This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
File:                     GJ1rVdamiO5eM4GIO7WvaEMyduM.mft (raw, json)
Hash identifier:          tgQhoIdmaPc9yqcQR5aX73zEBXPb2FTB9kVd2Bzoqbg=
Subject key identifier:   2E:58:0E:14:D1:21:A5:7B:8F:CF:B6:80:56:35:AD:C1:89:F1:5C:90
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Certificate issuer:       /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial:       019AF12EF14E934AFA1B8ECDAD64F79A7530
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
Manifest number:          090D
Signing time:             Sat 06 Dec 2025 01:02:56 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:56 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:56 +0000
Files and hashes:         1: BjnyGiZGjHiQKk_KiK2yHf9VV5E.roa (hash: yPmoHixaBGhSn0ytp1vI4gHgRuEEubgW3Qlg0aIFvLw=)
                          2: ByxFjr3Toz51tTrCgyJcZ9ROTDc.roa (hash: MC65BQj3HwbXh+vS6odPDeaoBTY9byCzkoFUHQFoK8Q=)
                          3: DwaqxzmRSIx0-STl7nKTGpQzuOY.roa (hash: MZmP0bhKRokke3K++mx2NwZxuOVWVJCAYgwxbhXA9iI=)
                          4: GGbF9-zGjyTDR6c_8u9_YjrTpyA.roa (hash: bwO8/hNalFS0BhivjgCF+g+jV4ja4h3km9adCluqbWA=)
                          5: GJ1rVdamiO5eM4GIO7WvaEMyduM.crl (hash: DaR77PhJTRKl0GAXc2vk7B0vhQ+iuc/gV/U7gjlddvo=)
                          6: I4lk-K4vzADVCX6yUHNgiwhmEpI.roa (hash: GGA95oFZZ8h6ELEvN/tBAFl4TyZuEFRFl/1TZUQ+VFk=)
                          7: KWHdrLH6yltG_lXTKMjWm06JymU.roa (hash: gXJ+eakLyWc/URtc7hQ4mdwbuyCLmf/qcAevtcOTkKE=)
                          8: MqSMr4SHl_2pRnKp2kxe3xf9us8.roa (hash: 35jRHvNXfyo825+J2hBOdYQpQKTNSs5hrfo5icVPFJY=)
                          9: OjNkZBsD7_7ya1gvmoZ6C9IcKqA.roa (hash: QIsvbi1JaiVHwDu3LNY+DC4jKpBlQxMAMFNWUB09hyg=)
                          10: PB1BeL4uZ3QF6gY3DHiXfq0456E.roa (hash: yBSu3OCxbV3AaOMypdJ28XmEmDKMRu8A8am1l/di17A=)
                          11: SStPLeYhuVW8ht29Rl4UMKZeE8Y.roa (hash: oIaG74/+nV2sdh79tye5X0ZT2qnqxj3Pq9M6q6XHKAw=)
                          12: UEFTphc5r_X08VC4KXcQxiS2shg.roa (hash: 7dECbcqaLL4E/mWcxOkfhjwmM0MPjpjuitKlI7h4KmU=)
                          13: UX1FG7BPxLN_6ufljGY3tuBoI2k.roa (hash: 2XU8mmir09zmdANIc3P91NSucr1JlTpLnKmXeZUmmHU=)
                          14: XLUh0v_eWb4ByZlyr_8IFlpagYM.roa (hash: OZc6IBFQYjTFaecuhGPDb6Fno7u24w/UXmkci73bi8k=)
                          15: d_3aWMx2wIEi5zwaAmVuFBWvT4E.roa (hash: 0RwztfGXYXDxIIQZaqPOXqxbSmC1TrJiJ1GXH53HmB0=)
                          16: izylkdHb8K1XiexJr07bxHzS70o.roa (hash: +WAoXiTTcbRjvuFJ+mdToEXjYNYtqJBIbb39TwPcmHE=)
                          17: qR3RdSbRRb7JtoPItdAFVcmOfm4.roa (hash: 0YUFu35h0q7ZeWw1RWxv5JvuYja078PVd4Tt+tY/B3M=)
                          18: t3YGdwn4XgpiLvqOT8pcW7Y62YU.roa (hash: 2/dq9okwdAS6VebH9nouSwmwpygS4x1CkX0kF3Wm31g=)
                          19: tlIT9EE8YpMp8nWSniI3miatB10.roa (hash: hMUJkDEHVtxIORugCsH16m3DT06lYDeH6qg/65YvGew=)
