This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
File:                     gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft (raw, json)
Hash identifier:          vCJsFnL2iY6PaCCa/cTN4y3lulKBDeoW44RVJWiUFJA=
Subject key identifier:   95:20:63:EE:36:60:06:61:8A:0D:77:30:B5:09:0B:46:94:24:94:A4
Authority key identifier: 83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
Certificate issuer:       /CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Certificate serial:       019B3CB507DAAA0FABD09E319211AAF8F0AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
Manifest number:          1788
Signing time:             Sat 20 Dec 2025 17:00:55 +0000
Manifest this update:     Sat 20 Dec 2025 17:00:55 +0000
Manifest next update:     Sun 21 Dec 2025 17:00:55 +0000
Files and hashes:         1: Kn2L20HdTOIfu80Nn50DjBWA6Jo.roa (hash: t13d2OWM34SoyNogtqsGXCD1a9gIw5aEGwzH9T6/vCE=)
                          2: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl (hash: PwRWa0xw3upCL+76NVCbfivznm6Wo+Xuwv9y7CgeCjQ=)
                          3: kPyw78W3vAy4mQl3NXjpt1MepRc.roa (hash: u8KAvtGZKGr7dbs+3GKBT4RIYYyEwMSs07RwUnPLdS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:b5:07:da:aa:0f:ab:d0:9e:31:92:11:aa:f8:f0:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
        Validity
            Not Before: Dec 20 17:00:55 2025 GMT
            Not After : Dec 21 17:00:55 2025 GMT
        Subject: CN=952063ee366006618a0d7730b5090b46942494a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f3:6a:10:c6:eb:10:d9:45:49:d4:74:65:33:
                    20:6c:24:5d:ef:2d:af:c3:31:a1:cc:8d:dd:9e:04:
                    7a:29:70:ff:a6:ba:d3:be:e8:cf:97:51:1e:c4:17:
                    b9:e7:f9:c3:7d:43:68:8f:ca:ef:e8:9c:58:ac:ed:
                    b4:89:59:90:98:9d:9f:55:11:69:05:7d:ac:07:cd:
                    bd:d0:65:42:ce:27:9b:cd:58:5e:68:42:fc:98:b0:
                    67:c2:0d:c5:ab:fa:31:81:4e:96:72:c9:36:88:d9:
                    80:aa:82:81:ce:6f:d0:2a:c7:e2:a1:89:61:32:5c:
                    4c:5c:f2:f2:63:63:b1:e3:d6:d2:3a:cf:2d:22:06:
                    ad:15:ee:9c:c8:a7:bb:3e:01:14:84:ef:8f:b6:d1:
                    2a:be:e4:45:60:e5:c0:5d:96:40:60:01:6e:3b:46:
                    e5:61:a4:87:66:cc:ea:8b:04:c2:5d:81:f2:cc:da:
                    21:7a:7d:1e:c3:dd:88:41:59:87:3e:1f:80:8d:da:
                    26:6a:45:71:6f:21:c8:fd:bf:83:27:dd:fc:bc:e7:
                    48:7c:3f:13:4a:b4:59:1f:de:98:93:f6:fc:b1:90:
                    41:f9:ee:b0:67:72:8f:d4:d5:81:86:83:79:95:6a:
                    7c:d0:3d:34:a9:5d:2c:aa:7f:25:57:43:cb:c0:e4:
                    ee:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:20:63:EE:36:60:06:61:8A:0D:77:30:B5:09:0B:46:94:24:94:A4
