This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
File:                     gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft (raw, json)
Hash identifier:          y4geVRiwRYtFJHG6KXOr85f3qU1VqwxUvArnlgL1tM8=
Subject key identifier:   47:C1:AC:4E:B4:83:58:C9:65:FB:62:9D:16:C2:43:2B:4F:50:B1:F9
Authority key identifier: 83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
Certificate issuer:       /CN=830555f011be5e241eb0b425de5fd86cc6834a54
Certificate serial:       019B3DC8015995DF9E6E9A9CF239F1B2E275
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
Manifest number:          1787
Signing time:             Sat 20 Dec 2025 22:01:16 +0000
Manifest this update:     Sat 20 Dec 2025 22:01:16 +0000
Manifest next update:     Sun 21 Dec 2025 22:01:16 +0000
Files and hashes:         1: X8y17pVc211N8MGfVTBzz81iEoA.roa (hash: Hl59xAoHLIR2ve7ZY+IGK+whUrubuEhh7gzRr94EmJM=)
                          2: gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl (hash: VGfk1+zKGQjMs/SHXpnGWr90j4Z4uGBqiO433rLry3o=)
                          3: xYBkOkdRt8PDKOH8dzQ2NTMqI8M.roa (hash: ITHwZydQPAzKvryYx9N44bQeMeKILW1oaBs72ARfdxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 22:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:c8:01:59:95:df:9e:6e:9a:9c:f2:39:f1:b2:e2:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830555f011be5e241eb0b425de5fd86cc6834a54
        Validity
            Not Before: Dec 20 22:01:16 2025 GMT
            Not After : Dec 21 22:01:16 2025 GMT
        Subject: CN=47c1ac4eb48358c965fb629d16c2432b4f50b1f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:45:ba:82:3f:86:4a:84:58:37:18:32:65:a4:
                    9a:1d:0a:fc:92:97:e8:48:99:ff:9e:7a:4d:a5:af:
                    46:ee:65:66:43:30:c2:0a:8f:40:a7:d7:9c:13:82:
                    84:52:4d:bf:fc:7d:2a:11:b9:4e:f8:ba:fb:34:75:
                    c6:82:78:6f:1d:89:f1:4e:68:76:54:25:25:02:3a:
                    17:af:70:79:2c:a2:0e:67:01:2f:fe:d3:9c:ba:e2:
                    cc:1d:f8:bf:d0:67:64:8f:59:bb:7b:8d:76:9a:1a:
                    bc:b2:50:71:50:eb:95:94:21:ff:4e:75:c9:d6:db:
                    75:38:24:40:e3:b9:30:92:95:6f:e0:e9:24:78:91:
                    6f:d5:4d:9c:55:e5:df:c7:d9:9e:88:71:8e:98:19:
                    c1:be:65:62:2d:64:18:35:2b:52:3b:6d:28:ed:f5:
                    a1:51:a5:90:27:d0:ba:a6:4d:4c:29:c6:cf:f9:6b:
                    fd:df:58:04:ba:e8:7d:c8:89:a9:ff:c9:fa:4b:bd:
                    55:90:a1:c8:e0:23:97:a5:d9:ba:51:db:b2:d3:0b:
                    9a:f9:cc:ce:41:0b:ab:d5:ac:30:48:02:91:42:b6:
                    ca:81:00:c6:49:a3:f4:26:d7:16:30:d9:c1:ee:89:
                    ba:8a:f7:23:91:1b:c8:ab:cc:ae:db:69:39:02:31:
