This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
File:                     GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json)
Hash identifier:          lYQH2foCsFQmWj+pySrHNlpXB27JXdGtLjlnA35BAhU=
Subject key identifier:   10:CC:58:AC:09:54:23:88:8D:D6:5E:24:B8:B8:F4:C9:AF:CF:07:EA
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Certificate issuer:       /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial:       019AF12CDE8B3503C11CE71E5CB11BB804BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
Manifest number:          0984
Signing time:             Sat 06 Dec 2025 01:00:40 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:40 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:40 +0000
Files and hashes:         1: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: zo85MhZ3QCwQvAGt4/NnYlFV5ta0FVD6b66ftBeE67Q=)
                          2: RO9l6hoPRiEk5kvu-1wGIx3JVQs.roa (hash: z3IHW9wPnoAAyV5Yp5JV/XIyxcaRpjPHnzXPpTc3PGc=)
                          3: zPmRtHrWAHHMjTbZqQxb_k1QEE0.roa (hash: b0+r/Py1tsQMqZ9+iwYrxYKeaOWfr9BHfO+bAPyD5ME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2c:de:8b:35:03:c1:1c:e7:1e:5c:b1:1b:b8:04:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
        Validity
            Not Before: Dec  6 01:00:40 2025 GMT
            Not After : Dec  7 01:00:40 2025 GMT
        Subject: CN=10cc58ac095423888dd65e24b8b8f4c9afcf07ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7a:05:7a:1b:ef:b0:f2:a5:cb:c8:80:21:a2:
                    a8:0c:ab:7b:30:bf:da:c1:e3:8b:c9:07:4f:7e:ec:
                    0d:1b:f0:f6:f3:a8:6e:9a:04:ee:47:c6:e2:1c:87:
                    fe:f1:a4:b2:ff:b2:fb:c9:b0:a9:2e:cb:4e:6a:ec:
                    3d:a6:8f:30:92:4d:22:4b:f1:1e:ac:8b:07:84:b1:
                    c7:ba:d7:8a:59:82:b2:4c:05:01:7c:b7:9e:4e:2a:
                    6f:70:f1:8c:eb:c0:47:08:da:0a:90:a8:60:41:8c:
                    99:7b:13:c0:dd:0f:a2:d1:df:45:22:5d:77:e4:29:
                    d9:7f:78:81:b2:5d:df:6a:26:61:7d:4b:ec:d4:8e:
                    38:33:85:67:32:bc:13:86:09:be:42:a9:1e:14:ad:
                    b0:2b:60:a9:7a:a6:f1:83:b7:2e:fa:af:bf:fe:83:
                    ce:7b:19:a4:7d:c6:82:80:c2:04:55:27:62:05:19:
                    14:04:46:c3:5b:ee:c5:d6:d4:05:be:36:33:1d:21:
                    75:54:18:2a:5f:96:75:10:01:51:9d:e0:cf:ca:fb:
                    96:56:ca:e6:cd:e1:3b:73:81:be:0a:5e:9b:3b:e2:
                    a2:2f:7c:cb:11:a8:50:55:c8:6d:9a:c6:bf:d6:15:
                    67:90:a2:aa:95:5a:b8:b6:aa:f0:df:6b:36:49:a9:
                    25:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CC:58:AC:09:54:23:88:8D:D6:5E:24:B8:B8:F4:C9:AF:CF:07:EA
            X509v3 Authority Key Identifier:
                keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ac:6b:31:ea:c0:bc:14:6b:d0:60:d7:04:f2:1f:ef:b9:35:
         aa:64:03:04:25:32:b4:78:d7:25:bb:99:86:72:23:f8:8a:dd:
         b8:43:50:16:f4:b0:8a:29:f1:a7:bb:54:42:22:ec:76:3e:37:
         50:47:b9:39:85:3a:55:82:a1:7c:9f:37:ab:20:8e:b4:9b:59:
         15:c5:c5:7f:f0:d9:ba:98:68:d7:bb:db:8b:79:5b:d9:f3:b6:
         01:52:84:bd:2e:3c:48:ef:eb:b3:6d:0b:b9:2d:c4:51:34:12:
         3c:e7:da:a2:6f:da:8d:32:7c:1e:7e:05:bf:82:c7:cb:36:93:
         e7:70:b3:5a:44:00:56:67:55:04:63:ff:1e:10:36:e7:54:a6:
         d1:97:3e:e5:a5:50:ce:53:9a:24:6a:2d:ec:c4:a5:7a:9c:53:
         24:40:77:ea:97:70:9c:c1:c6:5a:87:6f:62:98:99:0b:f1:bb:
         c0:1b:86:6c:f7:80:3d:79:9d:ab:70:fb:05:25:6c:bb:3b:b4:
         2f:2d:5c:83:76:0b:8e:49:92:3a:a1:98:37:e0:10:d4:cd:19:
         7a:68:66:e9:e2:84:32:57:b5:1c:d6:5c:4c:f8:3f:87:b6:e1:
         e3:03:e0:84:57:cf:ea:76:8c:05:4d:e2:07:e2:7e:dd:b6:3e:
         7a:ea:ba:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLN6LNQPBHOceXLEbuAS8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NWEyZjY3ZDI0NWNiYTk1MThiMDE3MDYxYTcxNjkyZWU3
OWU3ZmYwHhcNMjUxMjA2MDEwMDQwWhcNMjUxMjA3MDEwMDQwWjAzMTEwLwYDVQQD
EygxMGNjNThhYzA5NTQyMzg4OGRkNjVlMjRiOGI4ZjRjOWFmY2YwN2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHoFehvvsPKly8iAIaKoDKt7ML/a
weOLyQdPfuwNG/D286humgTuR8biHIf+8aSy/7L7ybCpLstOauw9po8wkk0iS/Ee
rIsHhLHHuteKWYKyTAUBfLeeTipvcPGM68BHCNoKkKhgQYyZexPA3Q+i0d9FIl13
5CnZf3iBsl3faiZhfUvs1I44M4VnMrwThgm+QqkeFK2wK2Cpeqbxg7cu+q+//oPO
exmkfcaCgMIEVSdiBRkUBEbDW+7F1tQFvjYzHSF1VBgqX5Z1EAFRneDPyvuWVsrm
zeE7c4G+Cl6bO+KiL3zLEahQVchtmsa/1hVnkKKqlVq4tqrw32s2Sakl+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDMWKwJVCOIjdZeJLi49MmvzwfqMB8GA1UdIwQY
MBaAFBhaL2fSRcupUYsBcGGnFpLueef/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kNTU5ODgtNDJkMi00MjA2LTk1YTkt
YmIwMThjZmJlYWEyLzEvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9kNTU5ODgtNDJkMi00MjA2LTk1YTktYmIwMThjZmJlYWEy
LzEvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPaxrMerA
vBRr0GDXBPIf77k1qmQDBCUytHjXJbuZhnIj+IrduENQFvSwiinxp7tUQiLsdj43
UEe5OYU6VYKhfJ83qyCOtJtZFcXFf/DZupho17vbi3lb2fO2AVKEvS48SO/rs20L
uS3EUTQSPOfaom/ajTJ8Hn4Fv4LHyzaT53CzWkQAVmdVBGP/HhA251Sm0Zc+5aVQ
zlOaJGot7MSlepxTJEB36pdwnMHGWodvYpiZC/G7wBuGbPeAPXmdq3D7BSVsuzu0
Ly1cg3YLjkmSOqGYN+AQ1M0Zemhm6eKEMle1HNZcTPg/h7bh4wPghFfP6naMBU3i
B+J+3bY+euq6Pw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:08:37 2025 by rpki-client