This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
File:                     GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft (raw, json)
Hash identifier:          P/4aeT8t0GegqwIJBDccAo6Lqf48GodewFhItHQONSg=
Subject key identifier:   83:58:06:76:74:89:97:F1:17:A0:04:9E:59:D0:5D:0B:8E:9E:29:F1
Authority key identifier: 18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71
Certificate issuer:       /CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
Certificate serial:       019AF31BDF5C7F1B3C1BE5C87717456B6433
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
Manifest number:          1768
Signing time:             Sat 06 Dec 2025 10:01:21 +0000
Manifest this update:     Sat 06 Dec 2025 10:01:21 +0000
Manifest next update:     Sun 07 Dec 2025 10:01:21 +0000
Files and hashes:         1: ENddU71AWsbfb-qIFVaxmAFw8qU.roa (hash: XIdLWvH5+lzPfcvEbUgIrNoDUrBQA7L4fLl6rSwliqY=)
                          2: G7KAYOVH38LzKR-IdVTjVu7lIf8.roa (hash: rqzGBQKFeB6ICiFMYesDYx+/XfxqjQHtzlizZQdtLiE=)
                          3: GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl (hash: 78ivhbPbJ6kt1PhEmvSDeig1Fv2t/jIcCB32VRO5Q9E=)
                          4: o7DFQSNSbtxlgxW6FLch62D8QIA.roa (hash: OW5TPqzlu/5OlPd3vdKxLAlylVm0d636/VsxyEnIicU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:df:5c:7f:1b:3c:1b:e5:c8:77:17:45:6b:64:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
        Validity
            Not Before: Dec  6 10:01:21 2025 GMT
            Not After : Dec  7 10:01:21 2025 GMT
        Subject: CN=83580676748997f117a0049e59d05d0b8e9e29f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:08:bc:48:53:f6:ee:d6:16:e9:11:cf:12:30:
                    f8:ad:4c:37:9d:3a:46:c6:f1:49:49:58:bd:0e:d9:
                    d2:25:49:8b:a7:90:b9:43:06:09:1c:c0:40:a6:9c:
                    04:3a:89:57:c2:cb:e4:ef:f0:bb:f8:80:97:34:36:
                    84:0b:80:c0:fe:0f:7c:da:2a:4f:d2:15:8d:49:79:
                    13:49:68:00:56:45:73:85:af:71:48:bb:06:f2:a1:
                    c8:35:7b:0c:28:be:94:77:ca:39:fa:c4:9d:3d:bf:
                    f3:71:a3:5f:8c:ab:f4:d4:8c:9c:3c:0d:fa:b7:56:
                    5e:a6:e8:ab:0d:12:3a:73:17:f5:91:32:67:72:dd:
                    98:77:35:02:b0:76:81:74:78:24:87:80:3c:28:49:
                    07:42:a1:19:6c:8d:0f:db:2b:43:6a:ea:bc:5f:f0:
                    f0:b2:59:20:38:a2:77:ff:b5:5c:f4:d4:2c:e3:1e:
                    27:a2:54:ed:8f:d7:df:6e:d8:2f:76:df:d3:7c:6f:
                    fe:c9:61:55:f6:79:85:8c:e3:66:a4:36:f0:57:e0:
                    fd:e2:bd:68:88:10:f0:7a:45:2c:99:7a:ae:5e:79:
                    1b:18:04:72:4b:ef:d9:44:99:3f:f0:00:56:c5:a2:
                    fa:b4:fd:20:33:7c:ff:a0:93:2b:f6:41:4a:18:dc:
                    95:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:58:06:76:74:89:97:F1:17:A0:04:9E:59:D0:5D:0B:8E:9E:29:F1
            X509v3 Authority Key Identifier:
                keyid:18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d6:6d:22:50:b3:e4:07:b5:7f:90:ac:ba:04:4e:04:42:7c:
         52:85:44:bb:9e:4d:e9:e6:57:2f:53:93:d8:7a:ad:a3:e7:01:
         3b:2e:13:90:88:0f:1e:61:5f:60:18:f9:ac:75:5a:0e:52:2c:
         06:9d:95:83:b8:ea:16:02:2e:43:46:cf:e4:5d:7d:5a:e2:17:
         29:75:20:56:14:e5:f8:6e:ab:1b:87:ec:d7:db:15:a2:c2:74:
         cb:e3:fa:53:30:4a:dd:30:0d:b6:9b:a0:f2:05:2a:53:42:6d:
         46:c4:79:7a:2d:2e:65:04:18:07:a7:00:89:b7:59:51:96:aa:
         01:2d:0d:c8:97:be:bc:47:f8:ec:89:b1:92:91:36:18:1d:79:
         6b:26:05:b6:ef:3f:b3:7d:a3:52:98:f5:35:68:1e:9e:91:cb:
         62:bd:df:38:f3:ea:a4:fb:20:56:51:31:ca:88:72:9f:a9:23:
         44:69:f8:aa:a2:c9:33:d0:77:8d:fb:45:a6:90:6a:56:57:db:
         a3:a1:d9:f9:6d:52:59:5e:2c:c4:fb:4c:fc:bb:39:bd:35:55:
         1c:2a:58:8a:52:cb:fe:f1:cc:b8:31:28:82:43:7e:b0:31:91:
         48:46:fd:87:79:9b:3f:01:28:c4:0f:a5:80:62:8c:44:bd:76:
         bc:dc:79:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:35:33 2025 by rpki-client