This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft
File:                     GtXRdMu0aq-GVVuA4XczMbhwtWg.mft (raw, json)
Hash identifier:          vTdh24vB7TFXoxmZkL5p+k5toTCkhNE1HrnXE7g0ryA=
Subject key identifier:   90:B6:A6:2B:1D:DA:D2:09:48:2F:6E:53:FF:3C:D0:76:44:5F:AD:16
Authority key identifier: 1A:D5:D1:74:CB:B4:6A:AF:86:55:5B:80:E1:77:33:31:B8:70:B5:68
Certificate issuer:       /CN=1ad5d174cbb46aaf86555b80e1773331b870b568
Certificate serial:       019AF2097533D1419A8CF4FBFAEFBAC1CCD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft
Manifest number:          061C
Signing time:             Sat 06 Dec 2025 05:01:37 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:37 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:37 +0000
Files and hashes:         1: 9dcg4kop7SgWnE6_RqxuTw6E4S0.roa (hash: 0Gyw3aRec61kP8ssDusbhrk3Tfc+FxYebdPIc+4lPH0=)
                          2: BCx9uHR447EqnUAT6LDXDmc-U64.roa (hash: uKePdL/bKCVHy8Q2jDMnzQQFWnYFjJHWmlJeT5g86S8=)
                          3: GtXRdMu0aq-GVVuA4XczMbhwtWg.crl (hash: PeZkWj8DBcQYvDRhgdahtIFsIJYLBypz+GboMzSh8N4=)
                          4: XUhnIv1VyzEH-O2IlJPEOJmVv7s.roa (hash: ia3ApPA9xBWk3etwJmYP71gyRoYwwrPnhqVB0ZSnJZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:75:33:d1:41:9a:8c:f4:fb:fa:ef:ba:c1:cc:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ad5d174cbb46aaf86555b80e1773331b870b568
        Validity
            Not Before: Dec  6 05:01:37 2025 GMT
            Not After : Dec  7 05:01:37 2025 GMT
        Subject: CN=90b6a62b1ddad209482f6e53ff3cd076445fad16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e8:e2:a5:05:f6:31:c8:5a:f7:3c:17:fd:81:
                    a2:86:42:27:c4:37:c9:2d:dd:8f:09:60:77:7f:62:
                    d8:17:96:02:38:bf:93:fd:8b:d9:9e:e8:99:de:63:
                    b1:04:69:4b:a0:29:67:e9:86:7e:bf:f6:f3:8b:c3:
                    f7:e0:37:c5:04:60:c8:14:f3:9f:2c:e6:e5:85:a3:
                    a0:7d:24:9d:b5:0f:d7:b3:b4:a7:d8:6f:5c:7f:5e:
                    68:c4:5b:98:5d:e4:ab:fb:4c:29:4d:08:de:c2:65:
                    2a:8a:b7:eb:f8:e6:99:f2:26:ef:78:9f:12:db:f1:
                    b2:11:3a:25:aa:60:4c:df:1c:6d:e0:3b:8d:f4:8a:
                    70:ce:9a:3f:8f:d0:c9:d3:ac:9b:27:d1:28:17:80:
                    00:3d:11:f8:14:0f:b1:51:f1:b9:55:9b:41:c6:c2:
                    47:9f:52:82:29:fb:d0:70:21:b8:c5:85:43:0a:82:
                    43:6b:b3:c0:0c:9e:f9:15:ff:20:c5:1c:17:81:f3:
                    20:fa:6c:d0:02:58:5a:1b:65:58:ca:8f:67:2d:e1:
                    2a:6d:83:31:f2:fd:0f:fc:a4:04:fb:e3:5a:0f:a8:
                    bd:af:60:5b:c3:2e:27:1f:b3:c1:23:8f:de:99:6f:
                    98:fd:1a:2b:1c:72:33:01:21:dc:f7:58:65:7e:7b:
                    da:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B6:A6:2B:1D:DA:D2:09:48:2F:6E:53:FF:3C:D0:76:44:5F:AD:16
            X509v3 Authority Key Identifier:
                keyid:1A:D5:D1:74:CB:B4:6A:AF:86:55:5B:80:E1:77:33:31:B8:70:B5:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:eb:d7:c2:23:11:b2:35:fc:2c:31:1b:57:a8:2f:d5:db:02:
         eb:0a:1a:3a:f1:bb:0b:4a:33:a7:32:20:cd:be:21:26:12:a4:
         06:c3:cf:95:ff:75:2d:87:6b:4d:a9:18:b5:60:fd:36:cf:88:
         5a:6c:aa:76:60:21:a7:d1:74:4f:a6:7b:d4:fb:69:12:de:91:
         01:c9:af:48:0c:99:47:72:e1:c1:34:8d:d0:06:81:b0:62:77:
         21:61:06:ee:a0:65:eb:86:c2:7e:be:fe:70:b2:35:51:32:15:
         a2:14:bc:82:0d:8b:48:c5:04:0b:a5:36:5f:8e:ac:15:c4:6e:
         9c:bf:9b:a1:f7:95:d5:c7:8a:85:ca:67:d1:0e:b3:e9:c5:be:
         73:e2:b7:13:86:70:71:a0:29:65:96:83:68:0e:91:89:e3:c8:
         eb:fe:a8:56:56:b4:a3:85:a3:76:3f:49:2c:bb:0b:4d:9b:79:
         d7:81:ac:85:64:b0:a5:6c:ea:b1:4e:05:6c:18:01:27:a4:8e:
         cd:39:16:43:9e:7c:54:09:01:a0:4b:e1:a3:56:09:26:4c:a5:
         93:e9:c2:9b:f6:9a:d0:d7:2b:60:4c:dd:cd:77:16:2d:0c:7e:
         90:7a:1f:1b:21:65:7e:26:e9:16:e4:1d:58:28:6d:31:eb:ac:
         50:19:0f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:21:57 2025 by rpki-client