This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
File:                     gU7b0ZY0y7kaDS2v11nUyafne3o.mft (raw, json)
Hash identifier:          JpqNB0FITo+upUM+Ay7RShed7S/Auz7ytWHRtCM2xC8=
Subject key identifier:   F6:4C:D8:86:4A:6B:44:FD:07:20:4C:D1:74:77:E5:FE:08:A3:E9:A3
Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
Certificate issuer:       /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Certificate serial:       019B2E1D6F3C33086D4C8D78620EF23B21A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
Manifest number:          1783
Signing time:             Wed 17 Dec 2025 21:00:39 +0000
Manifest this update:     Wed 17 Dec 2025 21:00:39 +0000
Manifest next update:     Thu 18 Dec 2025 21:00:39 +0000
Files and hashes:         1: _ZGs7yyYUfcWFHaeoN_irFYY-Fs.roa (hash: k/ZQQ+Kv/qHUrbi6eDGukQ6+rynVgaxf2EU7N8rlEaQ=)
                          2: gU7b0ZY0y7kaDS2v11nUyafne3o.crl (hash: GRug93qFWzZtPQqPo5VByWXOBulkGzQ6S8soNF+iOm0=)
                          3: xpTRCuHlYWLPipg1pf1wuJHDIPg.roa (hash: 8yVx7sKih/ir7FZHTNGaky/UBkdstIszyQkTRTd/9nQ=)
                          4: ywM-ydmbzESoETxNsRnDQ6bbYxg.roa (hash: GmNC6UbYgSd9tbGR+GgvLCmczbY/RBGea7VtxVomphs=)
                          5: zticNdKOcKpGZ7y9nSwo2z1Ata4.roa (hash: 8+4soy6gmx5EG7p1nRpzUiPyWHyd7/QxOctDatWj2cE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 19:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2e:1d:6f:3c:33:08:6d:4c:8d:78:62:0e:f2:3b:21:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
        Validity
            Not Before: Dec 17 21:00:39 2025 GMT
            Not After : Dec 18 21:00:39 2025 GMT
        Subject: CN=f64cd8864a6b44fd07204cd17477e5fe08a3e9a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0c:e8:6c:44:89:3b:89:e3:7c:c0:2c:5f:f4:
                    70:d4:d6:96:4d:e2:3d:45:d0:35:d8:8c:b7:79:97:
                    86:df:f6:c7:c4:59:be:f4:eb:fb:6f:cb:f1:a1:1d:
                    30:19:55:00:56:4b:9b:93:07:95:c4:81:fc:58:bf:
                    3e:72:4f:dd:c9:cb:d5:ab:87:47:e3:ee:8c:e7:ea:
                    40:23:bb:35:30:37:46:59:96:c6:f0:4c:86:f0:61:
                    f3:a0:1d:10:71:b2:d5:b6:3a:81:c0:9e:ec:81:7d:
                    49:1c:7d:72:2f:2c:78:fe:3a:58:89:b4:ba:85:2d:
                    eb:bf:a8:4d:79:6b:e4:71:59:87:0f:41:4d:e3:dc:
                    05:21:6a:a6:73:76:09:2e:15:4b:bf:ec:33:35:57:
                    cf:76:05:eb:b6:8f:0b:d4:ad:b3:29:23:f5:3b:f3:
                    db:8f:4e:27:49:95:ca:55:50:ee:f3:30:f0:b4:2f:
                    48:da:96:e0:a3:da:12:d9:db:65:0d:02:31:ff:38:
                    e3:51:f8:f3:e0:81:c0:9b:cd:74:38:ad:02:43:3e:
                    f0:02:ee:d9:fa:6b:e8:d1:9b:bf:6c:2e:51:36:62:
                    91:df:32:dd:f9:db:a8:92:95:af:46:c1:d0:22:c2:
                    af:1e:7c:8f:94:85:a8:17:f2:77:8e:6f:c4:50:a5:
                    65:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4C:D8:86:4A:6B:44:FD:07:20:4C:D1:74:77:E5:FE:08:A3:E9:A3
            X509v3 Authority Key Identifier:
                keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:0e:ed:43:10:96:bf:74:fe:80:83:d7:02:2e:29:8c:e2:75:
         99:1d:5e:ef:fd:ee:6d:c7:5e:41:91:6e:d7:30:28:a8:f9:ed:
         46:ab:d9:df:e4:9c:3d:a2:9f:14:d6:f5:ab:01:28:0b:50:5a:
         89:bb:bc:e1:91:f7:ab:57:7e:09:34:6a:1f:da:7b:af:96:40:
         27:69:f3:a5:5e:c1:75:a2:7a:1a:88:b6:a4:33:43:11:8c:9f:
         74:d6:b9:e0:c0:50:d8:0e:c2:20:78:b7:31:e1:71:72:90:e7:
         4f:9e:2f:0e:db:dc:71:41:04:45:71:9c:66:62:60:bd:88:0a:
         fd:95:17:e5:f8:5f:5f:de:4f:32:8d:a7:75:62:1f:cb:ba:5e:
         27:a4:f1:99:40:27:ce:ff:4f:51:98:d3:45:f5:9d:78:56:5c:
         45:8b:3a:27:2f:26:18:56:ee:96:67:5f:d1:de:9c:7b:56:1b:
         7d:f9:03:c1:23:87:eb:16:19:2d:bd:a9:43:b4:96:74:83:cc:
         ed:98:60:63:6b:ec:50:4c:c1:57:0e:8f:4c:b5:b3:b4:f2:f2:
         d4:d4:a7:00:e0:d4:6e:7f:0a:71:bc:90:3d:fe:f4:82:f7:09:
         4a:69:f2:b9:88:94:9a:30:00:2b:a7:e0:9a:59:67:01:35:b9:
         ec:82:5e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 05:48:18 2025 by rpki-client