This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
File:                     GB5NYIFS_CRK__ui3HK4UbGbJSc.mft (raw, json)
Hash identifier:          CtNe1s8LVdMBwUA5vg6ONQ1JtsoC71dIvBX9jkG5p9Y=
Subject key identifier:   9D:5C:30:2E:3C:2C:7A:C4:A4:6B:C5:79:63:F6:DC:EE:15:55:6E:74
Authority key identifier: 18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27
Certificate issuer:       /CN=181e4d608152fc244afffba2dc72b851b19b2527
Certificate serial:       019AF50B7993C2674AA6315D3D11AB75535B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 19:02:41 +0000
Manifest this update:     Sat 06 Dec 2025 19:02:41 +0000
Manifest next update:     Sun 07 Dec 2025 19:02:41 +0000
Files and hashes:         1: 3SDO9hGSLXcvKio5nucfHtpBZqo.roa (hash: UySF852N3LzIIXg+WlqkSuDwnOKj/L9pAk/WjttqTkE=)
                          2: GB5NYIFS_CRK__ui3HK4UbGbJSc.crl (hash: 1KjmBKQdaDbM8c+vk38lJcaaQtAdI/ihcnsOcLuJOT8=)
                          3: QYv8HyZwcR2EgwyDNXO4DNm4alY.roa (hash: 4y8aidT7cf46oC9Rb8MtLIG+06WpyEeua6nqGV7vmw0=)
                          4: t3Zx6p1wvn7jY8kHjzfJnnc7eNg.roa (hash: OLIfG4z0xwuSo4+uWrBPz+WPutgwTrYoDXIoHunSp5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:0b:79:93:c2:67:4a:a6:31:5d:3d:11:ab:75:53:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=181e4d608152fc244afffba2dc72b851b19b2527
        Validity
            Not Before: Dec  6 19:02:41 2025 GMT
            Not After : Dec  7 19:02:41 2025 GMT
        Subject: CN=9d5c302e3c2c7ac4a46bc57963f6dcee15556e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ce:cb:c0:52:84:d4:4f:fc:d4:bd:c9:a9:18:
                    48:77:b2:6f:3f:c1:f9:f3:21:12:05:24:38:83:02:
                    b7:e5:4b:06:99:40:08:09:88:c2:fb:f2:35:f1:d4:
                    a0:84:a0:09:7c:d2:db:6e:c1:16:76:fd:4a:04:46:
                    08:62:ef:15:69:35:fb:04:bb:39:d8:06:31:b7:dd:
                    08:14:60:96:b8:88:0e:7d:7f:8e:d9:95:b4:af:ca:
                    a4:48:42:2e:b5:da:7e:32:e2:9e:c4:e7:2e:7a:e5:
                    d4:32:a0:54:e7:d2:9c:a9:4b:e3:7c:c2:8e:03:78:
                    b8:56:be:ed:76:cf:2c:dc:2d:fd:15:99:2a:67:eb:
                    09:7e:79:f3:c3:5d:08:30:de:58:f0:d7:ad:07:48:
                    c5:a5:32:f5:e0:c2:2a:57:0d:4e:87:66:62:bb:82:
                    4e:a9:5f:d4:87:f9:82:33:46:32:45:25:3c:1b:8d:
                    e6:1a:77:04:60:12:15:8c:dd:18:1e:1d:0f:82:c7:
                    ad:48:f9:54:59:37:8e:b4:12:1e:39:56:48:8e:e4:
                    38:6d:5b:e9:99:3b:5a:3d:f6:98:e0:bd:c5:4e:5a:
                    35:4a:6d:d9:ac:77:e8:37:2d:30:60:2a:26:d8:28:
                    b8:30:98:10:5d:43:69:64:69:17:cb:46:1f:56:a3:
                    44:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5C:30:2E:3C:2C:7A:C4:A4:6B:C5:79:63:F6:DC:EE:15:55:6E:74
            X509v3 Authority Key Identifier:
                keyid:18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:71:f3:e0:ff:77:33:9b:66:90:07:93:de:a5:27:03:2c:3c:
         00:48:43:fd:93:66:f7:5c:56:41:13:28:99:83:fe:f7:2a:88:
         06:f1:9b:d4:25:d1:5b:87:b5:83:37:de:5f:36:12:ce:25:e6:
         95:a0:95:47:82:da:55:39:b9:a8:ec:a2:59:c9:f6:b1:07:63:
         f5:1b:0a:7d:23:99:70:1e:fa:d5:55:4b:43:71:cb:24:44:00:
         9b:fa:60:59:a5:40:65:a6:5e:f4:31:86:25:25:42:2b:15:e3:
         22:18:fc:9e:fb:ec:ad:b5:85:17:3e:f9:1a:d4:71:75:aa:eb:
         74:f2:e8:45:4a:c4:86:0e:2d:55:69:4e:83:f0:9f:cf:19:ad:
         f0:d8:4a:e6:0d:fc:c7:f0:58:fe:ae:b5:14:6a:f4:6d:f6:72:
         cf:61:66:35:78:03:5e:3e:9b:f6:81:60:f9:38:ba:3b:52:e6:
         f9:8d:70:f3:84:5b:28:53:1b:bd:a9:6d:f0:7f:e6:50:c6:0e:
         36:84:11:33:2b:59:7f:95:98:ba:34:0d:ff:9e:05:84:92:4c:
         27:30:c6:ca:e9:d7:5a:0f:f7:74:0a:b0:41:a6:ff:d5:92:b6:
         67:3f:b1:ad:fe:ff:fc:43:51:35:c5:7a:4d:5d:57:74:88:6d:
         8c:a9:97:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:45:28 2025 by rpki-client