfiHt7r2XtE0UhqQqcIvUaAB8oxRM
GQKkYKUG3fRJbDRejUvfA5zZbMLxkKkMjTV4qiIkhD+wNm+uhkvxpaZR/itplbG7
9aCjwb8r1MoJ6TRRW8zoQqdHfw7UfkETioCU5/tCILePOnnyqDHCUs9F2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDqvkhpe9oc0q0BrWE0Ay1PeMCHMB8GA1UdIwQY
MBaAFBjKbeGkik6MW4rx6um16Av8+SxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR01wdDRhU0tUb3hiaXZIcTZiWG9DX3o1TEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZmYyYzYtZDg3Yy00ZDY1LWEyNTYt
MWM4MjI1ZDQwN2I1LzEvR01wdDRhU0tUb3hiaXZIcTZiWG9DX3o1TEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kZmYyYzYtZDg3Yy00ZDY1LWEyNTYtMWM4MjI1ZDQwN2I1
LzEvR01wdDRhU0tUb3hiaXZIcTZiWG9DX3o1TEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAS6gf/5T
hHJ2aE1YfvsVwMJll6LKgdaYyOImnSNiYDcOsMLpAvtcBgFbm+uHa6xXbQMDjDtR
9pGG8o41d5LxhtFwYcKksiGrn7qkF81FYoaj1lsQQSZA2t7SFxUVRDcSpZzpQS66
GbM3JWUWVjtw/4LvGYIwQsZenE9iiceXxl0tgnOcK0WcFNSE25Spwt59Kg7R06sa
1y3XeX5R8GgzXKnl4tGHqNc5tnt0WmOLMB4mg5WB44jK2XhMX6TGhAKfX6nrccuw
sLwbOxhYpsWAisCdqwo4KE21MFn2cQ7Rn9rIL+QvGAq7angxvTJPVgEFpG3ojf3h
l1A6IYOhBIveOQ==
-----END CERTIFICATE-----
Generated at Sat Dec 20 11:40:51 2025 by rpki-client