This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
File:                     GpLjfcjPRWNLLNvPPxAFShxhFpc.mft (raw, json)
Hash identifier:          2i48nzSj6ReWqAlSizRmCIXkU/ChBIx5clPokIx5fm4=
Subject key identifier:   64:6B:69:CD:92:CF:22:94:94:DF:91:C5:35:06:4F:4D:87:E6:0B:05
Authority key identifier: 1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97
Certificate issuer:       /CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697
Certificate serial:       019B2E8B798AEE210879574B03250E242B1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
Manifest number:          1782
Signing time:             Wed 17 Dec 2025 23:00:51 +0000
Manifest this update:     Wed 17 Dec 2025 23:00:51 +0000
Manifest next update:     Thu 18 Dec 2025 23:00:51 +0000
Files and hashes:         1: GpLjfcjPRWNLLNvPPxAFShxhFpc.crl (hash: Yv7cQVTukD+VVVz39CWyis1DHC7V2W0/KEdR1ofzbq8=)
                          2: PgHBT14XbyMI_bDsD-5F89TwxvI.roa (hash: yY+dt31JYDSsLmacNs98NxKQjn/3/Xoq5ab4x7nUyV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 19:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2e:8b:79:8a:ee:21:08:79:57:4b:03:25:0e:24:2b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697
        Validity
            Not Before: Dec 17 23:00:51 2025 GMT
            Not After : Dec 18 23:00:51 2025 GMT
        Subject: CN=646b69cd92cf229494df91c535064f4d87e60b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:10:06:ca:f4:35:12:1e:2f:be:62:e9:6a:c2:
                    bf:fb:0b:60:e3:2b:ab:26:12:aa:ed:fd:78:61:88:
                    d8:2f:ac:a6:ad:d7:31:f1:31:cf:44:d1:dc:04:4c:
                    2d:3c:3d:a0:db:5d:f9:93:5e:f2:27:d8:a3:3b:06:
                    e7:56:ff:5c:78:32:35:9d:4e:0a:49:27:5e:ea:86:
                    3d:c1:95:08:61:1f:1f:a9:59:6c:13:d7:05:80:57:
                    f7:51:1a:f3:87:9b:00:93:91:13:df:c9:87:b7:0a:
                    d7:4c:d9:c0:4a:76:77:07:41:92:55:bf:5f:89:0b:
                    f0:71:12:4b:29:55:2a:e2:48:85:c0:40:e7:71:c1:
                    97:8f:b0:c5:79:5c:dd:ad:bb:53:64:c1:9c:cf:72:
                    4e:7f:a4:7a:8e:c5:48:cc:0a:e4:ac:92:e5:c9:8a:
                    eb:be:5e:8d:87:a5:40:19:b3:03:25:3d:03:e6:0d:
                    70:7e:d7:b4:65:2c:1c:2a:7d:a3:23:e2:9e:f2:2a:
                    a2:49:83:69:4e:a7:17:46:df:1c:c2:f0:81:2c:a7:
                    30:bb:51:9c:93:eb:4e:61:1e:82:49:d4:bf:59:0e:
                    dc:33:77:49:bc:b7:fd:3a:32:1c:43:64:30:2f:99:
                    6d:b3:10:7e:ed:ac:aa:e8:ef:55:38:11:06:18:10:
                    12:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6B:69:CD:92:CF:22:94:94:DF:91:C5:35:06:4F:4D:87:E6:0B:05
            X509v3 Authority Key Identifier:
                keyid:1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:3f:cd:7c:52:d5:ef:dc:24:68:a9:90:ae:4e:63:e9:9d:9c:
         2e:be:55:bd:36:29:7c:74:d2:2a:c3:e7:16:f2:79:7e:20:fe:
         48:19:e8:18:3f:25:cf:56:9b:a6:fd:96:44:ad:9e:c6:94:7b:
         06:00:f1:bb:c9:f0:ce:fd:c9:16:aa:2f:89:bc:fa:1a:92:41:
         c0:87:85:61:38:7e:ad:16:51:79:55:57:59:a4:e1:20:a8:12:
         f6:4d:7e:d3:6b:77:9c:b2:17:59:88:cf:85:6f:46:1f:c8:78:
         9d:c4:70:43:e9:23:5b:db:48:6b:4f:14:d9:5e:df:6a:5d:bc:
         94:5d:c9:cc:24:c2:db:be:08:01:2e:54:3c:00:d2:86:6a:c9:
         2e:1b:4c:06:d6:78:93:fe:e7:30:f6:fb:bb:bd:49:4c:bb:55:
         85:83:51:04:c0:c2:ff:36:1a:17:fb:bd:1e:68:6c:4e:d9:6a:
         26:23:3b:40:7f:e8:0b:42:d6:ca:30:a6:f0:9b:f8:a1:66:46:
         b3:1b:73:ed:c9:fc:5d:77:84:e7:aa:2d:5e:3a:6e:e2:2b:9e:
         5d:4f:df:29:cf:ac:21:4a:d2:1e:d6:34:77:74:dd:28:ac:7b:
         ac:a8:87:9c:27:66:ef:78:e2:c5:61:a0:cb:22:08:e7:74:8a:
         be:eb:76:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 04:55:59 2025 by rpki-client