This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
File:                     GpFU4cVXiw_virt3n4EX5k6ITRg.mft (raw, json)
Hash identifier:          TtebspfuyW+cMuz/qAmtk06/NMD73GLugxq8JEEPzGc=
Subject key identifier:   8F:A9:C8:B9:15:B1:E6:4B:E2:7B:8B:42:D1:3A:AD:DE:82:2F:DC:02
Authority key identifier: 1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18
Certificate issuer:       /CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
Certificate serial:       019B2E5471BBC0411DAA79146CE4F070EF2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
Manifest number:          0E2F
Signing time:             Wed 17 Dec 2025 22:00:44 +0000
Manifest this update:     Wed 17 Dec 2025 22:00:44 +0000
Manifest next update:     Thu 18 Dec 2025 22:00:44 +0000
Files and hashes:         1: F-U-cDtSSag2W1wAvfbUo3fdaQs.roa (hash: 2Ga8t3NnP1c8+shLsR913ttQ8XGLyvFZpunmc/03AyI=)
                          2: GpFU4cVXiw_virt3n4EX5k6ITRg.crl (hash: ck9F0Fw+2pR01RQHZ8tYu3YvYGuidZMJWe8ZbZ/78pQ=)
                          3: ey-_9xxGKnsOGGPU15--RgSssm4.roa (hash: 0cRLbNHAlwoA+yxbwyO5Q2GpY1t4qSENfOLW5G8ijZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 19:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2e:54:71:bb:c0:41:1d:aa:79:14:6c:e4:f0:70:ef:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
        Validity
            Not Before: Dec 17 22:00:44 2025 GMT
            Not After : Dec 18 22:00:44 2025 GMT
        Subject: CN=8fa9c8b915b1e64be27b8b42d13aadde822fdc02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:52:c5:1d:ff:76:62:ec:86:01:45:4d:8c:4b:
                    50:4e:04:25:be:4b:d7:69:3b:6c:2f:4a:da:c6:04:
                    19:02:31:27:4b:c7:92:a3:97:d3:b2:66:17:62:26:
                    2b:2b:08:ee:4b:15:ad:af:8a:ce:43:fa:4c:55:0f:
                    21:bb:4e:ec:ed:cb:96:2d:2c:73:89:2b:6c:09:76:
                    cc:49:6f:10:25:7f:e2:60:7e:c8:3d:cb:57:2b:dd:
                    43:56:b0:cc:fd:b2:46:30:c0:f9:f1:6f:27:1e:f9:
                    4f:97:f0:f2:bc:05:66:8a:b8:a7:45:65:00:21:6c:
                    d5:d9:11:c2:de:2a:cc:07:7b:da:be:f5:d5:8b:d3:
                    36:b1:a9:49:43:6f:7c:a5:7b:3f:07:f8:ed:fc:4c:
                    8e:27:57:c8:e2:0b:ba:87:a7:19:68:75:39:ae:b6:
                    38:25:04:4c:50:43:32:11:2b:e2:06:f2:3a:56:88:
                    ba:ff:b9:80:19:5b:dc:bb:f2:01:11:76:bf:91:09:
                    59:ac:01:55:3f:2a:76:39:41:2f:b4:1d:3a:ce:0b:
                    17:2e:16:39:b0:58:80:c7:55:58:57:4e:16:96:03:
                    f8:fe:9c:39:87:a4:e4:8b:2e:65:f1:63:bd:c2:09:
                    ac:cc:f0:37:57:0a:c6:2e:b0:08:80:97:83:89:ba:
                    84:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A9:C8:B9:15:B1:E6:4B:E2:7B:8B:42:D1:3A:AD:DE:82:2F:DC:02
            X509v3 Authority Key Identifier:
                keyid:1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e9:9a:aa:f6:c4:59:15:f2:79:be:7c:6d:7b:c7:cd:5d:2b:
         29:33:9d:73:a5:e3:ba:c5:9c:20:7c:38:84:86:df:53:ec:c9:
         5b:bf:e9:d3:3a:83:9b:a5:10:28:ba:07:00:76:71:4f:0a:b0:
         59:e1:4b:79:60:3e:16:1b:62:91:c6:90:19:6d:25:f2:27:73:
         85:2a:51:14:f2:9d:d1:5e:23:77:d8:42:17:22:09:8a:48:d3:
         c0:f9:bb:c7:34:15:04:90:a8:03:17:17:6e:4e:ed:77:5f:3d:
         2c:d8:a5:1b:d7:91:47:07:ab:b6:df:3d:92:10:4b:60:be:d3:
         1e:c9:ac:da:92:e1:d1:41:c0:cf:db:5f:e4:18:23:00:a0:67:
         4e:c3:e0:f6:07:ae:df:09:68:a8:1e:5f:38:ef:13:5a:d6:d7:
         9d:c8:52:ac:99:ff:ff:8e:55:3e:ba:3d:98:39:59:a0:92:34:
         48:96:2f:f8:02:69:da:ca:ca:5c:8a:23:03:14:28:b7:5d:9e:
         0f:45:46:72:dd:61:6c:cb:99:56:15:fb:b9:14:4e:a1:3a:70:
         57:38:16:b4:9d:66:95:91:68:9e:90:a7:30:d9:0a:66:72:c6:
         65:73:76:8d:c5:7f:47:05:f2:21:b2:ec:17:cd:d7:e8:2a:31:
         78:4c:5d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 05:40:49 2025 by rpki-client