This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
File:                     GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json)
Hash identifier:          GCk1ZvmWjFXvykVBITz9uqWATCniS2Ics411AnczOOA=
Subject key identifier:   E2:9A:5E:F4:AE:23:7A:47:35:80:53:1C:C9:7F:78:3A:CA:9E:16:6E
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Certificate issuer:       /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial:       019AF0883BB8D46449BD84C5B49C38B5B649
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
Manifest number:          1442
Signing time:             Fri 05 Dec 2025 22:00:51 +0000
Manifest this update:     Fri 05 Dec 2025 22:00:51 +0000
Manifest next update:     Sat 06 Dec 2025 22:00:51 +0000
Files and hashes:         1: 4f1LP1dvzQWJRhe0pKnUAVi2MzI.roa (hash: 2K/ITDdgk6fYi6thD3A/GwKYq+VGIASYLtA7ItdKnpc=)
                          2: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: L4ut2PkZ/gOk6O6wCStl4gYfWWEEa6vQwUPDKRsHN18=)
                          3: JkUk0RwhqW1iBr4hL3arEunrp2M.roa (hash: /IEYmQsTDHtYubFLhftis+nToWQhtnU5kLG/4NerSmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:88:3b:b8:d4:64:49:bd:84:c5:b4:9c:38:b5:b6:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
        Validity
            Not Before: Dec  5 22:00:51 2025 GMT
            Not After : Dec  6 22:00:51 2025 GMT
        Subject: CN=e29a5ef4ae237a473580531cc97f783aca9e166e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:4d:c2:f0:8b:f3:62:3f:f3:d7:d5:e2:22:
                    81:80:74:81:42:d3:3c:71:c2:38:7a:4d:9c:74:13:
                    c8:0f:76:e2:b9:30:69:c8:c2:78:50:9c:72:df:c0:
                    bf:05:36:c2:02:40:9c:44:d7:9d:3d:8a:33:ad:48:
                    ba:10:d1:3e:03:c7:6e:0a:af:01:22:c1:de:60:aa:
                    ea:f0:83:53:1b:fe:6d:8f:99:09:f5:6a:68:45:72:
                    3f:64:ee:00:6c:4f:23:d6:80:27:fc:28:0c:40:6f:
                    c9:2f:b9:5a:2d:71:7d:78:75:63:b8:f7:da:6c:37:
                    76:0c:fa:5e:bc:c9:da:b6:66:c9:1e:79:13:00:a1:
                    ea:a5:57:78:8d:68:3e:74:21:f2:12:35:27:59:72:
                    c0:5d:de:a8:6a:a0:eb:8f:3f:89:ba:ce:4d:e1:92:
                    1e:71:7f:e8:7f:af:06:39:e5:f9:3a:d5:6a:45:39:
                    e3:f3:d1:83:1e:c1:06:11:f8:97:4d:75:1e:3f:9a:
                    d3:84:db:fa:8f:df:ce:1b:06:ee:70:8b:28:2a:bd:
                    8b:88:0c:63:58:f3:41:a6:70:55:66:d5:ec:1a:7c:
                    5a:98:82:c8:3c:12:2e:0b:5a:8b:58:53:59:f9:84:
                    5d:a2:fb:06:2e:da:59:d1:9c:23:8e:b8:8e:4f:4d:
                    5e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9A:5E:F4:AE:23:7A:47:35:80:53:1C:C9:7F:78:3A:CA:9E:16:6E
            X509v3 Authority Key Identifier:
                keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:29:82:52:65:1f:a0:7a:3d:1c:c0:2a:78:b2:ee:80:d4:63:
         14:22:9f:a6:ac:0f:fa:59:36:8c:8f:42:ae:3b:aa:b4:3c:18:
         87:18:ab:fb:3e:f8:22:e1:20:52:7b:e2:e1:e2:60:61:eb:d6:
         75:9b:15:24:12:fa:ab:5a:c3:84:c4:01:e4:8a:e4:ec:e8:13:
         ec:8a:2e:db:ff:f5:a1:71:e5:11:22:13:e6:c8:b9:63:ab:f4:
         74:a4:43:50:5a:07:64:a8:2a:76:f9:30:60:0a:7a:f2:bc:e6:
         d8:9e:9a:06:0b:b1:25:10:a5:fb:38:18:82:08:35:e8:ae:2f:
         15:9a:3d:56:a4:f3:15:ac:4f:f9:92:88:58:94:e3:c4:4f:0b:
         e1:b2:af:92:4c:b9:a3:0e:e5:71:c9:3b:e5:34:a7:41:c5:d2:
         6c:e2:30:1d:f7:3e:2f:7c:f4:e9:22:ec:d8:d0:79:98:95:3d:
         b8:8c:83:97:b2:3f:de:9f:28:73:5b:b8:6c:17:38:9f:a2:ed:
         4c:bb:91:a4:17:d7:5c:3e:32:0b:29:26:18:91:94:ab:5d:e4:
         de:60:3e:bd:db:46:fb:d0:10:8f:26:40:d5:ac:22:e6:fe:54:
         7f:60:6a:2a:87:62:cf:f0:3e:3d:57:88:84:63:ee:e8:de:d6:
         11:29:d5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:25:21 2025 by rpki-client