This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
File:                     gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft (raw, json)
Hash identifier:          3xvKF9MX/L+vq4fuTD+YX/t/ytievJfn21VP+2suv9U=
Subject key identifier:   CE:AB:47:CC:7C:F0:92:47:52:22:EB:20:BF:18:B3:A0:75:F1:A7:25
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Certificate issuer:       /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial:       019AF2AD569480C154B0361BB98C9D5C08F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
Manifest number:          17F5
Signing time:             Sat 06 Dec 2025 08:00:37 +0000
Manifest this update:     Sat 06 Dec 2025 08:00:37 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:37 +0000
Files and hashes:         1: TVTY8940R-JLK3g0bC-55INlCR4.roa (hash: G8fybb1dVxSY3d5NiOJGlSrI9zs27WohVNGxcPiP+KM=)
                          2: XVwZQRv1vz6JSSnd8P8GyNHVWKI.roa (hash: UKsEAKn0FU1wyu4cVCRnP9Y8nY4SlsAm5Omp7LeDq8o=)
                          3: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl (hash: MOXrwiiAqnSXD3QEREKkHyFm4R6Hj5Kx2GwED3Azo+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:56:94:80:c1:54:b0:36:1b:b9:8c:9d:5c:08:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
        Validity
            Not Before: Dec  6 08:00:37 2025 GMT
            Not After : Dec  7 08:00:37 2025 GMT
        Subject: CN=ceab47cc7cf092475222eb20bf18b3a075f1a725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:85:56:c7:9c:b3:c4:7e:d9:14:4a:45:05:c5:
                    d2:45:92:b9:ba:c8:56:f0:09:b5:88:a6:11:bf:90:
                    84:f2:23:76:5f:44:0e:c0:c8:16:e8:21:23:3a:e3:
                    f1:1f:03:f9:c2:34:a5:f1:30:1c:63:e4:79:86:76:
                    e8:ce:07:1f:d7:a9:31:65:12:a2:7c:20:c9:65:07:
                    ae:69:27:be:4c:34:7d:c2:2c:3c:0b:fc:5d:63:f4:
                    13:8e:21:32:bf:c9:42:fb:0b:71:62:c3:1a:b8:3a:
                    61:35:35:84:2f:52:f5:1a:6d:2c:e0:72:f4:d2:6b:
                    c8:29:57:a9:a2:a1:68:9f:88:45:87:c7:be:5c:bc:
                    71:8b:2b:57:06:2c:f8:5a:d4:6e:4e:75:4f:21:45:
                    e9:43:0b:3c:3f:ca:41:c5:ee:5f:23:ce:d3:81:f7:
                    7f:a8:bd:36:81:78:9a:18:9f:18:90:3e:03:4c:42:
                    1a:28:d0:6c:74:a9:84:dd:88:39:61:fb:ba:0e:dc:
                    27:86:da:e2:be:d0:37:7a:44:b9:eb:6d:ef:ee:0f:
                    6f:d9:6d:bf:0a:c7:50:5b:a0:93:05:b2:d7:ea:4b:
                    fe:95:64:7d:aa:ac:01:f6:b7:6a:22:63:5a:9d:12:
                    56:50:30:8b:72:a8:e0:67:f9:36:9f:3a:58:ec:07:
                    f8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AB:47:CC:7C:F0:92:47:52:22:EB:20:BF:18:B3:A0:75:F1:A7:25
            X509v3 Authority Key Identifier:
                keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:73:6d:49:16:5a:2a:00:62:1d:7d:2d:a8:e8:e7:69:a0:32:
         bc:0b:d8:c0:5a:8d:e7:b6:a0:24:57:2d:ca:39:d4:a6:80:2e:
         1f:b1:9c:16:4a:54:d5:6e:f0:da:09:08:34:6d:4b:32:1a:7a:
         0b:ba:8a:ad:ac:18:65:ed:26:ab:81:43:64:78:b3:52:03:a6:
         6a:73:5a:7e:2b:3f:9d:70:ac:f0:02:88:87:e1:86:f2:56:de:
         ef:3a:5e:03:8a:42:b3:83:c8:fa:7b:f4:86:24:f3:3d:58:ac:
         73:85:9f:a9:d1:b3:5b:c8:be:75:1b:d2:ae:2d:e2:ab:22:41:
         6b:d3:28:45:3c:bf:3b:49:c4:5c:45:ce:3e:45:7f:56:00:3d:
         2c:60:3f:84:d5:2d:a3:58:3a:99:ce:47:eb:ed:22:88:a7:24:
         73:35:d8:98:a8:62:ba:f8:b1:1c:8f:96:2a:31:7e:07:d7:eb:
         6c:ca:99:17:4f:4f:06:6a:e8:6f:de:cd:93:fe:19:d8:4c:04:
         d0:0f:d8:cd:21:bd:1f:a3:03:21:90:97:72:3b:5b:a7:b4:f7:
         e6:20:b0:cc:a8:8f:8d:06:18:57:c3:ec:8c:cb:ea:46:79:b5:
         23:bc:50:f8:1f:30:f2:0d:3c:8a:fb:e2:44:00:15:2e:00:97:
         36:37:39:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryrVaUgMFUsDYbuYydXAj5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2NhOWYxNWUxOTIxOTUzYTYyOGM4YWQyYWM0YmU5Nzdi
NmMzMDMwHhcNMjUxMjA2MDgwMDM3WhcNMjUxMjA3MDgwMDM3WjAzMTEwLwYDVQQD
EyhjZWFiNDdjYzdjZjA5MjQ3NTIyMmViMjBiZjE4YjNhMDc1ZjFhNzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroVWx5yzxH7ZFEpFBcXSRZK5ushW
8Am1iKYRv5CE8iN2X0QOwMgW6CEjOuPxHwP5wjSl8TAcY+R5hnbozgcf16kxZRKi
fCDJZQeuaSe+TDR9wiw8C/xdY/QTjiEyv8lC+wtxYsMauDphNTWEL1L1Gm0s4HL0
0mvIKVepoqFon4hFh8e+XLxxiytXBiz4WtRuTnVPIUXpQws8P8pBxe5fI87Tgfd/
qL02gXiaGJ8YkD4DTEIaKNBsdKmE3Yg5Yfu6DtwnhtrivtA3ekS5623v7g9v2W2/
CsdQW6CTBbLX6kv+lWR9qqwB9rdqImNanRJWUDCLcqjgZ/k2nzpY7Af4LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6rR8x88JJHUiLrIL8Ys6B18aclMB8GA1UdIwQY
MBaAFIHMqfFeGSGVOmKMitKsS+l3tsMDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUt
MjIwNmNjMmU2OTFjLzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUtMjIwNmNjMmU2OTFj
LzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXNtSRZa
KgBiHX0tqOjnaaAyvAvYwFqN57agJFctyjnUpoAuH7GcFkpU1W7w2gkING1LMhp6
C7qKrawYZe0mq4FDZHizUgOmanNafis/nXCs8AKIh+GG8lbe7zpeA4pCs4PI+nv0
hiTzPVisc4WfqdGzW8i+dRvSri3iqyJBa9MoRTy/O0nEXEXOPkV/VgA9LGA/hNUt
o1g6mc5H6+0iiKckczXYmKhiuvixHI+WKjF+B9frbMqZF09PBmrob97Nk/4Z2EwE
0A/YzSG9H6MDIZCXcjtbp7T35iCwzKiPjQYYV8PsjMvqRnm1I7xQ+B8w8g08ivvi
RAAVLgCXNjc5WA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:22:04 2025 by rpki-client