This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
File:                     GgAddwJfBSr30OYuFwEBa54i4AI.mft (raw, json)
Hash identifier:          +u7JUkKQ0B+Rp7lYBvx7CkEqR/DuC1t2EPvmZPrYC6c=
Subject key identifier:   2E:0C:4F:83:E3:D2:D6:CD:E3:36:3C:7D:CF:94:0E:08:EC:93:BD:B4
Authority key identifier: 1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
Certificate issuer:       /CN=1a001d77025f052af7d0e62e1701016b9e22e002
Certificate serial:       019B27775ECAF6BF0648DDE4AD4F014AD20F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
Manifest number:          177F
Signing time:             Tue 16 Dec 2025 14:01:32 +0000
Manifest this update:     Tue 16 Dec 2025 14:01:32 +0000
Manifest next update:     Wed 17 Dec 2025 14:01:32 +0000
Files and hashes:         1: GgAddwJfBSr30OYuFwEBa54i4AI.crl (hash: uNbbKw3IwKUYBmOO6cH4sHibsBp+10SlecJoYmL4x90=)
                          2: _iJsde6qyC_6NAOojw9ckyW4I9Y.roa (hash: eA5RMaI/PSYqnEOMngz7pUxZUouDRioQk9k6T7VnnHw=)
                          3: itzE0xDc7Ed_isK4AHpghv2Rwx0.roa (hash: hFMUWP8HSIa3jUGL4S6vwaZpg8RitcYR7NXIvfp8JAE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 14:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:27:77:5e:ca:f6:bf:06:48:dd:e4:ad:4f:01:4a:d2:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a001d77025f052af7d0e62e1701016b9e22e002
        Validity
            Not Before: Dec 16 14:01:32 2025 GMT
            Not After : Dec 17 14:01:32 2025 GMT
        Subject: CN=2e0c4f83e3d2d6cde3363c7dcf940e08ec93bdb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f3:5c:cd:c7:5f:e3:3d:1e:72:3c:87:f3:80:
                    02:39:c4:86:59:dd:2d:a3:d0:46:fa:57:a3:ee:6a:
                    1a:17:dd:37:df:29:63:aa:c7:6d:1f:74:fc:4a:31:
                    89:88:3a:bc:a9:53:b1:98:1e:71:ea:bc:fb:d4:b8:
                    5c:a8:74:f7:6a:85:0a:48:c7:02:24:26:e0:5b:e0:
                    62:f5:2a:f5:15:d4:7f:68:d6:25:9d:bf:37:d2:84:
                    44:fd:54:9d:6b:1b:16:1e:72:6e:be:3e:1a:04:03:
                    f7:be:8e:06:49:98:2f:c8:b5:b6:ad:9f:da:90:4d:
                    19:b8:96:62:6a:a2:ef:16:66:d4:b3:6a:37:a6:36:
                    af:5b:e5:da:61:a4:fb:d5:9f:1e:41:35:21:73:7a:
                    a7:02:a9:f2:90:63:88:0a:f6:5f:6e:d1:9f:f0:a2:
                    ca:05:b0:0a:b2:5d:ad:7a:57:66:64:fb:98:19:32:
                    56:05:38:df:df:55:4c:67:58:d7:6f:70:c8:17:b9:
                    6d:56:c0:26:9a:17:8c:46:5a:7c:35:e9:5f:f8:b6:
                    f0:59:40:5d:85:55:2f:45:84:30:8a:97:2f:b5:51:
                    1e:e0:2c:fb:cd:05:bb:cb:e5:2d:32:95:42:08:46:
                    67:6c:ea:cc:5e:2b:dd:2a:04:8a:6d:9e:d1:19:1e:
                    89:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0C:4F:83:E3:D2:D6:CD:E3:36:3C:7D:CF:94:0E:08:EC:93:BD:B4
            X509v3 Authority Key Identifier:
                keyid:1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:79:aa:9a:11:71:d9:5f:b3:74:68:23:8a:6d:11:15:ef:d0:
         ca:2b:66:c6:45:41:a4:ee:97:3f:b5:2c:89:1a:99:93:1a:64:
         11:04:1a:d5:99:f8:47:e5:98:53:36:ff:87:a1:f8:40:83:8a:
         1a:29:5a:4e:d2:58:b2:ac:8a:1c:3d:4a:db:9f:e9:2f:ad:41:
         82:28:8f:f1:70:21:2c:47:a6:64:da:d5:7d:94:f9:21:2a:26:
         41:ee:a9:d9:b0:bc:75:07:01:0a:9d:0a:c3:1b:76:e4:d9:ea:
         93:50:17:a1:6c:f9:55:97:c3:0a:8d:63:05:da:29:01:cd:37:
         c9:bc:1d:7b:18:ed:e3:c6:9b:f8:de:c9:82:ef:49:d4:1b:49:
         c2:1f:78:24:ee:68:f4:df:fb:06:ab:81:7c:1f:27:9b:d0:a1:
         e0:90:7c:cc:72:41:70:91:de:e7:14:52:bb:87:45:12:b4:ac:
         43:26:75:e6:af:38:09:82:68:be:83:18:56:32:23:59:9c:fb:
         21:ce:07:e5:d0:d9:38:3b:dd:bb:82:5c:81:96:43:cb:26:36:
         40:2c:49:a5:8b:d7:83:d8:27:f3:79:22:45:e3:06:99:e9:d0:
         9d:14:91:9d:d8:57:1c:77:c7:89:0a:7d:79:3e:74:75:a5:42:
         17:b8:64:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 22:35:02 2025 by rpki-client