This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
File:                     GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft (raw, json)
Hash identifier:          vDKGscb/z12nMsMx/ymjdMlRIeu/jDVnCGrSVN3uj7U=
Subject key identifier:   B4:D0:94:E1:02:07:09:B9:CC:F6:41:54:50:4C:41:7B:22:84:0A:B5
Authority key identifier: 1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94
Certificate issuer:       /CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94
Certificate serial:       019AF20952D72F486DDDB13BA3BF434FD256
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
Manifest number:          1263
Signing time:             Sat 06 Dec 2025 05:01:28 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:28 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:28 +0000
Files and hashes:         1: 9anLZpxCdtczPvdlYCXgAxbRs8M.roa (hash: CyG4Wg4fSftiyOPdmKS2+akGyemcGA5SuHd1aeIvuWs=)
                          2: GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl (hash: E+89l10TajNKbsUMoCIotvo3mReuHjQD1bA34cDiByE=)
                          3: wgLpdQzEQiut3zZPkrk2it4-KJM.roa (hash: rQ6r9VvnZsN117x/0JkyHFIrRA5vncbf9BthsT1+A7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:52:d7:2f:48:6d:dd:b1:3b:a3:bf:43:4f:d2:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94
        Validity
            Not Before: Dec  6 05:01:28 2025 GMT
            Not After : Dec  7 05:01:28 2025 GMT
        Subject: CN=b4d094e1020709b9ccf64154504c417b22840ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:01:94:73:f7:d1:a2:b7:90:f8:2e:d9:79:52:
                    c8:71:42:8e:d8:ab:ba:a1:a1:5e:b2:5c:f3:b3:f4:
                    d4:91:f2:e9:81:6e:41:b3:5d:ea:a7:b6:70:e9:e4:
                    4d:bd:f2:66:85:63:58:84:ea:f5:23:c1:f7:9c:99:
                    6f:de:3c:53:6b:ed:8e:f8:5d:63:7b:51:bc:12:4d:
                    fc:81:0c:b3:2e:40:cf:ea:ac:cb:77:66:72:e4:b1:
                    8a:1f:4f:91:3e:85:3f:8b:93:aa:9f:78:ff:4d:cf:
                    00:52:d9:73:de:04:9e:d4:85:36:85:ce:84:2e:93:
                    4b:2d:10:6a:34:99:c2:c7:90:c8:00:69:9f:81:49:
                    e9:ae:36:a9:0e:21:83:19:ee:c6:06:34:91:88:56:
                    bb:4f:8f:a1:32:66:59:f2:61:cc:73:1a:d1:88:c0:
                    d9:13:ab:57:fa:23:15:17:86:b3:78:f3:ae:e0:99:
                    ec:ec:8b:8b:92:49:61:4b:b5:3b:b3:85:a8:4d:77:
                    d0:90:94:86:25:bd:47:e8:15:90:05:75:fe:b5:f4:
                    9e:d9:09:ac:06:2d:8a:97:3d:7d:f3:0d:11:a8:aa:
                    fa:c7:d8:6c:c4:6c:24:86:26:bb:4f:1e:ff:0b:4d:
                    8e:1b:eb:aa:80:82:4d:8f:76:31:74:1e:7a:cc:98:
                    36:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D0:94:E1:02:07:09:B9:CC:F6:41:54:50:4C:41:7B:22:84:0A:B5
            X509v3 Authority Key Identifier:
                keyid:1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:0d:c5:49:96:5e:dc:01:e5:b9:39:08:a9:e6:5f:d3:ba:38:
         65:3d:9a:09:d3:f9:5f:3a:26:b8:96:40:40:3b:25:6a:87:7f:
         aa:e7:63:c3:32:f2:40:96:12:05:57:7a:d0:b0:ce:8e:03:32:
         a6:2f:ef:74:d0:34:22:04:4b:bc:24:bf:5e:bb:d7:a6:95:6b:
         ec:5b:3b:6f:f1:20:d9:18:1b:b8:de:37:ee:d0:b4:fb:c9:b0:
         a3:ee:e4:28:34:64:bc:99:66:60:72:51:87:29:7d:3c:b5:28:
         b8:b0:64:e4:8f:9e:1f:b9:02:fe:2c:78:9f:68:bc:de:2d:a4:
         89:d3:d1:b2:7a:ba:68:6a:c3:a6:c8:bb:2c:e8:16:3d:aa:61:
         1b:1a:6f:b4:2d:a0:00:1b:09:a9:73:45:40:87:dc:8f:af:ce:
         58:f6:7d:3a:6b:1c:0a:35:8c:ec:d4:d2:82:47:36:1a:ba:93:
         2a:ae:51:50:6b:e5:7e:3a:3e:90:13:99:6c:ea:2a:df:49:bc:
         21:cb:07:64:78:25:40:7a:4f:ce:93:9c:23:2a:65:e9:09:dc:
         cd:ef:18:dc:03:a0:85:97:87:d3:4d:e4:6a:43:2a:fc:96:29:
         b1:d7:7b:4c:68:83:d5:5c:69:f9:61:31:2f:54:7d:9b:65:98:
         20:02:fe:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:06:22 2025 by rpki-client