This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
File:                     GCJBwqTNGwi_W6VBLUkcScjrh40.mft (raw, json)
Hash identifier:          6pdzO8iOMPKetyGiK4h3RxlA2/M01ApveOK7CSgzpMo=
Subject key identifier:   03:7E:F4:9F:F1:EF:A6:80:95:88:61:47:6A:CF:68:0F:A1:F4:F2:9C
Authority key identifier: 18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D
Certificate issuer:       /CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
Certificate serial:       019B3FB688377474EBA35D975ECEF052ABDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
Manifest number:          046F
Signing time:             Sun 21 Dec 2025 07:01:25 +0000
Manifest this update:     Sun 21 Dec 2025 07:01:25 +0000
Manifest next update:     Mon 22 Dec 2025 07:01:25 +0000
Files and hashes:         1: GCJBwqTNGwi_W6VBLUkcScjrh40.crl (hash: INJ3X1/tPF3xlDX/gKYb8KxngDRyhgZZzp+H2thkTsQ=)
                          2: _uaKTHKtfWhbGfsoaUqVE21BcaI.roa (hash: ZcgIbRy8eNOQQ+FS3+GJOt3y/shZQUFy7iI8KMgc4tI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3f:b6:88:37:74:74:eb:a3:5d:97:5e:ce:f0:52:ab:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
        Validity
            Not Before: Dec 21 07:01:25 2025 GMT
            Not After : Dec 22 07:01:25 2025 GMT
        Subject: CN=037ef49ff1efa680958861476acf680fa1f4f29c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:14:fc:49:f1:3d:63:97:7a:91:51:7b:b4:57:
                    48:b6:53:f8:59:b5:77:64:7a:a7:47:f4:b7:ff:1f:
                    9e:51:23:1c:bb:01:0f:3d:37:93:3c:3b:b2:e7:2f:
                    69:7f:58:34:15:02:ec:9b:1a:db:ef:b9:1c:5f:9a:
                    72:f7:1d:81:ea:21:f7:81:73:63:57:41:42:93:ec:
                    9a:6b:ed:16:15:29:c3:06:09:3b:64:e8:3e:fb:69:
                    e3:c1:2d:d3:f7:74:0c:10:7b:af:11:12:88:e9:63:
                    49:51:9d:45:ea:dc:32:c0:21:47:f6:f2:3d:e5:f0:
                    c1:81:51:7b:12:65:14:4c:7b:f0:b4:9f:49:75:ce:
                    81:84:ae:84:81:79:6f:93:67:85:7b:59:5d:d4:f5:
                    da:58:f3:ac:05:e6:0c:20:17:4a:58:6c:5b:e9:48:
                    e0:5e:ad:98:af:28:ec:ea:8a:94:d8:51:6a:59:f1:
                    72:55:bb:54:db:98:be:f8:0b:01:bc:4b:11:b0:c8:
                    7e:48:db:ef:45:d6:24:43:07:8a:f2:39:67:04:d3:
                    29:57:71:7c:a1:48:74:ef:2b:50:b8:88:59:37:09:
                    21:61:51:bb:8f:26:61:bf:8e:07:d3:f8:79:9c:e6:
                    b2:15:9e:41:b4:a5:72:77:44:5d:56:ad:2e:17:95:
                    13:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7E:F4:9F:F1:EF:A6:80:95:88:61:47:6A:CF:68:0F:A1:F4:F2:9C
            X509v3 Authority Key Identifier:
