This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
File:                     GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft (raw, json)
Hash identifier:          Z6SY8Fff7YHGIQcng7ChvtwhTiaRB3sCwh1Zhh/DIgw=
Subject key identifier:   76:E8:A6:9D:E8:B4:9E:D2:37:C6:E4:CF:08:F0:0A:43:5B:EB:D2:73
Authority key identifier: 18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19
Certificate issuer:       /CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
Certificate serial:       019AF3C04A8ED8B3D5F9A05BB1BF2F338388
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 13:00:56 +0000
Manifest this update:     Sat 06 Dec 2025 13:00:56 +0000
Manifest next update:     Sun 07 Dec 2025 13:00:56 +0000
Files and hashes:         1: GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl (hash: nR7lIKoi4upatY377Qj46bHU2RxuFgGGhK8Q0mLisjA=)
                          2: QBagqPGH9MLRe8v6cA3uWwY6NVM.roa (hash: yxEIq1L1gWldcG6QnZu0HcP9v0cGJt+tqJuemcpe71U=)
                          3: mlYmnVk7tfafnI6kiO70u3KwOd4.roa (hash: aIB+G3W1ZT0F+2BUxBkAvXSCuJ9063goygtNArKpnqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:c0:4a:8e:d8:b3:d5:f9:a0:5b:b1:bf:2f:33:83:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
        Validity
            Not Before: Dec  6 13:00:56 2025 GMT
            Not After : Dec  7 13:00:56 2025 GMT
        Subject: CN=76e8a69de8b49ed237c6e4cf08f00a435bebd273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b0:40:60:36:ea:a2:76:72:ea:71:2a:2e:0e:
                    b7:f2:4d:bd:11:ba:99:6a:33:5a:a3:b9:75:db:75:
                    92:92:b7:89:e4:d4:ac:31:ba:6e:ef:25:6d:16:4f:
                    e2:0c:0b:03:91:97:37:0c:a0:7d:a9:e0:a8:65:77:
                    77:8d:ba:10:4f:06:bd:8e:71:18:42:56:b1:6b:a3:
                    f0:e8:3d:c9:85:8e:28:31:02:bc:8e:a1:76:92:33:
                    9e:d6:50:b9:65:0d:60:fc:72:87:d9:67:ad:45:43:
                    80:05:af:5d:7f:1a:3a:2f:62:3f:6f:8c:c7:8e:2d:
                    01:f0:ae:30:97:02:aa:08:48:06:40:1d:c0:2e:30:
                    7d:ae:da:dd:15:a2:02:95:6e:76:dc:d6:18:3b:4e:
                    48:7b:86:b2:8a:2c:60:40:43:b4:7e:44:24:d2:41:
                    cc:7b:4a:50:9d:1f:5c:74:8f:e3:3c:22:90:ac:0e:
                    a9:88:b9:88:d2:a9:0a:38:2f:f1:0d:9d:2f:12:2f:
                    56:5d:86:d0:0e:40:c7:1c:0e:58:e8:a2:81:7f:57:
                    23:7e:91:56:5f:c7:15:6a:ad:4e:d1:ea:d1:88:cf:
                    91:6d:ae:d7:5f:43:68:6a:23:16:c2:d3:39:80:e1:
                    c0:7c:f0:14:4d:71:8f:b8:6e:6f:3f:9f:68:1c:46:
                    6b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E8:A6:9D:E8:B4:9E:D2:37:C6:E4:CF:08:F0:0A:43:5B:EB:D2:73
            X509v3 Authority Key Identifier:
                keyid:18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a8:16:12:65:82:7d:65:e9:f4:f2:bf:b8:2b:fe:b2:52:f7:
         c9:30:a9:92:43:1a:0f:f6:74:6b:38:89:15:3c:57:e2:bf:19:
         50:0e:c3:ca:ab:a4:e9:05:56:21:2d:9a:0c:af:58:f0:1a:2b:
         7d:6b:79:37:33:aa:bb:87:64:e4:9e:a2:83:09:17:67:be:17:
         64:67:9c:30:31:8b:4e:91:4b:32:78:bb:43:b6:2c:0a:dc:90:
         5f:9d:71:a2:e8:f0:a0:27:bf:02:cf:76:81:d3:00:16:12:b9:
         44:a6:45:d8:74:24:6c:20:1f:7d:71:20:70:a0:8a:9f:be:af:
         56:0a:38:f0:6a:94:a9:e8:a2:36:7d:38:00:13:33:65:1b:31:
         a9:f3:94:aa:7c:6a:5a:06:52:5e:6e:95:e3:72:99:02:c5:30:
         68:4f:10:cd:c6:3c:aa:93:57:ef:5c:e7:8d:85:ef:58:61:89:
         94:cf:19:35:86:1c:fb:9a:56:34:71:ff:0c:0c:1a:38:71:d3:
         4e:98:95:e6:87:9b:43:8c:95:4f:37:13:a9:01:9c:35:8f:6f:
         6f:ea:71:75:75:3f:5d:38:44:df:60:0e:47:34:87:1b:33:87:
         9d:ad:e7:15:e4:f1:ee:cf:05:d1:db:b2:b1:9b:42:e7:44:ae:
         60:79:c0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:18:56 2025 by rpki-client