            X509v3 Authority Key Identifier:
                keyid:83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:3c:73:b2:0b:87:eb:4d:16:8e:e4:f6:68:b2:7b:e4:67:aa:
         e0:4e:4c:9a:c7:1f:f8:d4:11:1b:01:d9:af:b2:6e:0f:55:70:
         54:77:00:95:8b:3b:9f:8a:ac:52:da:97:c5:ff:ad:40:64:56:
         55:40:16:c4:6a:0f:9e:ce:72:af:45:1c:47:20:72:fe:1f:09:
         6c:f9:2f:ba:81:67:5a:8f:cf:ed:f7:e6:f9:3d:f1:e0:1b:04:
         09:90:39:e9:6f:0c:58:26:21:d6:1f:16:0a:79:01:75:ad:6a:
         b2:80:f0:aa:cf:33:09:d6:77:15:b1:0e:8f:e9:40:01:ee:c9:
         c3:29:6a:75:0f:32:02:4c:f3:24:d0:ac:65:af:c1:16:55:14:
         6f:7b:61:02:98:5d:4e:82:67:8a:d9:1d:03:af:b9:4d:b0:98:
         e0:c4:ba:ef:ba:8c:37:d8:9e:98:97:86:60:20:9d:a9:59:0b:
         5e:6c:be:a9:94:00:b6:7b:35:f0:77:8e:90:2a:9d:33:48:e5:
         ba:68:73:0c:ca:39:03:20:95:36:1c:46:ff:f5:18:14:13:45:
         b2:00:ca:b5:a4:27:42:7e:e4:6e:d8:11:1d:10:1a:81:51:9a:
         57:31:14:e7:3a:cc:04:5f:ab:6d:8c:c0:31:4e:53:54:55:02:
         73:ac:90:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs8tQfaqg+r0J4xkhGq+PCvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMjNmNDlkNmNjNjUwY2Q2ZDY1NDgyMzQ4ZTFkNmQwYjhm
ZDdlYWEwHhcNMjUxMjIwMTcwMDU1WhcNMjUxMjIxMTcwMDU1WjAzMTEwLwYDVQQD
Eyg5NTIwNjNlZTM2NjAwNjYxOGEwZDc3MzBiNTA5MGI0Njk0MjQ5NGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPNqEMbrENlFSdR0ZTMgbCRd7y2v
wzGhzI3dngR6KXD/prrTvujPl1EexBe55/nDfUNoj8rv6JxYrO20iVmQmJ2fVRFp
BX2sB8290GVCziebzVheaEL8mLBnwg3Fq/oxgU6Wcsk2iNmAqoKBzm/QKsfioYlh
MlxMXPLyY2Ox49bSOs8tIgatFe6cyKe7PgEUhO+PttEqvuRFYOXAXZZAYAFuO0bl
YaSHZszqiwTCXYHyzNohen0ew92IQVmHPh+AjdomakVxbyHI/b+DJ938vOdIfD8T
SrRZH96Yk/b8sZBB+e6wZ3KP1NWBhoN5lWp80D00qV0sqn8lV0PLwOTuzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUgY+42YAZhig13MLUJC0aUJJSkMB8GA1UdIwQY
MBaAFIMj9J1sxlDNbWVII0jh1tC4/X6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3lQMG5XekdVTTF0WlVnalNPSFcwTGo5ZnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lNzNmMTYtNDVkMi00M2MxLWE0YWYt
NWNmOTE5NGQxNzAyLzEvZ3lQMG5XekdVTTF0WlVnalNPSFcwTGo5ZnFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lNzNmMTYtNDVkMi00M2MxLWE0YWYtNWNmOTE5NGQxNzAy
LzEvZ3lQMG5XekdVTTF0WlVnalNPSFcwTGo5ZnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoDxzsguH
600WjuT2aLJ75Geq4E5Mmscf+NQRGwHZr7JuD1VwVHcAlYs7n4qsUtqXxf+tQGRW
VUAWxGoPns5yr0UcRyBy/h8JbPkvuoFnWo/P7ffm+T3x4BsECZA56W8MWCYh1h8W
CnkBda1qsoDwqs8zCdZ3FbEOj+lAAe7JwylqdQ8yAkzzJNCsZa/BFlUUb3thAphd
ToJnitkdA6+5TbCY4MS677qMN9iemJeGYCCdqVkLXmy+qZQAtns18HeOkCqdM0jl
umhzDMo5AyCVNhxG//UYFBNFsgDKtaQnQn7kbtgRHRAagVGaVzEU5zrMBF+rbYzA
MU5TVFUCc6yQqg==
-----END CERTIFICATE-----
Generated at Sat Dec 20 20:32:06 2025 by rpki-client