This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
File:                     gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft (raw, json)
Hash identifier:          e6MF1qLsw8GvenTRe0SRiCCUNuquulzb8D+5Os6dHjE=
Subject key identifier:   45:75:DD:2E:81:A5:C0:24:AD:08:35:B8:C3:C8:9E:A0:B2:C4:7E:C6
Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
Certificate issuer:       /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Certificate serial:       019AF352477E44168FD7A1C22EBCEED9DDA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
Manifest number:          176E
Signing time:             Sat 06 Dec 2025 11:00:46 +0000
Manifest this update:     Sat 06 Dec 2025 11:00:46 +0000
Manifest next update:     Sun 07 Dec 2025 11:00:46 +0000
Files and hashes:         1: NxiHrRFmOKs6DxSydD2sJuXQJK8.roa (hash: iNvcUhlJ9Yd5axlJbt+P6uyRKrZKBuBqEJ75zpPuiMk=)
                          2: gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl (hash: 2+pwhAwR2AbyX19WzsUc5UOcsqbtChZje7MJ0Do82wo=)
                          3: p-bGa3FNaz50p4t1OSNDAgoc_0s.roa (hash: kx//HiaOgl7Q7IqXK9lyKotPpA+1c6CW7SCJbi6+JVE=)
                          4: pHamM_FeTuziFQi2w75B0pezcGY.roa (hash: YLgRRlx24P8L2COTLzTtp0xHAktWAujjPd4Z7/lgx3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 11:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:47:7e:44:16:8f:d7:a1:c2:2e:bc:ee:d9:dd:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
        Validity
            Not Before: Dec  6 11:00:46 2025 GMT
            Not After : Dec  7 11:00:46 2025 GMT
        Subject: CN=4575dd2e81a5c024ad0835b8c3c89ea0b2c47ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:61:1c:ce:e4:ef:6c:66:af:90:98:60:66:58:
                    d0:20:a1:dc:c9:19:ca:76:c1:cc:98:90:fe:9c:bc:
                    c6:82:62:59:b8:3c:91:fb:04:8a:24:0d:f4:e6:c1:
                    a5:ce:32:ad:c6:70:02:32:f2:c3:99:40:1c:17:46:
                    8f:07:08:07:44:e5:37:e9:bd:c4:e2:63:81:d4:b1:
                    bc:db:17:7b:04:46:4a:92:38:5e:b7:c7:24:02:2e:
                    4d:da:af:20:36:1b:12:74:c6:c8:69:fe:5f:a4:64:
                    89:67:6e:f1:ad:e7:bf:1b:24:4e:47:56:39:ec:08:
                    e0:e3:c7:49:1b:9d:82:4c:05:bc:3b:06:7a:b8:5f:
                    e4:86:61:25:d8:85:fd:42:56:18:c2:e4:0a:72:70:
                    cf:7b:eb:dc:b4:f4:31:a7:6b:a8:16:ef:22:1c:82:
                    78:68:d2:b0:6b:f0:f5:74:81:a6:b8:c6:62:2e:6c:
                    8f:41:91:76:3b:ce:67:73:59:aa:4d:ea:b2:b6:4a:
                    25:80:b4:93:dc:79:85:3a:fb:d3:de:7b:80:27:54:
                    4e:43:69:31:92:e5:ae:26:08:bd:4e:02:01:09:ac:
                    5d:3c:20:ef:09:0b:de:07:cb:04:36:78:18:21:7e:
                    22:82:ac:8b:2a:b8:50:61:c7:66:07:a5:c7:01:f7:
                    2d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:75:DD:2E:81:A5:C0:24:AD:08:35:B8:C3:C8:9E:A0:B2:C4:7E:C6
            X509v3 Authority Key Identifier:
                keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:87:4f:8f:3a:69:d8:42:33:99:60:f1:6d:6c:1a:12:9e:de:
         cb:47:74:64:7f:46:1a:df:dd:92:40:29:89:6e:11:96:39:36:
         bb:cb:5e:5b:93:4b:88:83:bb:10:91:a3:d6:93:7c:98:39:75:
         15:35:c6:84:15:e8:0b:59:25:64:18:1e:5f:f2:b7:0f:9f:e0:
         99:b9:fe:9d:d8:d2:71:2a:7b:30:65:99:a8:85:8d:ce:48:38:
         0a:a1:59:16:ca:60:29:1f:54:45:6f:72:75:dd:16:ec:79:03:
         76:db:30:06:95:59:86:51:8f:7e:c7:63:f9:d8:5a:53:84:25:
         c8:a0:d6:b1:6d:1e:01:1e:92:ab:4c:4a:3f:6b:8e:c7:a8:de:
         e6:3e:4a:01:30:6b:b7:c4:75:1b:0a:9f:aa:90:ab:6a:b4:6e:
         41:54:81:dd:c8:0a:51:19:80:bf:f2:e8:c4:00:6f:db:90:71:
         6d:7c:7c:f7:44:d3:92:28:56:4e:e6:5f:67:f3:36:cf:81:fb:
         71:7e:47:8b:fd:81:57:f4:69:db:e8:60:e5:f2:4a:a6:a6:90:
         88:9a:33:b1:d0:67:3f:26:e2:e3:41:7d:d7:95:83:78:fc:7f:
         fe:56:23:5e:53:af:69:0c:51:23:cd:f2:b0:8a:da:d0:2f:a5:
         52:c5:de:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:32:19 2025 by rpki-client