This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
File:                     gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft (raw, json)
Hash identifier:          jCghYwAgwm3GYsZhq5XDTXzJopcsEkilIiSoQG2Sno4=
Subject key identifier:   36:14:CA:CA:B5:E5:70:4D:68:50:F3:C0:C9:E5:10:67:D6:B1:74:38
Authority key identifier: 81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF
Certificate issuer:       /CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
Certificate serial:       019AF23FE59DF6673C5EE345FCB0DB1B769B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
Manifest number:          1766
Signing time:             Sat 06 Dec 2025 06:01:04 +0000
Manifest this update:     Sat 06 Dec 2025 06:01:04 +0000
Manifest next update:     Sun 07 Dec 2025 06:01:04 +0000
Files and hashes:         1: FG-bEioa4civ6jvoSnaUtHZPEQE.roa (hash: w4e7tpxeaBQHMoRYqhi0o1qJLopKx8fwD7s6iGDvqgY=)
                          2: aGlvUdVJOWbqaat4vglrkQH1tNo.roa (hash: svvIGknsbQhU6YBIsZkBO7bjTdjQ0GNK1yuIVKiea6E=)
                          3: eZ8arxnGDWk7xkVHJ1bRXWZ355M.roa (hash: AeIoI4f85DUeWbFvZ4SxFOX1IxHcOJjIFceKESNKiJo=)
                          4: gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl (hash: Cl6uc1pIFuVqjx1amhp1p3kbhlSU9dYjLS/bCL1TMrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:e5:9d:f6:67:3c:5e:e3:45:fc:b0:db:1b:76:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
        Validity
            Not Before: Dec  6 06:01:04 2025 GMT
            Not After : Dec  7 06:01:04 2025 GMT
        Subject: CN=3614cacab5e5704d6850f3c0c9e51067d6b17438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d2:95:5e:1c:2a:bb:d5:16:04:51:b4:8d:6b:
                    3c:fd:f9:ac:40:54:be:34:aa:4a:e8:96:c3:98:b7:
                    5e:8e:a0:43:70:fa:66:68:c3:0d:5b:21:10:3b:d9:
                    1b:7d:50:cc:7e:38:c7:54:e3:0b:bb:c6:64:e5:fa:
                    5b:f8:56:80:3b:75:64:20:58:79:6e:03:77:32:46:
                    cd:fb:cb:3e:88:36:0a:4b:32:5b:cf:cf:ca:a0:f5:
                    2a:b0:12:ec:ce:04:c9:2a:31:3a:86:fd:76:b5:c6:
                    21:aa:46:19:d8:b4:be:7e:09:3f:01:71:e8:9c:c4:
                    0e:a1:dc:4b:c9:ac:ac:5c:86:5f:86:c9:b8:12:a8:
                    11:df:38:b2:89:af:f0:07:6b:c8:17:f7:78:5d:89:
                    8d:d9:4a:13:91:ae:ae:c0:43:b8:11:db:de:a4:fb:
                    9c:62:fe:fe:02:1d:2c:55:76:7d:44:af:7d:68:d1:
                    26:8c:33:06:a6:e6:8f:82:46:2a:2a:35:c2:1f:f5:
                    b4:b4:96:09:d6:1e:1b:08:ce:62:a5:ad:59:49:c3:
                    f9:36:43:13:88:91:0b:a9:9b:8b:d8:17:a3:7b:49:
                    a7:8d:b8:07:78:9f:bb:4e:4a:87:1a:53:58:bb:9e:
                    60:d1:ba:68:64:24:93:88:11:0b:88:51:ef:77:d8:
                    cd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:14:CA:CA:B5:E5:70:4D:68:50:F3:C0:C9:E5:10:67:D6:B1:74:38
            X509v3 Authority Key Identifier:
                keyid:81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:52:e9:82:aa:94:4c:a6:5d:9f:56:e4:4f:d7:f9:2a:42:c4:
         e3:80:9a:9d:6b:49:61:fe:40:c8:bc:28:95:72:7d:96:10:21:
         31:ea:97:9e:b6:94:be:b6:4b:3d:a6:8d:c1:58:2e:f6:fe:0f:
         d7:eb:3e:84:fc:bc:35:49:1f:6f:04:79:64:fa:1b:b4:ee:b1:
         53:1b:0f:46:0c:ea:b6:b4:97:79:d8:d5:ef:7e:ec:d6:c5:88:
         f8:1f:81:b9:7c:40:09:00:94:b7:6e:c1:98:0a:e5:7b:2f:08:
         ea:08:b0:74:5a:b4:61:2a:7f:01:d9:ef:0d:9a:00:fb:f7:50:
         90:e6:de:cd:d1:e7:94:92:54:6e:fd:f6:94:e1:8d:1f:e4:c4:
         f2:f1:14:7d:3d:75:2e:93:af:60:e9:9a:88:c5:ff:06:9b:5c:
         fd:f0:c3:ba:fc:34:79:50:5e:55:e3:f3:a2:08:a8:54:4f:dc:
         07:30:8a:65:57:7b:34:a1:e1:03:a8:8c:88:e9:17:04:e6:54:
         8b:c0:ac:48:d0:a7:5b:96:11:ce:55:e4:ee:89:42:34:d6:94:
         67:2a:5e:dd:a8:7f:70:6a:db:06:e6:ff:fe:50:5d:46:4c:a9:
         44:83:46:1a:1f:6d:e6:8c:83:a6:6d:57:0f:6f:30:0c:f6:5e:
         70:69:6f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:33:31 2025 by rpki-client