This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
File:                     GftWrckHHV6f2itmlDi5K_hj5Y8.mft (raw, json)
Hash identifier:          t0U6ejcfEmAbGyL0ij49hXBdQeRZMbwFkiG9SKNQJ/0=
Subject key identifier:   49:38:F3:29:AA:12:C8:BB:F4:AF:28:8A:40:AA:AC:F3:90:91:9C:0D
Authority key identifier: 19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
Certificate issuer:       /CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Certificate serial:       019AF23FB933D84AD565ADF7FD7D76269209
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
Manifest number:          1278
Signing time:             Sat 06 Dec 2025 06:00:53 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:53 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:53 +0000
Files and hashes:         1: 97TEoE2zAQxZI3sREml1jxvx638.roa (hash: 88Edm2WqicmrATpjZjEgq8BI+OITrMBwRffegS2fN0U=)
                          2: GftWrckHHV6f2itmlDi5K_hj5Y8.crl (hash: B1S8tmPf4NKY8efTa1EpyKdLRQKihgV2ZHZSOKxABDo=)
                          3: q9SsxYbRIp9e4XDgj9J3VkZ0CgM.roa (hash: vHSPBUTKHvDa0CMaWz0/b1NLlD2hxXAs+Bnl2Vh/Iqc=)
                          4: ssy_2Rdm-NB6qlZB6S5XdjkNovk.roa (hash: M4nmdu5lLDUg1zn32w5JxWA1YF5KBgjR54KBKiRLUIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:b9:33:d8:4a:d5:65:ad:f7:fd:7d:76:26:92:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
        Validity
            Not Before: Dec  6 06:00:53 2025 GMT
            Not After : Dec  7 06:00:53 2025 GMT
        Subject: CN=4938f329aa12c8bbf4af288a40aaacf390919c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:46:bf:15:77:61:fb:f4:4c:a5:fd:77:dc:fc:
                    81:30:cc:9b:27:fb:d4:7b:8e:c8:69:2b:20:c6:49:
                    53:6c:48:5d:4c:b4:5d:16:0d:51:76:eb:ad:d5:74:
                    c4:77:d7:4f:60:a1:e2:e6:46:be:68:b8:ef:22:f0:
                    55:15:e7:55:57:af:a1:1e:6b:14:9f:b0:fa:1a:82:
                    a4:a0:ae:15:5f:bf:bd:3f:02:22:d0:f4:70:d3:7e:
                    e7:d2:6c:ff:22:8d:da:5b:02:2f:a5:b2:8d:94:8e:
                    44:cb:e5:80:63:5f:c4:0a:f7:68:a2:5d:73:5c:80:
                    76:2e:93:73:11:d6:41:62:96:fe:85:17:d3:12:bc:
                    83:88:5e:00:5e:58:5d:4c:8e:2b:89:f5:72:a1:14:
                    ed:3c:d5:77:cf:cc:a2:31:67:11:94:b3:af:a8:cd:
                    5e:f9:c4:e4:e5:15:f5:bb:b6:d4:40:98:74:5c:66:
                    3c:8a:44:e9:a9:90:fd:31:cf:a7:71:76:52:04:ba:
                    c5:6a:bb:d6:5d:5f:d0:ba:76:e2:af:9a:8c:5e:0c:
                    5d:da:21:cb:66:a5:e7:61:2e:47:e9:16:b2:25:26:
                    6e:53:2f:fb:c9:6a:99:e2:fb:3e:f4:d3:0b:17:6c:
                    a2:57:11:3d:f7:e2:52:8a:b6:31:2c:34:1e:94:01:
                    1d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:38:F3:29:AA:12:C8:BB:F4:AF:28:8A:40:AA:AC:F3:90:91:9C:0D
            X509v3 Authority Key Identifier:
                keyid:19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:da:ae:e9:f0:e3:b6:88:e6:72:86:3a:82:52:9b:bb:38:15:
         51:20:1c:13:a8:cf:82:78:57:6b:64:cb:60:4f:39:f2:23:9a:
         fd:5e:28:65:7f:b8:a5:bd:18:62:74:dc:de:2f:40:be:f8:1e:
         f0:cd:cf:bf:90:c1:82:c8:cb:54:c0:07:a6:3a:50:ab:b0:d8:
         f8:20:92:94:71:f3:ef:1c:c6:2f:9b:07:98:b6:1a:f3:f3:16:
         e8:7b:b4:31:db:99:06:38:b9:07:0a:00:36:80:d3:39:b5:cf:
         0a:45:d3:dd:15:90:b8:7b:b6:86:45:cc:99:6e:f0:db:ac:9a:
         2b:cd:0a:05:5d:28:a5:b5:13:fd:0d:9c:d5:56:86:bd:15:47:
         9a:29:0d:43:e3:07:1a:81:de:3c:7d:cb:8a:71:cc:44:7a:f1:
         7b:5c:80:c1:19:b2:12:65:d6:a5:f3:5e:c7:8e:75:8a:fa:9f:
         e7:b1:a5:59:03:0d:73:fc:cb:26:af:d0:73:17:c2:10:0b:c9:
         95:c7:7c:7e:ef:da:06:80:d4:11:2e:af:e3:3f:8e:9f:c5:92:
         8d:0b:9b:ba:74:38:3f:1a:b9:df:00:8e:2f:a8:e5:de:c3:e9:
         32:c4:56:8a:23:1c:b9:b4:a9:ea:50:2d:91:c2:47:3b:3e:1f:
         71:54:d9:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryP7kz2ErVZa33/X12JpIJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZmI1NmFkYzkwNzFkNWU5ZmRhMmI2Njk0MzhiOTJiZjg2
M2U1OGYwHhcNMjUxMjA2MDYwMDUzWhcNMjUxMjA3MDYwMDUzWjAzMTEwLwYDVQQD
Eyg0OTM4ZjMyOWFhMTJjOGJiZjRhZjI4OGE0MGFhYWNmMzkwOTE5YzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvka/FXdh+/RMpf133PyBMMybJ/vU
e47IaSsgxklTbEhdTLRdFg1Rduut1XTEd9dPYKHi5ka+aLjvIvBVFedVV6+hHmsU
n7D6GoKkoK4VX7+9PwIi0PRw037n0mz/Io3aWwIvpbKNlI5Ey+WAY1/ECvdool1z
XIB2LpNzEdZBYpb+hRfTEryDiF4AXlhdTI4rifVyoRTtPNV3z8yiMWcRlLOvqM1e
+cTk5RX1u7bUQJh0XGY8ikTpqZD9Mc+ncXZSBLrFarvWXV/Qunbir5qMXgxd2iHL
ZqXnYS5H6RayJSZuUy/7yWqZ4vs+9NMLF2yiVxE99+JSirYxLDQelAEddwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEk48ymqEsi79K8oikCqrPOQkZwNMB8GA1UdIwQY
MBaAFBn7Vq3JBx1en9orZpQ4uSv4Y+WPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2Z0V3Jja0hIVjZmMml0bWxEaTVLX2hqNVk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82MTgzOTktYzUzYi00Y2YyLTkzMGUt
NjNlZWJlMDMyNWVjLzEvR2Z0V3Jja0hIVjZmMml0bWxEaTVLX2hqNVk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82MTgzOTktYzUzYi00Y2YyLTkzMGUtNjNlZWJlMDMyNWVj
LzEvR2Z0V3Jja0hIVjZmMml0bWxEaTVLX2hqNVk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArNqu6fDj
tojmcoY6glKbuzgVUSAcE6jPgnhXa2TLYE858iOa/V4oZX+4pb0YYnTc3i9Avvge
8M3Pv5DBgsjLVMAHpjpQq7DY+CCSlHHz7xzGL5sHmLYa8/MW6Hu0MduZBji5BwoA
NoDTObXPCkXT3RWQuHu2hkXMmW7w26yaK80KBV0opbUT/Q2c1VaGvRVHmikNQ+MH
GoHePH3LinHMRHrxe1yAwRmyEmXWpfNex451ivqf57GlWQMNc/zLJq/QcxfCEAvJ
lcd8fu/aBoDUES6v4z+On8WSjQubunQ4Pxq53wCOL6jl3sPpMsRWiiMcubSp6lAt
kcJHOz4fcVTZxg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:09:41 2025 by rpki-client