                keyid:18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:28:cb:97:9f:18:33:a9:e1:77:ff:b9:d3:02:a3:88:bd:8f:
         22:76:da:62:59:12:79:04:fe:42:92:96:77:b3:2b:62:5c:22:
         fe:40:7f:a4:55:d1:7d:bf:cc:38:18:2f:a2:b2:f3:3b:ea:cb:
         90:45:30:49:b3:14:71:e8:5d:40:42:33:50:bc:2d:e7:6b:47:
         0b:8f:33:4c:54:02:7e:a5:93:fa:45:dd:22:f4:1e:43:66:88:
         a5:ae:7a:6a:34:e2:98:50:57:60:e6:af:b9:07:fe:c7:e5:f7:
         ed:e9:32:7f:48:a4:fc:d2:0f:0f:62:b8:14:99:d9:a2:41:5e:
         ad:7d:c3:61:70:0a:69:82:8f:40:f9:f3:7b:4b:6c:c2:b9:40:
         bb:90:85:89:96:9e:4f:7c:b4:08:d8:7d:66:bf:d9:d4:6a:6a:
         f9:6a:bb:7e:b7:2c:a0:45:49:e9:f4:57:0a:f5:9c:bc:0a:52:
         81:ec:8c:3a:37:c3:1a:33:89:27:21:d3:2c:68:db:7c:a8:42:
         94:a3:5a:b6:40:d8:bc:a3:6d:4d:3b:26:e4:6f:c0:44:3d:c6:
         00:37:26:ea:35:6f:47:e4:18:6e:ab:3f:16:00:57:c9:cb:27:
         94:3d:61:84:9e:39:f1:e1:b2:f0:70:8c:ae:b0:cd:69:a6:0c:
         4b:8b:56:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs/tog3dHTro12XXs7wUqveMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MjI0MWMyYTRjZDFiMDhiZjViYTU0MTJkNDkxYzQ5Yzhl
Yjg3OGQwHhcNMjUxMjIxMDcwMTI1WhcNMjUxMjIyMDcwMTI1WjAzMTEwLwYDVQQD
EygwMzdlZjQ5ZmYxZWZhNjgwOTU4ODYxNDc2YWNmNjgwZmExZjRmMjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RT8SfE9Y5d6kVF7tFdItlP4WbV3
ZHqnR/S3/x+eUSMcuwEPPTeTPDuy5y9pf1g0FQLsmxrb77kcX5py9x2B6iH3gXNj
V0FCk+yaa+0WFSnDBgk7ZOg++2njwS3T93QMEHuvERKI6WNJUZ1F6twywCFH9vI9
5fDBgVF7EmUUTHvwtJ9Jdc6BhK6EgXlvk2eFe1ld1PXaWPOsBeYMIBdKWGxb6Ujg
Xq2Yryjs6oqU2FFqWfFyVbtU25i++AsBvEsRsMh+SNvvRdYkQweK8jlnBNMpV3F8
oUh07ytQuIhZNwkhYVG7jyZhv44H0/h5nOayFZ5BtKVyd0RdVq0uF5UTrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAN+9J/x76aAlYhhR2rPaA+h9PKcMB8GA1UdIwQY
MBaAFBgiQcKkzRsIv1ulQS1JHEnI64eNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0NKQndxVE5Hd2lfVzZWQkxVa2NTY2pyaDQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYmY3OTUtYTMxZC00ZTYzLThmYTEt
YjJkMjY4ZTJjYjc4LzEvR0NKQndxVE5Hd2lfVzZWQkxVa2NTY2pyaDQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lYmY3OTUtYTMxZC00ZTYzLThmYTEtYjJkMjY4ZTJjYjc4
LzEvR0NKQndxVE5Hd2lfVzZWQkxVa2NTY2pyaDQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyjLl58Y
M6nhd/+50wKjiL2PInbaYlkSeQT+QpKWd7MrYlwi/kB/pFXRfb/MOBgvorLzO+rL
kEUwSbMUcehdQEIzULwt52tHC48zTFQCfqWT+kXdIvQeQ2aIpa56ajTimFBXYOav
uQf+x+X37ekyf0ik/NIPD2K4FJnZokFerX3DYXAKaYKPQPnze0tswrlAu5CFiZae
T3y0CNh9Zr/Z1Gpq+Wq7frcsoEVJ6fRXCvWcvApSgeyMOjfDGjOJJyHTLGjbfKhC
lKNatkDYvKNtTTsm5G/ARD3GADcm6jVvR+QYbqs/FgBXycsnlD1hhJ458eGy8HCM
rrDNaaYMS4tWTw==
-----END CERTIFICATE-----
Generated at Sun Dec 21 08:59:57 2025 by rpki-client