This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
File:                     GRqWooxl1YTI3SNNPbREz0sze6I.mft (raw, json)
Hash identifier:          07eXvtNBmldZIs2czOwU2qhOZL9B2h2QcXk2lUOZAAY=
Subject key identifier:   A0:C2:C1:33:0D:0C:AF:81:4B:11:74:71:C4:AE:B8:46:B0:65:EE:63
Authority key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
Certificate issuer:       /CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Certificate serial:       019AF4659BC3DE1C5A1D8BBF96ECF7634193
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
Manifest number:          1492
Signing time:             Sat 06 Dec 2025 16:01:30 +0000
Manifest this update:     Sat 06 Dec 2025 16:01:30 +0000
Manifest next update:     Sun 07 Dec 2025 16:01:30 +0000
Files and hashes:         1: GRqWooxl1YTI3SNNPbREz0sze6I.crl (hash: M8y2iY4Pc26LGZnCGogNmvk0tJt86Uu2C2XX2hwPzp0=)
                          2: bC6pTGDsZ4iOHNe53IXcZCBmlIw.roa (hash: Nu4vCdQXopNGTYxKSdmiEuUUjtIYYlh9hvqm6GEgfmc=)
                          3: gTevhc6qc4MGdWT2sBbSMEC4YgM.roa (hash: 4M8K26KcOSHJ0nGX0i/rIrbgJM9kUehQ4d7VbJr5lpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:65:9b:c3:de:1c:5a:1d:8b:bf:96:ec:f7:63:41:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
        Validity
            Not Before: Dec  6 16:01:30 2025 GMT
            Not After : Dec  7 16:01:30 2025 GMT
        Subject: CN=a0c2c1330d0caf814b117471c4aeb846b065ee63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:65:53:d5:52:d9:45:83:14:44:50:79:9d:84:
                    3d:ba:de:91:b4:36:06:0e:63:21:42:48:e3:72:74:
                    f7:41:98:9f:80:f4:0b:5d:8f:4f:88:ed:29:bb:38:
                    71:cc:9f:a0:00:97:94:91:35:b8:d6:13:8a:07:3e:
                    2a:5c:bc:4a:66:c2:29:ab:aa:a7:a2:6b:1b:dc:8e:
                    69:31:b8:0f:e2:81:5a:77:43:cd:46:e7:e5:ce:62:
                    f2:40:c6:9f:42:07:ff:9b:c3:0b:78:79:d5:d0:57:
                    7c:44:34:36:a2:3c:d0:da:51:a0:a5:d8:83:ac:8d:
                    24:90:1e:09:73:ff:1c:34:2b:0e:12:cb:3a:d2:4b:
                    f7:92:69:02:de:4e:7a:84:be:a5:b8:2a:76:7d:52:
                    81:f4:0b:ad:84:87:3b:0a:53:92:bc:b8:b3:b3:ad:
                    df:2e:1a:78:1c:a4:9f:a3:2f:5a:77:bf:20:8a:4a:
                    ca:47:94:a8:f7:8b:3d:1c:b0:d4:88:dd:25:d2:47:
                    4c:73:01:bf:28:46:bf:82:91:a0:96:b9:d6:7c:52:
                    69:71:70:9a:27:5e:8c:8f:cc:df:ed:c9:15:b6:2f:
                    1f:f5:0f:af:4c:39:c9:73:9a:66:e6:ce:7a:a5:79:
                    1e:14:86:e8:6b:91:33:78:02:6d:e0:16:1b:46:83:
                    c9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C2:C1:33:0D:0C:AF:81:4B:11:74:71:C4:AE:B8:46:B0:65:EE:63
            X509v3 Authority Key Identifier:
                keyid:19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:6a:9a:83:16:8b:01:e1:4e:99:ad:c0:cd:ad:c0:7d:89:3e:
         50:bf:42:78:ff:8b:69:cd:00:53:9b:d6:63:60:da:39:bd:6a:
         f4:1c:f9:61:36:3b:17:53:4a:9a:1b:d0:91:08:75:11:06:5b:
         ae:62:41:b4:85:2b:2d:7a:15:33:51:39:8e:a0:95:18:c0:02:
         1d:84:a0:72:5e:ed:1e:86:2b:0f:0b:2c:9e:23:4d:b9:be:fb:
         8a:21:a3:af:1a:4d:6e:ae:3b:5f:64:99:12:b3:82:00:c4:cc:
         e8:2e:06:4b:95:d2:21:2d:d0:9b:07:30:a8:68:21:ee:8b:8b:
         88:3a:43:d8:58:e3:8e:42:9b:0f:c6:f2:0b:ba:bf:7e:0f:8d:
         f8:a7:a0:ba:b6:16:1f:aa:ff:ab:8a:ce:52:5c:b3:24:a8:17:
         e4:c5:c6:3d:0b:07:99:e5:ab:e8:ea:60:54:04:00:d8:c8:90:
         78:77:e9:12:4d:1e:1a:73:6d:50:8b:ad:cf:21:59:94:b1:bd:
         77:3f:e5:ce:a0:2f:20:ef:b5:52:61:16:5e:ee:cf:cf:5c:34:
         7e:41:01:01:e8:09:9c:c6:b7:5f:31:92:d4:db:a6:c0:39:21:
         40:e1:3e:49:59:2d:d7:1b:5f:c7:60:45:34:03:f0:36:df:15:
         c5:64:3c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:55:10 2025 by rpki-client