This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
File:                     GUKBeimILUM78buOvFmy_yVugD8.mft (raw, json)
Hash identifier:          0P+sS/FCDXOp4i2bVVPrq9YmLkhBviXJa5w3FB2XKJI=
Subject key identifier:   36:DF:B0:8A:FB:F9:19:5C:13:40:E5:91:B4:19:AA:4F:78:B1:2E:9E
Authority key identifier: 19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
Certificate issuer:       /CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Certificate serial:       019AF3C0BE9BC20298ABD8272FB3C814590F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
Manifest number:          0C9A
Signing time:             Sat 06 Dec 2025 13:01:26 +0000
Manifest this update:     Sat 06 Dec 2025 13:01:26 +0000
Manifest next update:     Sun 07 Dec 2025 13:01:26 +0000
Files and hashes:         1: GUKBeimILUM78buOvFmy_yVugD8.crl (hash: aOIMUZ5G0mEUbvZVxwqSfbXabWwWbxLf9EJcLRft/ys=)
                          2: GcHslNVvtLMqacjR3pPEHzo6qdY.roa (hash: 2lxXQx2L70uMfwd/jJMu4ZB84tprJ69cJOFL2QzMBdQ=)
                          3: Jbshh5-Y5wAYjNhv_trKB-ylliE.roa (hash: 5xQE2hOATpkYgRTE2YQwm3+KGl3F12kDMLW5EC6YqT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:c0:be:9b:c2:02:98:ab:d8:27:2f:b3:c8:14:59:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
        Validity
            Not Before: Dec  6 13:01:26 2025 GMT
            Not After : Dec  7 13:01:26 2025 GMT
        Subject: CN=36dfb08afbf9195c1340e591b419aa4f78b12e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:48:3d:da:7d:2f:e5:8c:e7:c7:02:7a:e0:
                    56:bf:0f:60:5e:c4:96:b0:31:7f:f1:3b:d8:7f:33:
                    45:f1:0a:6b:04:b4:34:70:45:30:41:56:84:b3:6d:
                    6b:fd:c9:0e:03:19:c0:5f:7c:5c:3b:2d:2c:1e:67:
                    8e:58:ba:d0:ae:f7:59:ed:e0:1f:47:27:8e:4f:b4:
                    6f:0b:8b:04:92:d6:d4:ea:c9:37:a6:35:c9:a6:87:
                    ae:f6:b0:8a:27:98:e0:5f:87:de:84:47:2b:96:1c:
                    1a:d3:05:34:43:91:b4:47:49:e6:7a:58:fb:83:19:
                    e7:0a:bf:96:20:56:a0:df:c6:f6:82:44:d3:42:24:
                    29:17:71:74:51:0a:80:d4:8c:cb:1b:03:5d:36:29:
                    66:ac:c1:5c:a7:a2:d3:29:c5:79:2b:16:dd:e6:12:
                    66:50:86:ac:9f:a5:f0:af:f0:88:a3:fb:fd:5d:ab:
                    f5:87:5e:64:09:05:6d:b4:0f:a1:9f:2a:5f:2c:11:
                    9b:e6:3c:46:97:35:a0:23:a0:d2:76:86:eb:fc:4f:
                    b5:9b:83:e1:3f:89:b6:68:bc:31:55:b7:16:b6:e6:
                    ab:12:99:cc:1a:c2:35:02:d1:89:d9:3a:f1:de:0d:
                    6d:90:31:7a:de:12:83:b1:9f:a9:60:cd:81:73:15:
                    99:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DF:B0:8A:FB:F9:19:5C:13:40:E5:91:B4:19:AA:4F:78:B1:2E:9E
            X509v3 Authority Key Identifier:
                keyid:19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:d7:ec:03:42:f0:2e:84:65:64:10:9d:a3:57:5f:7e:e2:00:
         24:ec:7b:4a:f6:30:41:16:30:48:a5:de:a4:d6:56:07:fd:db:
         59:e5:8b:75:ee:00:32:8b:cb:49:ab:bd:cc:5f:87:db:ee:15:
         8d:5d:3f:6f:bf:5a:01:f8:6f:24:eb:f9:09:d2:e4:93:11:51:
         c8:9b:34:82:50:3f:6c:86:7b:6e:71:fb:36:2c:92:36:06:bb:
         4d:26:51:a8:7f:c8:12:42:ff:c4:e9:43:c2:fa:27:ac:9e:78:
         80:00:c4:02:7c:24:f1:de:9f:1f:9a:6b:b2:2a:0a:85:7e:48:
         b5:2e:a8:89:4a:62:a0:0e:23:bb:c2:66:c0:34:9e:ef:16:19:
         b9:1b:c5:28:9f:07:4b:66:af:12:56:75:12:ef:fa:12:88:2e:
         f2:f3:77:30:a2:21:12:cf:ee:1f:58:60:95:f5:4b:cb:c0:e7:
         bd:69:7e:0d:3c:a6:db:99:69:2c:90:a3:ae:d6:16:bd:c4:36:
         fb:68:3a:71:f5:53:11:a7:5e:f3:29:e5:dc:f3:99:f2:ca:f1:
         3d:10:77:76:53:e4:f8:32:41:e8:6f:27:b6:54:e8:78:01:a5:
         19:55:33:04:05:84:d3:4b:f6:c6:43:a6:39:83:72:b3:f5:2a:
         51:42:00:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:46:57 2025 by rpki-client