This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft
File:                     g0eVFJWTl8Xj-nbh6klejh9sMZs.mft (raw, json)
Hash identifier:          rs9k1TJ7brLR3qMcqVlRdGrGtnKN0g/rh23WHAkWebM=
Subject key identifier:   D4:45:5C:70:25:E4:62:B7:5E:5C:D8:6B:26:F2:52:0B:88:F7:08:61
Authority key identifier: 83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
Certificate issuer:       /CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Certificate serial:       019B668CE668F092818486204BF577341686
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft
Manifest number:          17A7
Signing time:             Sun 28 Dec 2025 20:01:08 +0000
Manifest this update:     Sun 28 Dec 2025 20:01:08 +0000
Manifest next update:     Mon 29 Dec 2025 20:01:08 +0000
Files and hashes:         1: PAOEGXpGQsJvw33MiKgLxU-N9pw.roa (hash: SIleoKFm0+RmqPPjQ8NBeYamDKWHFmuPAgbu+GZPgRQ=)
                          2: ePEY-OvNb5lRfmn8bdNkVwoufIc.roa (hash: waMVDfU557kvvA8oYsX2Z8+jr8xTt0T1pl/hE8kaxzI=)
                          3: g0eVFJWTl8Xj-nbh6klejh9sMZs.crl (hash: rfgZlgq++py17EGaLbUauCBsOXanMeiJypFJRPTl4kQ=)
                          4: rTKSwyD4bSu0V_OTB6JmkjQohdI.roa (hash: F3/bo+ceS2+kTH3oRunm6ME2Zkm2RRhJyAWZ0mxY7dQ=)
                          5: sZhd0PoWKQb_t3dDn3jTQ-3HgM0.roa (hash: U9YTpBnSvYsfK4xAqu4ZCzzOhEdFcLlSb9+Ct8I8V4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Dec 2025 20:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:66:8c:e6:68:f0:92:81:84:86:20:4b:f5:77:34:16:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
        Validity
            Not Before: Dec 28 20:01:08 2025 GMT
            Not After : Dec 29 20:01:08 2025 GMT
        Subject: CN=d4455c7025e462b75e5cd86b26f2520b88f70861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bc:84:87:48:46:bf:c3:cd:c7:78:79:04:06:
                    fa:82:90:ea:ed:2e:62:74:e7:b8:b1:f5:13:f9:14:
                    15:19:4f:3c:52:a0:fa:22:6d:68:f8:4b:82:93:fd:
                    8e:0b:49:b9:00:e2:81:29:ba:97:8e:ee:29:05:df:
                    f6:ad:13:5f:d7:00:6c:4e:55:7e:7f:73:ed:ad:d7:
                    14:8f:62:46:05:0d:71:6a:98:5b:58:80:7e:ee:74:
                    a0:40:b3:70:fb:1d:01:f5:d6:62:0b:e4:6d:1b:9e:
                    20:92:ff:ff:d7:9b:be:08:42:77:fc:29:ea:19:8f:
                    8d:51:0f:cc:f0:ae:20:db:38:14:75:33:62:ad:c0:
                    a9:67:79:d6:12:1a:8d:3c:50:94:a2:60:f2:35:06:
                    80:3c:b9:01:76:15:cf:aa:25:57:30:83:1d:f9:82:
                    cd:66:4a:74:f1:d5:44:87:5c:b5:1b:03:0e:ad:3d:
                    3e:a3:78:f2:96:66:69:80:f2:9b:f9:58:16:26:79:
                    a0:d3:05:b9:14:b3:6f:61:24:0d:bb:b9:c3:fb:3e:
                    00:a6:e3:48:f1:77:bf:e6:d9:dd:e1:10:7c:29:77:
                    0b:15:3e:91:95:dd:df:23:ec:d5:3b:c0:ee:c9:12:
                    59:80:dc:7d:7e:95:0a:71:f5:9c:ef:ec:36:b5:91:
                    57:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:45:5C:70:25:E4:62:B7:5E:5C:D8:6B:26:F2:52:0B:88:F7:08:61
            X509v3 Authority Key Identifier:
                keyid:83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ff:d2:67:08:a0:b0:30:60:7c:75:1e:7d:5d:64:dd:e5:c2:
         5d:e6:7d:e9:d3:7f:d2:96:3a:e6:fd:23:67:33:24:77:49:3a:
         58:57:c0:28:62:a5:6b:62:fd:4e:6c:58:4b:ed:f9:ff:a7:0f:
         15:c6:67:8a:97:cf:0d:46:b0:c3:4b:63:36:b7:bc:62:6e:dc:
         57:76:a9:2d:d0:79:80:5c:e3:07:eb:99:a0:a7:8a:f7:58:a7:
         bd:10:82:48:d0:f6:1d:7b:b4:88:ca:7f:78:4c:64:9c:4a:e6:
         5c:d3:09:e2:6a:94:d3:1a:bf:1a:ad:fc:cf:b1:21:05:93:f6:
         61:23:61:12:62:68:09:eb:fe:93:a1:fe:c3:7e:48:2f:c9:46:
         6d:c7:05:14:a1:18:db:e8:bc:26:2b:c1:51:d8:50:21:74:6e:
         eb:69:e8:23:5e:b1:37:ff:79:17:1c:50:b6:5f:5a:02:b9:c4:
         71:39:23:d3:85:d8:74:b7:b5:8d:ae:ab:d0:39:c2:32:a6:4c:
         7b:ac:ee:0a:df:4b:76:85:cd:f5:78:68:f9:f2:f7:8e:cf:4d:
         cf:f9:c3:ad:2e:ef:23:ae:f3:ca:8a:8c:9d:5e:21:d9:4e:fa:
         09:7c:37:e5:91:47:f3:74:d9:34:60:2f:e4:a3:20:c5:b1:01:
         e1:e7:88:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 22:15:16 2025 by rpki-client