This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
File:                     GWImUASBB5GK3xsizfCHyKg095w.mft (raw, json)
Hash identifier:          zlO1etREzo/gZmnjQj4C2c0joIyt8O0c2wh7Q00Zbu0=
Subject key identifier:   42:3B:F3:8E:B2:0A:25:B7:8B:48:A3:55:E4:05:15:EE:29:45:4A:64
Authority key identifier: 19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C
Certificate issuer:       /CN=19622650048107918adf1b22cdf087c8a834f79c
Certificate serial:       019AF38A07DD96ADB4579F111B0A65FDF229
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
Manifest number:          0B63
Signing time:             Sat 06 Dec 2025 12:01:40 +0000
Manifest this update:     Sat 06 Dec 2025 12:01:40 +0000
Manifest next update:     Sun 07 Dec 2025 12:01:40 +0000
Files and hashes:         1: GWImUASBB5GK3xsizfCHyKg095w.crl (hash: pPLPBVOB3NwKXqhvMmVnK/cWcNBbebwr1R6tXRpDCvA=)
                          2: huPI6u_LRtdxxCntM6xWi8UILhs.roa (hash: dxaGNUPSqDMCpFu0jmftsWJq4vBwtQVy+FWsjciFptc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:8a:07:dd:96:ad:b4:57:9f:11:1b:0a:65:fd:f2:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19622650048107918adf1b22cdf087c8a834f79c
        Validity
            Not Before: Dec  6 12:01:40 2025 GMT
            Not After : Dec  7 12:01:40 2025 GMT
        Subject: CN=423bf38eb20a25b78b48a355e40515ee29454a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3e:ed:db:9a:cf:35:3e:ea:55:c0:a7:ac:f4:
                    4e:8f:7e:09:43:73:85:23:2b:6a:10:89:bf:33:dc:
                    26:34:75:4c:6c:90:8c:b2:81:d5:6f:06:98:a4:1d:
                    2e:76:90:b1:25:5c:d4:be:3e:28:f6:da:3a:cf:6c:
                    c0:e4:e7:26:fe:f8:80:d2:a1:bf:97:f1:a8:f1:ac:
                    84:8f:b1:43:06:44:6b:18:12:3b:03:2f:c3:f8:64:
                    02:1d:17:c8:8e:0a:80:b4:b5:6b:17:4b:44:04:cd:
                    25:39:c7:e9:13:02:6f:52:b1:0f:82:84:af:78:79:
                    1e:d0:35:65:54:f2:ed:6c:0d:7c:ec:39:e6:89:05:
                    df:aa:d5:ef:23:e3:d1:1c:33:cb:9f:29:52:52:23:
                    f3:4a:4e:98:d5:27:59:f4:c9:77:2c:7b:92:4c:9f:
                    9f:fc:76:7c:3b:8f:54:7c:ad:cd:c3:d7:26:e3:92:
                    2a:2b:7c:88:1f:d3:e5:36:ba:5c:4c:25:44:ab:5b:
                    9a:f7:58:a3:27:d8:e2:9a:75:b1:91:dc:7f:90:46:
                    66:a9:3a:12:1a:1e:4f:5f:92:0d:c7:1a:f0:5f:ea:
                    13:1f:72:fb:0c:5b:81:a7:38:49:18:4c:b0:19:b5:
                    c1:54:9c:01:7d:c0:43:b9:ec:88:5b:38:9a:10:46:
                    e1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3B:F3:8E:B2:0A:25:B7:8B:48:A3:55:E4:05:15:EE:29:45:4A:64
            X509v3 Authority Key Identifier:
                keyid:19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:78:8d:c5:81:cb:d2:36:94:14:0b:82:a0:b8:89:9e:8f:fa:
         a9:2e:31:3a:d7:21:0f:e1:fa:c2:c8:17:2d:1e:c6:18:a8:48:
         b9:a3:05:9c:91:32:62:a3:d5:20:b8:7d:8b:1e:cb:bd:72:56:
         5e:c4:44:1e:d2:89:77:45:00:21:ab:17:24:59:6d:4a:be:2f:
         f5:65:b8:19:ea:56:e2:a7:e2:1b:c8:d1:8f:a5:81:7c:24:ff:
         be:f7:fc:be:6e:dd:e8:47:ba:d3:37:93:2f:81:32:49:82:37:
         3c:15:5d:1e:56:5b:c5:48:26:f9:4c:d1:0d:d1:af:9a:20:c1:
         21:f7:1c:e8:1a:7f:62:d1:b9:df:23:a6:2b:76:c4:17:e2:b0:
         26:a3:f5:02:6f:9a:fa:ed:36:62:3c:df:c7:9c:5f:72:4c:14:
         85:80:c9:7e:0f:39:ed:3f:67:01:fb:52:e1:07:b2:57:5c:c3:
         85:75:80:4f:e8:6c:ad:d3:ed:15:28:4b:4e:4c:ce:f7:cc:6b:
         c6:a0:2e:df:a6:14:92:68:df:8e:54:0e:31:04:1b:c4:27:24:
         63:5d:04:5e:d2:74:f1:92:b6:b7:b7:23:1d:52:a1:ea:b9:1c:
         41:8a:c1:9e:74:92:07:dd:88:34:fd:0b:be:7d:c7:f3:07:36:
         63:96:ef:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:26:52 2025 by rpki-client