                          20: yTtcVU9ChNydH2mKs4iN5Ah2HPs.roa (hash: ro/KjPOdv9iitLmrbKrmD5i/eJZ/0hcJVF+hmNRnyAs=)
                          21: zl_FIWsQsU9TjHfL29rvbfo1pm8.roa (hash: plWBBKMU1eDxoN+f9JQHw2+baxWKk/tH9YtUnkFUaOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:f1:4e:93:4a:fa:1b:8e:cd:ad:64:f7:9a:75:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
        Validity
            Not Before: Dec  6 01:02:56 2025 GMT
            Not After : Dec  7 01:02:56 2025 GMT
        Subject: CN=2e580e14d121a57b8fcfb6805635adc189f15c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:10:b1:55:1f:b9:1e:f3:29:d3:0c:2b:52:dd:
                    7e:89:ee:3f:14:01:41:94:32:b1:89:a1:7c:1b:b9:
                    e5:9f:a7:d9:ea:97:51:c0:3c:d1:2e:bc:35:72:cb:
                    4e:3b:ae:08:59:56:57:b7:12:39:5f:ba:09:53:56:
                    aa:78:5c:00:12:24:88:33:7d:85:08:02:50:b8:13:
                    14:ee:2d:2d:cf:a6:90:f0:b7:2c:a5:4f:3d:ad:17:
                    32:70:4b:9b:a7:91:2e:c6:7a:38:c0:69:61:b2:7b:
                    f6:1e:53:f6:f4:f5:7b:66:cf:b8:fd:c7:fa:0d:56:
                    ed:cc:1c:46:fd:b0:60:a6:7e:25:24:45:49:73:f3:
                    0a:1a:ce:97:a6:1d:de:f8:28:25:17:d8:7a:c5:a8:
                    f0:1c:36:a7:7d:ca:61:e7:84:68:f7:0e:d6:e1:19:
                    f6:c0:45:eb:ca:1b:f1:11:99:8d:df:e4:9c:f3:65:
                    c2:ea:24:41:af:d2:61:22:91:31:11:a8:54:30:2e:
                    5f:f0:8f:89:7d:7b:82:bb:71:d5:41:1e:a6:0d:b0:
                    ef:0b:99:db:d2:83:79:0f:00:70:51:7b:3d:46:54:
                    fc:78:58:1b:81:ac:0c:fc:fc:6e:5b:ab:09:8a:79:
                    5e:d4:74:ce:d3:8c:90:e9:00:6c:db:d8:27:2d:ac:
                    a6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:58:0E:14:D1:21:A5:7B:8F:CF:B6:80:56:35:AD:C1:89:F1:5C:90
            X509v3 Authority Key Identifier:
                keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:eb:ce:d4:b6:da:df:d9:1f:3b:33:ea:7d:c6:1e:b2:d1:60:
         0f:7f:06:9b:a3:ad:2b:de:df:2d:b7:59:5c:4e:39:3b:b2:e4:
         5c:a2:25:86:2b:d8:6a:06:b0:a9:c2:7c:37:51:04:08:59:54:
         76:eb:52:39:b4:ab:29:c1:c6:9a:2d:d9:f8:fb:5b:f7:1b:f0:
         42:ea:eb:7a:b5:36:8a:28:5f:85:94:76:2e:3f:d4:c3:a2:7c:
         f2:de:fa:76:a2:02:8a:bb:79:64:00:86:29:39:3a:34:97:b1:
         1a:ba:9d:13:e2:c4:0f:ae:d1:b9:0d:a8:df:ae:5b:35:62:4e:
         a7:97:b6:71:8a:bc:e6:1b:d1:42:1d:63:da:f8:c2:34:89:f1:
         6e:4e:3c:38:0e:43:31:a1:f3:99:e9:a6:62:e5:cd:1c:6a:19:
         e6:fc:21:77:19:8c:c3:c2:a8:69:13:f5:32:1c:b3:14:60:8a:
         41:ef:a1:99:2a:bf:9f:df:3b:14:06:88:3a:40:2f:2d:7b:b3:
         7c:dd:d4:82:5b:a3:90:c3:36:54:dd:91:65:82:0a:55:87:be:
         bc:3d:9a:78:7e:95:d9:9b:4c:44:6d:fd:50:c8:8f:4a:0d:a8:
         b3:f5:6d:02:94:74:a2:5f:c8:b2:60:17:27:6f:89:8c:0c:ad:
         39:e0:fd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:15:36 2025 by rpki-client