This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
File:                     Gloi28jb0tckjer_R-M5D3f7Sws.mft (raw, json)
Hash identifier:          71kPjNoseemqrjUjHpoqaLZYCfnU9mot1stpa8MR3BM=
Subject key identifier:   0D:F7:16:78:7F:2A:6E:B2:6A:A6:2A:7B:15:6B:51:36:06:EA:8B:90
Authority key identifier: 1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
Certificate issuer:       /CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Certificate serial:       019AF19B9A9466394F65F6803A54D30F2740
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
Manifest number:          1765
Signing time:             Sat 06 Dec 2025 03:01:37 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:37 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:37 +0000
Files and hashes:         1: FPpOTBKmvHdioInyAceH2PiTSvg.roa (hash: 7KPVyyz4s0tMlqQlKNiyZSMIJyFa//iS/eNcNHIUsks=)
                          2: Gloi28jb0tckjer_R-M5D3f7Sws.crl (hash: 4CV7fUuZJlZrTpMoFot945IJos+wuBjCvTAfBeLj0VM=)
                          3: YUvzYRFbDZwpo5_LDw6OQYXrOWU.roa (hash: A9tNEkwBv00N9f8wPpHIeu7SSAIiBzAHZmfokT+2re4=)
                          4: fbMdnuR0es_HjgTaYkDoz6AE4eQ.roa (hash: b27haQtyNO61SdNpnuLEVI2t6aVsy/NGgbKBT4i0JIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:9a:94:66:39:4f:65:f6:80:3a:54:d3:0f:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
        Validity
            Not Before: Dec  6 03:01:37 2025 GMT
            Not After : Dec  7 03:01:37 2025 GMT
        Subject: CN=0df716787f2a6eb26aa62a7b156b513606ea8b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:39:63:d4:d3:35:f8:2a:c4:49:7a:05:67:8a:
                    ee:54:b1:75:fb:f8:24:4a:95:c8:55:0c:fd:6c:49:
                    c9:02:72:9d:81:22:30:3a:dc:6e:e3:e7:6f:93:7c:
                    3c:e9:50:12:cd:66:95:b8:7a:be:20:03:39:c3:38:
                    42:ee:5e:a8:64:08:e4:59:f0:bb:dc:19:77:ff:10:
                    71:f3:cd:f8:49:6e:d9:27:fb:b8:71:48:01:bc:28:
                    d3:9f:6c:5f:ae:40:26:a2:ca:12:9d:f5:34:47:d5:
                    29:c3:f5:d5:22:80:a2:3a:49:cc:6d:3b:55:6e:fc:
                    03:10:62:e5:c5:fd:ef:bf:51:60:24:b5:b7:ba:5c:
                    07:81:fd:a9:80:c3:02:e2:df:45:e0:66:b3:c6:c5:
                    55:19:1f:b4:57:9a:4f:0e:65:ef:27:93:b8:c1:43:
                    4e:bd:1e:b5:38:d0:67:38:89:70:1e:c8:29:98:b8:
                    5b:f0:ef:f6:86:7e:0c:fd:d4:6b:b2:61:0f:20:b3:
                    8c:5c:6f:0d:50:a5:d8:53:85:c1:45:59:33:fd:63:
                    06:00:a6:00:92:05:3c:60:d8:ed:04:82:b3:81:cd:
                    8d:1a:9c:04:75:8c:70:1f:af:f1:64:51:91:88:d3:
                    b9:10:96:07:6d:b4:ad:73:97:71:46:6e:ba:e9:41:
                    40:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F7:16:78:7F:2A:6E:B2:6A:A6:2A:7B:15:6B:51:36:06:EA:8B:90
            X509v3 Authority Key Identifier:
                keyid:1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:bf:a3:b1:ce:ef:de:6d:df:75:37:e3:f4:1a:f6:1a:b2:3c:
         68:54:0a:0d:90:70:68:89:56:39:a4:1b:4a:c0:00:84:8f:65:
         82:01:58:24:39:8f:28:75:fe:83:5f:ba:c2:42:ea:ff:a8:0f:
         c5:04:4c:b5:b5:cb:00:aa:14:fe:f5:39:2c:f0:cd:96:49:4c:
         6c:6b:03:b6:7a:e9:f9:7c:8b:ce:40:48:d5:32:8a:d7:a1:61:
         87:4a:b3:16:e7:de:a8:07:01:5f:d9:e4:ce:1a:32:31:1c:78:
         ad:21:e8:83:84:b6:42:58:ef:17:db:86:1b:d3:28:14:78:b8:
         09:ef:18:44:a4:26:f5:92:f5:1a:1b:95:37:a7:78:9e:bf:89:
         36:06:a7:90:77:ff:bb:16:68:d7:a3:ca:8f:13:7d:d3:55:69:
         83:da:d3:f6:48:9b:25:17:24:0f:7f:9c:aa:36:b1:5e:54:39:
         68:a0:d4:c8:14:08:11:b2:49:34:d9:23:ba:1f:19:e5:17:ae:
         1e:f8:65:9c:54:ec:8e:49:5b:3c:f1:dd:0b:20:c4:5f:8e:da:
         2f:9d:99:71:36:94:25:d6:50:97:87:70:ed:35:1b:ee:bb:64:
         e5:b6:78:d3:6f:0d:46:d1:94:61:3c:65:b7:31:62:68:78:05:
         75:f3:40:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:45:58 2025 by rpki-client