This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
File:                     grE25oINlPA7HF1x7uPUsiGRUo8.mft (raw, json)
Hash identifier:          TC+uiFmjgeLpIjaKcR65nhHmTwjbgSQfLGzHVN5LYyo=
Subject key identifier:   61:5E:DA:D0:71:CE:AB:CA:A2:31:1C:7D:2E:2F:7C:9E:ED:95:48:77
Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
Certificate issuer:       /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Certificate serial:       019AF20937B4A9E143F349B110BD7205D918
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
Manifest number:          1308
Signing time:             Sat 06 Dec 2025 05:01:21 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:21 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:21 +0000
Files and hashes:         1: PXiVKqc-gzBW0DpV9A_yfa7v6KE.roa (hash: L22rZjAObHC63x5DS7bDRlGFpJbFt5MxhJzGQ+tq5BE=)
                          2: grE25oINlPA7HF1x7uPUsiGRUo8.crl (hash: UiIEMjddcaqr/1Udj17FJNIdpRYkrDF2TKTyT7O5rI8=)
                          3: xFHz4_XjwzN0pPKWaqRmrbsppf4.roa (hash: RMJsZt2RIHwd0V36eKXMJsELKCwZUihxIvWX1Ne3Nog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:37:b4:a9:e1:43:f3:49:b1:10:bd:72:05:d9:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
        Validity
            Not Before: Dec  6 05:01:21 2025 GMT
            Not After : Dec  7 05:01:21 2025 GMT
        Subject: CN=615edad071ceabcaa2311c7d2e2f7c9eed954877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1b:0b:c9:69:17:1c:26:29:4a:dd:e9:c5:93:
                    8f:24:a4:5c:0b:4e:2c:22:20:77:e9:d4:4b:8a:28:
                    11:e3:4e:cd:aa:c7:d5:ac:f1:85:17:52:f4:7f:51:
                    bc:9b:e0:78:a3:3a:ca:36:2a:29:6a:b8:79:d1:5e:
                    36:47:91:a9:8a:79:3e:da:5e:e5:09:5e:8a:2a:bd:
                    f3:f1:7d:a9:23:c3:00:2b:fc:85:ee:e9:14:b3:a2:
                    94:73:5b:ef:61:70:6b:6d:b9:93:25:ae:fc:6d:1d:
                    d3:04:03:61:62:65:14:e2:b2:dc:35:d2:72:b2:05:
                    91:f9:da:93:1c:e9:ee:f4:6f:23:bf:df:41:e8:c5:
                    e6:73:ea:d4:28:e3:de:16:a5:c6:76:fa:55:9c:4d:
                    1b:48:e7:1d:19:d4:8a:15:94:e8:5e:ed:e5:50:ae:
                    6e:63:19:80:9b:0d:a7:2b:f2:86:59:12:51:e0:4a:
                    26:f8:67:c6:87:8b:06:70:67:10:f8:9b:b0:b7:70:
                    c1:bf:60:03:cd:21:45:0b:8d:48:f8:55:96:27:2b:
                    ab:a2:a0:42:b3:b3:43:a4:77:e1:48:6d:c6:5b:d7:
                    e6:fe:9b:4b:30:1b:31:47:d8:2b:a5:ea:a1:74:6f:
                    df:4e:d7:72:0d:39:71:ad:3c:d0:4c:45:62:28:38:
                    ca:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5E:DA:D0:71:CE:AB:CA:A2:31:1C:7D:2E:2F:7C:9E:ED:95:48:77
            X509v3 Authority Key Identifier:
                keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:63:11:91:6b:28:ed:92:fa:3f:e7:4e:84:a0:cd:67:eb:ba:
         3d:3c:be:6d:e5:fb:19:80:e0:d9:e5:d3:90:c3:4f:f7:db:16:
         f8:bd:a7:78:0e:5f:cd:27:84:26:a3:82:c7:53:b4:d0:20:29:
         b1:3f:4f:db:a0:ac:88:48:9d:8e:45:ae:6d:e2:e2:8a:e1:6d:
         83:77:cf:d5:9b:60:ed:14:a2:f3:68:39:a1:46:e2:95:05:ed:
         f5:b1:e4:0e:b9:65:c8:8f:c7:c5:a5:43:f5:73:e6:a4:26:b0:
         df:ba:0d:b9:f3:98:60:90:3b:78:19:35:3d:3d:b5:3f:29:81:
         62:6b:2a:04:95:da:6b:1a:91:b2:30:1c:51:86:e4:c6:c9:38:
         37:2f:8f:86:3f:a7:15:ca:29:17:98:3d:74:c2:58:2b:e5:45:
         f5:4d:e2:af:d7:ae:15:88:81:79:41:8d:f5:f3:1a:0c:22:8b:
         64:b7:6f:d4:ab:38:79:7a:61:30:53:6d:db:1c:e6:ff:b0:60:
         75:bb:5c:b4:d1:57:94:e2:b9:6e:ac:a3:bd:82:a1:3f:6a:50:
         01:79:09:b2:a3:80:00:cf:22:03:ee:40:30:59:11:18:1b:2c:
         d2:31:6a:e6:0b:9f:65:40:b0:a4:80:1f:df:cf:23:26:a3:2e:
         80:04:f8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:24:44 2025 by rpki-client