This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.mft
File:                     gyhvptp9JS54KPhJI_VZGRQrAH8.mft (raw, json)
Hash identifier:          eiTBPzLe1XvDNaJl9+Ryy/k4f1+9j6FBZxMJll7K3bQ=
Subject key identifier:   A2:DF:42:34:63:7B:30:C4:3C:A5:93:BD:40:26:C8:0F:51:F3:7D:46
Authority key identifier: 83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
Certificate issuer:       /CN=83286fa6da7d252e7828f84923f55919142b007f
Certificate serial:       019AF23FAE5C1D4ACE9BD8EC229CE4DE405E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.mft
Manifest number:          1764
Signing time:             Sat 06 Dec 2025 06:00:50 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:50 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:50 +0000
Files and hashes:         1: 2Fa9I4eMPzfo939SHVylXbzPrz8.roa (hash: nGUhV51P4Xt7y4WWujwqar1e4qSQSqC/VceFTeZqU6Y=)
                          2: eXq8qqCVTUpurhrwMS76Ftfg2Xw.roa (hash: BYkfcjQqotFe4I9Ab8fvUQ8zQzC2L9Hl2RpFT9l1Q4M=)
                          3: gyhvptp9JS54KPhJI_VZGRQrAH8.crl (hash: rXZQRd+14FXO08uFdr59pg79buZYYXPVurGFb9DVD/4=)
                          4: zbHf3SPKUQqKlSY2p0HB9p9XL90.roa (hash: csBeTbNKWq57qRnNo/tNdPyrIrtIdDZKmu8r42Yia8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:ae:5c:1d:4a:ce:9b:d8:ec:22:9c:e4:de:40:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83286fa6da7d252e7828f84923f55919142b007f
        Validity
            Not Before: Dec  6 06:00:50 2025 GMT
            Not After : Dec  7 06:00:50 2025 GMT
        Subject: CN=a2df4234637b30c43ca593bd4026c80f51f37d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e5:ec:37:dc:43:1e:d5:98:48:f9:3f:73:fc:
                    75:2e:d4:a4:da:8e:4f:5c:80:49:43:19:c1:fc:1b:
                    b0:b9:ac:00:1a:33:9f:90:24:29:68:60:ed:f6:86:
                    b4:9c:7f:8d:cd:8c:d7:60:3b:16:9a:ea:95:7a:73:
                    66:61:72:12:d5:d4:17:42:a9:ef:f0:ad:d5:55:8f:
                    b6:5a:50:a7:84:0b:9f:c8:f5:58:37:0f:39:42:d8:
                    5c:13:a9:32:d6:41:79:25:72:e3:0b:a3:d5:ab:ba:
                    ce:f9:57:66:b2:e6:00:a9:88:59:9e:e8:6b:8b:9d:
                    55:8d:42:3a:fb:ca:76:0b:89:93:a2:0b:75:2f:3c:
                    d1:09:13:9d:b2:46:9d:8c:c7:f7:70:6e:c9:01:c1:
                    8b:04:d7:bc:8c:b1:59:db:e0:47:ed:41:ce:ae:13:
                    12:27:92:32:97:48:29:f0:fa:d9:de:9f:55:f7:fd:
                    84:92:0d:72:3f:cf:ea:93:fa:e2:6a:02:ad:f5:36:
                    9a:79:e5:8b:3c:df:d1:40:e2:60:51:ee:a6:ed:ff:
                    be:62:22:0a:0e:83:2d:34:74:33:a9:73:ce:ae:d7:
                    a7:fd:f6:a7:73:92:cb:dd:d5:89:48:9c:d1:2b:90:
                    fd:2d:fe:c7:98:20:33:61:d4:13:f7:28:cc:54:14:
                    07:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DF:42:34:63:7B:30:C4:3C:A5:93:BD:40:26:C8:0F:51:F3:7D:46
            X509v3 Authority Key Identifier:
                keyid:83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:79:d4:33:d6:e7:53:27:ef:46:d6:78:e4:62:42:24:e4:52:
         c6:dd:36:b4:a6:1b:15:0b:8f:79:91:db:cb:bd:ed:d5:09:fa:
         0c:43:85:b1:45:c5:a8:67:c4:a0:3e:1d:69:81:d7:06:36:22:
         6d:6d:92:b7:a1:34:ce:68:7d:9f:e7:33:f9:a7:ac:33:dd:84:
         02:68:bd:1d:a2:12:85:a0:77:82:71:fd:13:65:6a:fc:bc:c2:
         cd:da:8d:03:86:2c:53:de:a0:b0:20:61:18:bd:46:08:58:ff:
         76:99:26:21:07:e1:49:ee:10:f5:6a:6f:f8:f3:2d:ac:92:1f:
         d1:c7:8d:fc:c0:67:77:f6:48:48:15:d5:0e:76:ab:82:8b:bc:
         c2:68:08:ac:65:1a:df:83:48:a5:66:af:60:90:15:25:9d:7a:
         3c:1b:bc:15:c1:7e:18:86:34:b6:9f:a4:d2:37:67:dd:4a:5c:
         1f:7a:92:cf:42:ac:9f:bb:0d:de:61:21:8b:ad:d6:43:75:a4:
         cc:4f:d9:d0:01:83:3a:b8:08:c8:fe:04:36:cd:4b:3c:81:4f:
         29:44:c1:40:75:9e:fb:80:3b:30:90:05:eb:1a:d9:05:3e:f5:
         55:7c:f3:2e:8c:73:28:d7:6a:f1:e3:e5:a5:20:fc:22:1b:63:
         c7:b5:ce:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:04:42 2025 by rpki-client