This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
File:                     Goed4cdfu9LDHR2QgUBW8n1X13Y.mft (raw, json)
Hash identifier:          ChtEQ2CQ0yeOFzUROuzIER8sG9z87zDGl3+j6w6dTUI=
Subject key identifier:   59:51:F7:07:D6:8E:6A:CE:2E:E5:F8:E3:D7:70:59:82:AB:D5:68:E5
Authority key identifier: 1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
Certificate issuer:       /CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Certificate serial:       019AF12E161D12D0F8538B86EB606F361364
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 01:02:00 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:00 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:00 +0000
Files and hashes:         1: Goed4cdfu9LDHR2QgUBW8n1X13Y.crl (hash: A5ejinnVGzTRlY0fc19enK6gUofWruuEO7DJ7iuu2ao=)
                          2: SY-aLuRiAgoWaZ-G7IiNuENAxfA.roa (hash: FJ99//JtNMttiwoypIrlcD1qx1Pik8unMC0r91//nuo=)
                          3: V7vJK1PzSdzcivTHP2kjHgag3Cc.roa (hash: OnLS3rg6t36BwcZTS3yV6qxgn2/9ln9WoFUEiCOulgw=)
                          4: umrbROcVD8F_XU1iMMOs7YeDor4.roa (hash: OZEW+D1b6/plYCkSsv4RF+haf9Cmn+tdLrcmbAbfFig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:16:1d:12:d0:f8:53:8b:86:eb:60:6f:36:13:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
        Validity
            Not Before: Dec  6 01:02:00 2025 GMT
            Not After : Dec  7 01:02:00 2025 GMT
        Subject: CN=5951f707d68e6ace2ee5f8e3d7705982abd568e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:37:66:15:e0:23:89:8f:ac:bf:f1:43:3a:99:
                    d4:f3:db:89:b8:29:90:d3:10:d3:b9:c5:8c:92:73:
                    ea:8e:6d:07:dd:a8:30:bd:e3:bd:05:93:28:8e:5c:
                    76:31:00:78:2d:bd:4d:df:6b:c6:fc:2a:68:a8:a1:
                    47:12:eb:d9:41:dd:6b:0b:c6:6b:e3:a2:43:72:d4:
                    4d:0a:bf:44:0e:8a:5d:4c:4e:09:11:ec:5c:b7:9f:
                    78:d5:53:58:0f:12:0a:64:56:69:96:3d:8d:b4:b7:
                    95:fd:c0:7a:db:df:18:c4:9f:20:b9:fa:cc:52:e8:
                    ba:54:19:f9:ba:c2:24:70:53:c4:e1:d4:c2:c9:5e:
                    ff:13:af:d5:cd:47:73:bb:c0:a3:fe:ec:9d:1a:8a:
                    df:76:bd:3f:6f:74:27:54:70:ac:48:39:af:62:9d:
                    55:9f:20:f8:44:62:f3:7f:f8:87:86:55:f4:79:89:
                    41:7e:b7:52:84:72:6b:91:19:69:b1:6b:e9:24:36:
                    2e:53:16:f0:f3:04:e2:67:3a:ea:fb:d8:42:de:88:
                    19:39:40:01:d5:bc:b2:d9:72:04:0e:9b:19:3d:4c:
                    29:d0:ba:4f:ca:a0:94:a1:ea:3e:fb:83:92:1e:44:
                    c0:fa:11:c9:78:cb:e8:69:6b:18:c0:31:b2:1e:1c:
                    f5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:51:F7:07:D6:8E:6A:CE:2E:E5:F8:E3:D7:70:59:82:AB:D5:68:E5
            X509v3 Authority Key Identifier:
                keyid:1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:c4:d5:9a:4c:83:8c:8e:40:aa:e7:1b:c8:91:b0:92:91:48:
         b2:3f:b0:fe:10:e8:4b:21:e1:81:2e:6d:2d:2b:06:62:bc:94:
         dd:4d:8d:01:00:49:68:1f:ec:18:e7:2b:0b:46:88:8c:78:e6:
         a6:6d:81:e5:b4:bf:bc:a5:79:63:78:d8:88:76:ac:32:23:44:
         83:c5:7a:a1:b3:a4:7a:b4:8e:00:2f:2d:c6:0d:97:f4:ff:89:
         85:58:ff:6b:1b:52:b5:11:94:ff:23:00:9e:9e:11:88:30:18:
         44:c1:a6:da:9f:4f:a6:52:ed:10:8c:9a:a2:2b:bb:54:bd:f8:
         61:7d:80:1f:2a:c9:7d:bb:cf:bf:7d:ba:11:11:7c:ce:6b:47:
         c5:38:04:f7:cd:a1:3f:c2:c3:6c:92:7a:ec:e4:3f:7d:28:01:
         b0:d2:92:a9:f9:66:79:1d:4d:c9:8e:dc:ca:6e:78:c1:1a:f2:
         62:58:e8:97:1c:ab:e6:22:3a:63:7d:6a:34:e2:7c:d5:99:95:
         55:51:03:c3:01:37:a1:b0:48:a8:3d:a0:3c:28:92:e1:13:00:
         a4:e5:05:5b:34:b0:ff:76:7a:53:9c:1c:67:04:3b:e5:7b:60:
         a8:09:b3:6e:d3:b6:f9:45:3c:79:2d:6b:51:48:8a:f0:63:13:
         b6:ab:2b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:08:30 2025 by rpki-client