This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File:                     G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier:          YsOrpiHlQmDfAZ2VLcHd7B9UrQ8FoTQTPqvLBEvUh2k=
Subject key identifier:   48:B9:F4:5E:78:2C:97:1D:F3:C1:01:29:05:39:33:A0:AF:30:2B:EF
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer:       /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial:       019AF12E34AC51D62685690FAF0FCAA19BC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 01:02:08 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:08 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:08 +0000
Files and hashes:         1: 2u65Jdfy1meP3-UzJxITH_HaB0I.roa (hash: GSn3vSNczK6ZpdwvGH948S/Jm3wgfMlxSG0nlQVl8dQ=)
                          2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: jZIT6YlQj0sC9xFpyiok8YIrR3QyBtMrqMNonnWgBSw=)
                          3: dnna3QdlDeomv7D_EwLJ_fnfivI.roa (hash: MOBcHLr5lX2FtBzfiXULYdThQj8Ixa9C5j2SRENdgnc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:34:ac:51:d6:26:85:69:0f:af:0f:ca:a1:9b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
        Validity
            Not Before: Dec  6 01:02:08 2025 GMT
            Not After : Dec  7 01:02:08 2025 GMT
        Subject: CN=48b9f45e782c971df3c10129053933a0af302bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8b:2d:07:0a:b9:88:97:2e:e5:0d:d2:24:c9:
                    3a:51:21:2b:ef:64:43:55:00:af:77:26:7a:7f:24:
                    b5:f7:e4:e9:4c:0c:2b:a6:fa:29:3a:e9:1f:ae:99:
                    9c:eb:a5:67:80:53:8d:1d:ee:2d:90:6a:2e:11:5f:
                    ea:04:6d:9b:4f:c5:42:0c:4d:03:23:20:2c:be:a0:
                    d7:a4:5b:5a:07:5c:45:e5:bc:bf:51:ed:3b:dc:3e:
                    d5:05:11:70:d5:aa:35:8f:e7:9a:30:56:51:b8:cc:
                    15:f2:07:62:fa:83:3e:ba:0e:27:e7:df:59:8b:1c:
                    fb:07:3a:82:e2:85:c7:94:64:11:c7:90:ab:34:96:
                    99:8a:73:c4:ef:4c:c5:fe:5b:a6:f5:f6:38:2b:cf:
                    00:4e:09:3c:9e:fa:16:f0:af:e8:fb:45:b9:cb:58:
                    7d:32:cc:58:1e:83:9d:61:66:ae:3d:c6:f4:2b:62:
                    0f:a0:fe:0e:6d:4f:85:d4:a6:4b:d6:e1:b4:cd:d6:
                    70:54:29:6f:2a:c4:55:ab:90:b5:a8:5f:7c:19:bc:
                    9f:79:03:ab:68:c7:fd:ad:9b:41:67:6e:46:12:82:
                    83:8b:bf:42:56:41:60:09:1c:f4:45:b2:cd:c2:17:
                    4c:b3:4b:ff:ca:05:ff:f6:05:61:f2:f1:33:8c:ff:
                    4d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B9:F4:5E:78:2C:97:1D:F3:C1:01:29:05:39:33:A0:AF:30:2B:EF
            X509v3 Authority Key Identifier:
                keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:72:79:09:56:bb:a1:78:8a:77:0c:c3:87:8e:df:4d:5f:bd:
         98:ba:84:ee:c4:31:6b:d2:19:3b:ef:1a:1e:81:32:90:5e:af:
         03:67:68:6c:a6:12:b4:32:bd:1c:ed:8a:83:b2:1f:da:f8:05:
         92:fb:55:e2:0a:ac:33:3b:5d:37:6e:91:7d:e0:8c:d7:12:6d:
         05:35:48:c7:20:aa:4a:fb:0e:3b:73:4e:3c:bc:ae:f1:16:9c:
         ec:e1:71:fe:38:00:59:2b:c7:3a:f8:34:c2:05:fa:c3:74:aa:
         8c:ac:10:d4:b5:57:ff:c9:2d:b8:1f:2a:4f:ad:26:d6:36:b5:
         a3:4a:81:6b:c0:1c:38:7e:17:cf:2a:56:28:18:5f:e8:a8:cf:
         1b:42:02:4d:55:70:3f:c9:56:d9:c3:3d:88:e5:b6:ed:f4:bc:
         e2:81:8a:4f:57:a8:b2:ee:9d:e5:e0:9d:30:34:7c:e0:af:c2:
         e5:4b:be:14:86:29:61:79:b9:91:38:ee:d7:2b:75:e1:34:20:
         9a:f2:32:c2:6c:fe:52:b9:3f:38:6b:f5:ff:5b:9e:05:37:7f:
         fd:57:58:1d:58:a9:85:88:43:f5:53:2d:e8:d3:4a:32:aa:84:
         36:b2:77:c7:60:30:db:8a:33:aa:44:5e:34:80:9d:29:86:88:
         27:d2:29:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:57:50 2025 by rpki-client