This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft
File:                     GRsamTWNqljnJiXEzp2CnpGO_IY.mft (raw, json)
Hash identifier:          2cxmhYzcZ1bCwqsLG+6ZA6LU9vvwCjYt3NkGisR5xl4=
Subject key identifier:   40:C2:66:95:F0:FA:E6:35:E4:98:86:AF:BC:3A:C0:54:CD:1E:CB:FA
Authority key identifier: 19:1B:1A:99:35:8D:AA:58:E7:26:25:C4:CE:9D:82:9E:91:8E:FC:86
Certificate issuer:       /CN=191b1a99358daa58e72625c4ce9d829e918efc86
Certificate serial:       019AF352D9E98CF3E117A191A9070D074EEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft
Manifest number:          52
Signing time:             Sat 06 Dec 2025 11:01:24 +0000
Manifest this update:     Sat 06 Dec 2025 11:01:24 +0000
Manifest next update:     Sun 07 Dec 2025 11:01:24 +0000
Files and hashes:         1: GRsamTWNqljnJiXEzp2CnpGO_IY.crl (hash: xxiAyPUZU5p5ASIPG1pV1CZbhq/xppNq6Cr63wNYl9U=)
                          2: WM40dZ-t-TKjYT1JNorYoZbj-cI.roa (hash: 7smi5Aav8i2UmABrXzG2ZCoNcVpxXAhrEdFn8xMhW8g=)
                          3: a66me_Qj7lU21dLU6uUthXtmShA.roa (hash: NA3UULnm/cfQYWHU1U4cRpnkE9MPtrokY4wZikBBiP8=)
                          4: buskofRkkagIXga384e3dmIbIs0.roa (hash: 39XnWJpZUpAmOqLMt3EdhMn4gLBLBpaM+0Q0rXQjd2w=)
                          5: ou4bocnw3Euji3HT5v1KCE16yQY.roa (hash: vrGzLIG/HF4sMpEEp7dNqybgF7AthS4vTHWglC0DTSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:d9:e9:8c:f3:e1:17:a1:91:a9:07:0d:07:4e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191b1a99358daa58e72625c4ce9d829e918efc86
        Validity
            Not Before: Dec  6 11:01:24 2025 GMT
            Not After : Dec  7 11:01:24 2025 GMT
        Subject: CN=40c26695f0fae635e49886afbc3ac054cd1ecbfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:45:d7:f9:e4:84:64:a8:5b:e1:8a:9e:01:b9:
                    bf:56:e0:3c:6f:48:f3:55:1c:dc:fd:5d:54:bd:45:
                    bd:25:f0:a6:57:77:62:7e:1f:5b:79:40:57:44:6a:
                    40:a5:95:61:d8:da:f9:af:0a:9a:b8:0d:3c:e6:ea:
                    25:2d:df:25:bc:29:87:9e:0b:9e:00:84:36:ba:61:
                    fc:5a:ac:55:ec:a4:4c:d2:95:dd:4e:78:03:f6:8b:
                    d9:8e:80:f9:05:8f:d7:96:09:6e:61:5d:59:b5:f5:
                    93:c3:1b:ea:15:ec:ed:b6:54:77:3d:29:04:f7:d0:
                    6a:92:20:83:17:78:c5:c4:1e:a3:c5:bb:b2:d9:33:
                    3f:10:85:60:5e:d2:bf:2a:02:ca:27:cc:d2:f3:70:
                    90:81:a6:00:eb:4e:42:24:cc:c8:7f:c9:4f:75:28:
                    48:86:57:fd:2d:66:fe:89:85:5f:f7:fb:5b:28:2c:
                    3a:55:d9:89:eb:9e:d9:5d:09:bf:a4:a0:4d:fb:a3:
                    31:4c:c0:d2:1c:54:38:95:7a:44:fd:27:ea:08:50:
                    b4:a9:5c:2e:9b:57:ce:c7:e3:ab:c9:5e:7e:6a:f5:
                    a6:98:60:09:f1:fe:e6:fb:95:98:8d:1b:7c:48:22:
                    83:08:da:6e:30:4a:e7:98:f7:af:1a:fd:4f:7b:fb:
                    f1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C2:66:95:F0:FA:E6:35:E4:98:86:AF:BC:3A:C0:54:CD:1E:CB:FA
            X509v3 Authority Key Identifier:
                keyid:19:1B:1A:99:35:8D:AA:58:E7:26:25:C4:CE:9D:82:9E:91:8E:FC:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:af:d8:a1:d6:12:a2:44:b5:4b:fc:26:17:5d:cf:68:9e:a3:
         11:35:54:78:fb:52:04:96:e0:19:3a:fe:4b:18:99:23:6e:d4:
         d0:62:73:d7:3d:92:aa:3a:ea:49:e3:4e:23:72:1f:ab:d8:17:
         0a:7b:45:bc:6d:3d:65:d4:fa:cf:45:98:25:bb:8e:83:7d:59:
         f1:39:45:c2:1b:69:ee:c0:63:2a:22:19:75:81:e5:87:07:f6:
         56:fb:ed:0a:b5:28:c8:2e:52:e8:23:f0:6f:5f:78:f2:60:20:
         01:ad:2d:9f:6a:40:56:d7:17:d7:85:7f:5e:92:24:a2:f3:58:
         db:93:57:1e:91:c6:c9:7b:9b:2c:26:d9:e8:8a:61:15:e4:e3:
         f8:9f:94:bb:16:58:c7:83:11:a6:63:35:b7:ae:56:f9:ef:1f:
         29:08:08:f7:02:3f:85:25:db:ba:44:01:1c:52:85:d5:02:88:
         f3:77:ac:cc:71:2a:d8:f4:71:51:58:56:4d:31:d7:1f:5d:8e:
         13:03:8f:87:27:05:bf:52:bc:04:7d:c8:fd:df:ca:78:71:62:
         78:5d:1e:a8:60:4d:2c:9a:c4:a9:88:6a:97:04:c8:d7:54:37:
         5c:34:38:94:ff:da:6c:7d:85:37:4e:1a:bb:d0:bf:db:4b:ba:
         d9:7c:fb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:12:40 2025 by rpki-client