This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
File:                     gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft (raw, json)
Hash identifier:          sCHu2N1yu/mEspOUCfirBKvtOqtAapQj46fZuty80So=
Subject key identifier:   66:11:B4:48:E4:2D:0E:D7:07:D4:25:27:C0:40:67:BD:2F:22:2B:8C
Authority key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
Certificate issuer:       /CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Certificate serial:       019B62E6B6227748B9A2EA7A6CAF666186F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
Manifest number:          08F7
Signing time:             Sun 28 Dec 2025 03:00:45 +0000
Manifest this update:     Sun 28 Dec 2025 03:00:45 +0000
Manifest next update:     Mon 29 Dec 2025 03:00:45 +0000
Files and hashes:         1: JDrx2eivum3EpEC2yYMV800Yrss.roa (hash: ulTfb+dP81eWcEGPfJ82GxDQnMLjoBVpbbuuCeB7TlU=)
                          2: gHPWHyifWHwygl6RXc-S_BViAv0.roa (hash: z+ENnJP8gUh9QOydmc0fMConfO5crb4XF9elye+KrnQ=)
                          3: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl (hash: 2d2EMlcahF26mCoHO+Fl1rI4Mz3OAKfy4oXwCMapLBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:62:e6:b6:22:77:48:b9:a2:ea:7a:6c:af:66:61:86:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
        Validity
            Not Before: Dec 28 03:00:45 2025 GMT
            Not After : Dec 29 03:00:45 2025 GMT
        Subject: CN=6611b448e42d0ed707d42527c04067bd2f222b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fc:ec:92:ba:65:cf:a3:70:68:f8:51:aa:3f:
                    ad:97:9c:f6:41:01:53:f2:72:b5:f6:84:8b:80:b4:
                    93:67:2b:b5:7b:ea:37:8f:2c:19:32:96:ea:ea:cd:
                    a7:76:61:2f:9d:c0:48:fb:fe:2b:a8:d1:51:bb:b1:
                    61:5d:08:c9:4b:54:51:a1:94:8b:0b:dd:25:e5:44:
                    55:e8:52:7c:52:05:20:50:63:a7:a9:83:53:c6:35:
                    cd:13:07:f1:ad:48:31:9e:c0:56:c0:f8:7c:ef:8b:
                    0e:6c:04:bb:b3:47:ec:57:4d:63:7e:c0:06:f1:85:
                    ad:7d:e3:25:4f:dc:7a:1f:80:ca:39:74:55:fa:ba:
                    39:6b:44:7b:51:c3:df:97:11:80:85:01:4e:d4:28:
                    f6:0b:17:18:3b:59:53:51:39:74:58:f7:21:70:3d:
                    96:0d:72:2a:60:38:68:9c:79:22:e6:6f:d7:a6:f3:
                    df:85:cc:62:1b:0b:b8:c2:87:78:50:5d:80:25:a8:
                    95:ae:b8:dc:a7:dc:a8:43:29:43:6e:2e:24:7e:89:
                    c4:8c:91:75:7d:05:56:d1:f7:53:ef:ac:84:ac:11:
                    52:85:02:ec:3c:0c:06:5e:90:e9:b5:0b:14:64:21:
                    23:d6:d1:2c:1c:61:76:94:99:43:f5:d2:0e:50:eb:
                    86:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:11:B4:48:E4:2D:0E:D7:07:D4:25:27:C0:40:67:BD:2F:22:2B:8C
            X509v3 Authority Key Identifier:
                keyid:80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:db:42:55:60:14:b3:6c:93:49:4f:cf:8c:55:b8:9d:06:75:
         56:f7:50:a8:37:76:86:b3:1d:b1:42:fe:fc:23:82:55:71:e4:
         c4:c8:4e:df:38:51:63:8d:7a:db:e5:53:ea:c2:d5:28:6c:8a:
         65:2d:a7:20:fc:26:64:43:05:14:42:45:4b:ed:6a:01:19:37:
         cb:4c:2c:b6:1c:4d:a9:6c:91:c3:4b:90:9b:87:a4:9d:cf:44:
         ef:4c:8e:0a:65:d1:7a:a1:af:68:1b:70:2a:e3:12:2f:36:ca:
         89:a8:47:c0:13:87:61:51:f9:29:ea:ca:6a:25:d2:5c:98:7d:
         3c:b3:b2:81:a2:02:af:d9:f2:40:e9:0b:7f:b9:bd:48:4e:ca:
         cf:6e:77:65:96:d4:10:6d:02:d4:be:98:a7:52:13:48:45:de:
         96:5f:76:7d:8a:82:f5:e6:15:e1:4a:fa:1c:03:36:86:25:c9:
         4c:3b:90:f4:b3:ad:88:d5:16:71:55:62:08:80:5b:89:ec:60:
         39:7a:78:fb:de:e6:ca:0a:d8:29:3e:2f:83:af:eb:1f:2f:15:
         b0:db:b1:8a:87:f2:b4:88:b2:4a:7f:92:16:c0:78:a2:08:6b:
         25:df:7f:eb:20:59:49:e2:31:72:57:25:02:96:89:ca:98:94:
         38:d2:84:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 05:49:31 2025 by rpki-client