This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
File:                     gQrwAiUQayCW6bIdmsLyBAaI3qI.mft (raw, json)
Hash identifier:          b0bGvmAF+yR+uZHh/jsMYigQPH3eZX5jLX5EcNnMXuI=
Subject key identifier:   B0:3D:96:56:25:C8:94:17:72:3E:5C:5C:A7:0B:E7:09:2C:1C:75:6D
Authority key identifier: 81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
Certificate issuer:       /CN=810af00225106b2096e9b21d9ac2f2040688dea2
Certificate serial:       019AF0F5ED5B22AA876E2FD1D1F1AA6FDCC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
Manifest number:          0AA9
Signing time:             Sat 06 Dec 2025 00:00:39 +0000
Manifest this update:     Sat 06 Dec 2025 00:00:39 +0000
Manifest next update:     Sun 07 Dec 2025 00:00:39 +0000
Files and hashes:         1: RY9h-rx1ZstpJjozDETgohyO7Lk.roa (hash: 0CX3AZGe8LLC0uBgiztbMwk7WnvOC9Yq5FJHH6gri8w=)
                          2: gA8AYbCwcFJfHyhTWrHCSel_7z4.roa (hash: DRfyCzFOVemyTrr7A1FKb5ojCB7lbj59iDLvIoFfDN4=)
                          3: gQrwAiUQayCW6bIdmsLyBAaI3qI.crl (hash: 990fbzROgVtoqaXnN4G7b8iLT4EV4WEeo/A9tVaeDRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 00:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:f5:ed:5b:22:aa:87:6e:2f:d1:d1:f1:aa:6f:dc:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810af00225106b2096e9b21d9ac2f2040688dea2
        Validity
            Not Before: Dec  6 00:00:39 2025 GMT
            Not After : Dec  7 00:00:39 2025 GMT
        Subject: CN=b03d965625c89417723e5c5ca70be7092c1c756d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f6:a2:e7:e4:dd:62:f3:3f:21:22:d2:af:a7:
                    80:55:75:26:4e:46:96:cf:7b:2c:47:1a:6f:aa:66:
                    13:4b:ee:a2:c3:73:0b:cc:ed:99:d6:99:f3:1c:e2:
                    11:24:ef:8e:37:44:36:35:3d:de:86:38:ad:3b:38:
                    f8:a9:a6:26:82:78:8e:6b:49:26:66:37:b5:51:75:
                    0c:c9:f0:86:b0:82:c9:d8:47:f8:c0:5a:7d:a7:e2:
                    f1:83:7b:99:ea:8f:d8:f0:c8:f9:41:64:12:bb:d2:
                    36:7f:f8:17:44:12:bd:51:db:9b:84:54:7c:04:40:
                    3e:aa:37:d8:68:8d:d4:0e:09:97:8f:82:64:db:aa:
                    65:ca:2e:b7:b5:da:22:68:1e:c4:b2:54:26:82:df:
                    cd:d9:26:1d:a7:01:c9:45:ab:52:be:96:55:7d:cf:
                    e9:a6:06:dd:b1:d1:ee:a7:3d:92:7e:26:c6:17:fe:
                    82:e7:9d:c0:97:e9:f7:9a:dc:17:97:d7:ae:70:fe:
                    42:20:9d:ac:b7:72:0c:e8:58:3a:b8:79:e9:0e:4d:
                    b8:46:1d:c2:3e:f6:a6:be:33:1a:50:2f:3f:8a:b9:
                    4e:f4:b6:f5:18:23:9c:73:b4:c8:d4:03:a1:fb:3d:
                    cc:24:75:4d:68:6d:16:91:94:54:f5:c3:4e:69:aa:
                    b6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3D:96:56:25:C8:94:17:72:3E:5C:5C:A7:0B:E7:09:2C:1C:75:6D
            X509v3 Authority Key Identifier:
                keyid:81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:43:d4:5e:81:4e:9c:d2:ea:78:2f:02:0e:f3:f0:db:72:72:
         58:c0:34:d0:af:46:8b:8e:f6:16:bf:38:c7:ea:20:bd:e6:4f:
         c9:3e:6f:8d:b0:24:ce:83:00:6f:c4:08:93:2c:c3:b1:51:bb:
         18:69:85:ec:43:96:a6:95:4d:72:07:fb:9c:c5:a7:a9:18:5d:
         7f:37:9c:3c:ee:26:40:47:b3:cc:e2:64:ef:f7:c5:85:03:3f:
         62:a8:c6:7c:f2:d1:c5:1f:1b:9f:3c:cb:a6:08:68:76:a3:07:
         e3:1a:2f:ab:8e:9a:fa:25:82:f9:75:1a:ab:d9:f4:ea:38:3c:
         05:87:0a:3d:fc:03:d5:a6:d4:68:30:11:b9:f4:16:4a:ec:04:
         72:06:bb:21:4f:31:c1:d1:d1:1c:50:e5:29:cd:6f:c5:de:2c:
         61:44:87:4c:01:83:80:94:26:ac:e0:db:23:bd:63:8e:e4:98:
         ba:a6:ad:6b:fd:d2:26:c6:ea:6a:34:77:3b:a3:6b:55:f9:d1:
         18:91:01:c9:cd:d3:4c:3f:b1:8c:cc:79:8a:1d:1c:f9:e2:69:
         99:24:ab:67:11:f1:98:a6:4f:18:b7:97:c3:cf:60:73:6c:d5:
         ff:71:94:fd:47:62:be:30:c1:45:6b:ba:ca:bb:db:c8:e0:fb:
         76:f2:1a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:07:05 2025 by rpki-client