                    42:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C1:AC:4E:B4:83:58:C9:65:FB:62:9D:16:C2:43:2B:4F:50:B1:F9
            X509v3 Authority Key Identifier:
                keyid:83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:e8:f8:db:73:56:22:67:ae:44:13:4c:2c:4d:90:4a:53:fa:
         28:54:40:a4:20:9d:2d:51:d8:b6:b4:de:a4:f1:0d:e0:50:3d:
         d6:60:15:0f:09:e6:5a:b7:b2:5f:7f:44:97:e7:42:aa:ae:f2:
         7f:60:ce:3b:44:db:b7:19:76:9b:a3:f6:a4:37:27:28:82:a6:
         de:52:e4:8b:e0:45:86:92:1a:11:24:6c:99:a4:46:e0:3a:0d:
         b1:c3:fe:90:a4:61:84:49:0b:d5:9b:4c:15:3c:eb:a0:2e:ca:
         35:16:a9:c1:96:8a:1b:4c:13:b0:16:03:65:d4:72:45:53:01:
         9c:e3:09:8a:94:f3:90:fa:6f:5b:e9:36:3a:4d:02:d0:f9:5a:
         7f:fe:39:6a:6f:75:2f:48:96:92:b3:59:11:e7:48:3a:e8:2d:
         68:17:43:9a:89:7e:20:ea:8f:d1:e8:cc:63:3f:e2:89:35:69:
         ea:17:c0:2d:e9:8e:f6:44:75:12:fb:06:e8:bf:85:0d:69:61:
         bc:a4:7c:23:c7:ae:8f:5e:4c:81:f0:6d:c8:83:6b:44:a8:a6:
         4c:bc:e5:26:8e:b6:10:bc:81:2b:2f:81:49:1a:b2:68:cf:16:
         6d:72:cf:98:ed:04:0e:51:cf:e5:b7:44:90:8e:48:ca:1b:d1:
         00:8b:93:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs9yAFZld+ebpqc8jnxsuJ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMDU1NWYwMTFiZTVlMjQxZWIwYjQyNWRlNWZkODZjYzY4
MzRhNTQwHhcNMjUxMjIwMjIwMTE2WhcNMjUxMjIxMjIwMTE2WjAzMTEwLwYDVQQD
Eyg0N2MxYWM0ZWI0ODM1OGM5NjVmYjYyOWQxNmMyNDMyYjRmNTBiMWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkW6gj+GSoRYNxgyZaSaHQr8kpfo
SJn/nnpNpa9G7mVmQzDCCo9Ap9ecE4KEUk2//H0qEblO+Lr7NHXGgnhvHYnxTmh2
VCUlAjoXr3B5LKIOZwEv/tOcuuLMHfi/0Gdkj1m7e412mhq8slBxUOuVlCH/TnXJ
1tt1OCRA47kwkpVv4OkkeJFv1U2cVeXfx9meiHGOmBnBvmViLWQYNStSO20o7fWh
UaWQJ9C6pk1MKcbP+Wv931gEuuh9yImp/8n6S71VkKHI4COXpdm6Uduy0wua+czO
QQur1awwSAKRQrbKgQDGSaP0JtcWMNnB7om6ivcjkRvIq8yu22k5AjFC1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfBrE60g1jJZftinRbCQytPULH5MB8GA1UdIwQY
MBaAFIMFVfARvl4kHrC0Jd5f2GzGg0pUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3dWVjhCRy1YaVFlc0xRbDNsX1liTWFEU2xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iZjAxNjItZmNiYS00MDg1LWI0ZjEt
ZDY5OWRkYzlkMDljLzEvZ3dWVjhCRy1YaVFlc0xRbDNsX1liTWFEU2xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iZjAxNjItZmNiYS00MDg1LWI0ZjEtZDY5OWRkYzlkMDlj
LzEvZ3dWVjhCRy1YaVFlc0xRbDNsX1liTWFEU2xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABej423NW
ImeuRBNMLE2QSlP6KFRApCCdLVHYtrTepPEN4FA91mAVDwnmWreyX39El+dCqq7y
f2DOO0Tbtxl2m6P2pDcnKIKm3lLki+BFhpIaESRsmaRG4DoNscP+kKRhhEkL1ZtM
FTzroC7KNRapwZaKG0wTsBYDZdRyRVMBnOMJipTzkPpvW+k2Ok0C0Plaf/45am91
L0iWkrNZEedIOugtaBdDmol+IOqP0ejMYz/iiTVp6hfALemO9kR1EvsG6L+FDWlh
vKR8I8euj15MgfBtyINrRKimTLzlJo62ELyBKy+BSRqyaM8WbXLPmO0EDlHP5bdE
kI5IyhvRAIuTqw==
-----END CERTIFICATE-----
Generated at Sun Dec 21 06:25:48 2025 by rpki-client