This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
File:                     Gk-AAcMMrFRuP5IQO0sScy38v1I.mft (raw, json)
Hash identifier:          mQJe+UtUxWoqOVF5OBNNoJc6cxjuMdStiHMf0pqjLZQ=
Subject key identifier:   7E:F5:9E:6C:09:B1:40:0F:C9:2D:E1:93:B6:8E:45:2B:D7:91:FA:FB
Authority key identifier: 1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
Certificate issuer:       /CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Certificate serial:       019AF3C0BC603D07AB73607D73EB4C8BAA10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 13:01:25 +0000
Manifest this update:     Sat 06 Dec 2025 13:01:25 +0000
Manifest next update:     Sun 07 Dec 2025 13:01:25 +0000
Files and hashes:         1: 03PqHmjkj4TD2ylDKAOumX_8ZTA.roa (hash: x+gVojJiPW6JgGHksggk6Pxvk6Hei1FVA2Qg8c4io0A=)
                          2: F9dWkDI-kpGgHo1RGxktanl_gRQ.roa (hash: BuoIxKvYOd7Wk6s+uxgqf+pVlc2a+8mJGV3BltAm2us=)
                          3: Gk-AAcMMrFRuP5IQO0sScy38v1I.crl (hash: ZnvkvgFjy2TLr74bzQ5Or0VXZgt2r013IAuZCWg57cI=)
                          4: eWcWfNZ-EfWW-NGvXQCC85ntpH8.roa (hash: JnQ17QGfxQtAemBJMFLXpPFmY/ueJsW7rAduSoORn4I=)
                          5: qa59xb1800lClBGKgPJD3m5Rw8s.roa (hash: g552CxuAT1A0kuubtT8ih3j4BuCostjRts289tICv1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:c0:bc:60:3d:07:ab:73:60:7d:73:eb:4c:8b:aa:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
        Validity
            Not Before: Dec  6 13:01:25 2025 GMT
            Not After : Dec  7 13:01:25 2025 GMT
        Subject: CN=7ef59e6c09b1400fc92de193b68e452bd791fafb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d3:52:bb:76:a2:a1:81:29:4a:99:85:3c:77:
                    04:cc:d4:64:fa:90:3d:ff:56:ae:eb:17:f9:28:2b:
                    bc:0f:72:fe:6b:89:d0:37:53:0e:e2:df:a6:a4:36:
                    1b:89:18:f7:a4:d9:2f:61:a1:99:fa:26:ab:30:44:
                    e0:bb:ba:6a:d4:83:f9:a8:86:b9:8f:56:49:54:22:
                    cf:73:4b:41:6f:c4:ea:a7:29:06:43:21:0b:56:68:
                    87:b7:ba:ec:1f:29:bc:7a:25:50:6e:c1:ed:57:1b:
                    50:c5:fb:87:c9:e3:4a:33:2d:cc:65:bb:2f:a4:79:
                    23:77:7e:48:d8:b9:68:f6:f5:80:0b:96:c6:00:c6:
                    22:00:91:d8:1a:e3:91:55:98:6d:7e:0c:68:5d:18:
                    8b:63:41:48:ef:cb:e9:b6:ac:8c:51:2f:9f:6a:b1:
                    ef:fd:55:87:72:1b:73:e7:63:b8:20:5e:58:ae:b7:
                    6e:d5:3b:a6:9a:98:94:4f:14:c8:70:66:5f:71:7a:
                    3d:7b:1b:f5:26:4c:39:ff:21:d0:b6:e1:c5:20:93:
                    6b:d2:c8:6d:ac:a1:2e:3f:3a:0d:94:a8:cf:15:80:
                    bf:dc:50:d6:1e:6a:93:9b:e0:d8:da:ef:b7:a6:be:
                    3b:be:e0:73:c1:5c:e5:e0:d5:a1:57:91:f9:57:61:
                    a9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F5:9E:6C:09:B1:40:0F:C9:2D:E1:93:B6:8E:45:2B:D7:91:FA:FB
            X509v3 Authority Key Identifier:
                keyid:1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:9e:32:01:b5:e6:68:96:68:0b:1a:50:1e:ca:de:13:91:29:
         ae:95:d9:da:fc:a6:7f:66:5f:fe:ab:80:a4:b6:50:b5:e7:4e:
         55:df:f3:41:63:e9:b8:22:fd:1d:48:7f:02:6c:81:1c:48:81:
         6f:ab:31:64:1a:ae:3f:2d:09:30:cd:bd:18:01:c2:d3:ce:bf:
         67:f1:3e:0b:c1:c3:f1:48:13:92:b0:66:23:94:6d:94:4c:be:
         ab:d7:f8:dd:5a:c4:b2:e9:f8:a8:fc:59:fe:90:31:14:07:11:
         65:5c:9d:4a:51:cc:31:cd:95:64:19:68:e8:b7:d1:e0:80:db:
         93:dd:c3:75:75:95:6e:61:57:1c:7d:84:7a:3b:8b:66:80:ef:
         5a:c0:c4:32:9f:7f:82:dc:28:f6:a0:58:27:cf:7b:40:b4:8a:
         50:ce:c6:7f:e2:10:55:02:d4:62:3f:22:67:71:eb:ad:65:69:
         a9:c8:bb:60:9f:18:7b:af:0d:58:d7:45:22:46:b3:96:d6:c2:
         8c:b1:37:c1:6e:c7:a5:5e:cc:48:fb:0a:9b:b7:b2:ee:b2:58:
         31:9f:17:ff:d8:4c:39:ff:75:dd:bf:11:e5:5c:2b:73:aa:c4:
         da:7c:e7:8f:27:97:e2:4b:ab:37:d4:42:47:c4:01:e3:66:a2:
         ac:d8:ad:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:53:36 2025 by rpki-client