This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft
File:                     GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft (raw, json)
Hash identifier:          g3OBcE0ASFQ+qb0zaIpBauuGNeLZB6KN4JpbBgl21Rw=
Subject key identifier:   85:5E:4D:84:D8:1F:F4:C9:36:E7:84:85:78:D7:34:38:1B:94:5F:FF
Authority key identifier: 19:54:E3:25:70:BB:FB:9A:F1:1C:23:81:E8:1C:79:7C:2F:40:08:7C
Certificate issuer:       /CN=1954e32570bbfb9af11c2381e81c797c2f40087c
Certificate serial:       019B397DA3F805A12D30229909DA5F10BFFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft
Manifest number:          1520
Signing time:             Sat 20 Dec 2025 02:01:33 +0000
Manifest this update:     Sat 20 Dec 2025 02:01:33 +0000
Manifest next update:     Sun 21 Dec 2025 02:01:33 +0000
Files and hashes:         1: GVTjJXC7-5rxHCOB6Bx5fC9ACHw.crl (hash: FXwry4bk5d2FyVNBJkI9p76zdCN1Rm/V/Pegj24wEQY=)
                          2: GgNgTlMDxBI-sgP8SMSjTw_F_VM.roa (hash: Ty+cmkaaAA9T426GZvZYK5GuygToSIgMx8Djs4PimfU=)
                          3: TtR01kMsO10JvirQ4o5KaXzKuaw.roa (hash: Od31Xh8Fn1FlG/ZaZR87smAKpKOnGxw4sc59LmfJc+g=)
                          4: kJBSs2f5pbNQK-DKD3joYbiYwjQ.roa (hash: TG29lyv9BLESLBcriUYqukiRiQu+8dXmu4FYgZnLRaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:7d:a3:f8:05:a1:2d:30:22:99:09:da:5f:10:bf:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1954e32570bbfb9af11c2381e81c797c2f40087c
        Validity
            Not Before: Dec 20 02:01:33 2025 GMT
            Not After : Dec 21 02:01:33 2025 GMT
        Subject: CN=855e4d84d81ff4c936e7848578d734381b945fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6b:a6:52:83:39:8c:b2:a6:37:54:6a:4a:ed:
                    72:c0:9b:dc:46:f2:13:49:7a:c5:4c:43:ce:6d:3f:
                    93:85:58:2c:29:24:73:38:0b:8f:a1:79:71:58:a8:
                    6b:6b:13:1e:e2:f3:d1:98:3b:78:39:7b:02:15:85:
                    10:47:e3:3b:be:15:7e:e1:c1:bb:15:7a:d1:7f:c2:
                    2a:99:6f:15:65:59:63:1d:f0:a8:b6:7b:9f:5c:cf:
                    26:0b:ae:f6:49:49:1e:cd:a8:4c:22:48:0a:d3:6e:
                    ab:b2:35:20:5b:1c:74:37:0a:24:9f:ba:3d:7f:66:
                    f0:d9:c9:6e:30:4d:3d:a5:73:0c:0e:8e:6e:80:c0:
                    7b:e7:1d:f7:5c:4d:2b:df:fa:f6:8f:02:1a:25:8f:
                    49:4b:d0:01:9e:6b:07:d6:aa:66:57:ff:59:4b:1a:
                    aa:84:3b:42:3d:8f:79:be:64:4b:d2:8e:fe:d6:e6:
                    ee:8a:36:ea:62:6e:63:f1:23:cd:ae:a9:7d:af:6c:
                    b4:de:5f:fb:ec:88:97:7d:52:45:5e:94:18:8c:9b:
                    2f:b4:9f:42:f1:12:a9:9b:e3:75:c2:ca:8f:8f:2a:
                    0d:de:aa:7c:61:48:99:f8:fc:f6:b6:77:ba:7d:e4:
                    4c:d9:97:e9:e1:25:3f:79:d9:ed:00:b9:9a:80:68:
                    13:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5E:4D:84:D8:1F:F4:C9:36:E7:84:85:78:D7:34:38:1B:94:5F:FF
            X509v3 Authority Key Identifier:
                keyid:19:54:E3:25:70:BB:FB:9A:F1:1C:23:81:E8:1C:79:7C:2F:40:08:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:fe:70:84:89:db:6c:e6:c9:6c:39:de:80:22:95:d3:b6:6e:
         e0:ba:6f:a7:57:4f:37:d1:95:b6:ab:b5:30:50:e0:fa:d7:4a:
         fb:12:dc:f6:60:ef:29:ef:8a:62:8e:2e:4b:2f:94:45:00:dd:
         d5:cd:a9:64:18:3f:42:f2:5d:5c:dc:6a:2a:64:dc:a8:35:b8:
         fe:fd:e1:3b:f2:52:ab:34:63:34:4a:39:83:9a:00:52:24:7b:
         f5:2a:ea:9e:05:b5:f8:4f:61:0e:5c:de:c4:75:53:98:9e:da:
         d5:28:9f:af:4f:07:3d:46:7c:8e:f6:b4:46:1c:11:20:73:a0:
         fe:84:e9:b2:04:fe:cf:b7:71:ec:e7:c7:22:41:cb:01:b3:f6:
         48:7d:4d:90:09:78:f3:a5:1b:4d:e6:6b:22:27:3f:32:3a:da:
         41:48:3e:a6:fd:92:d0:c4:b0:6f:4c:c4:52:98:c4:2d:36:29:
         e7:60:e8:b6:d3:16:a4:1f:eb:2b:5c:5a:cc:cb:58:da:8a:96:
         91:34:a9:92:d7:9a:44:ee:33:86:85:d8:31:37:57:04:23:31:
         70:a6:c6:cf:43:da:78:39:dd:8f:99:84:38:4f:16:5e:71:c9:
         1d:fc:9c:30:0b:31:a0:b1:56:8d:08:82:8e:91:ad:b4:b4:3e:
         9c:e4:3a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:03:45 2025 by rpki-client