This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
File:                     GgAddwJfBSr30OYuFwEBa54i4AI.mft (raw, json)
Hash identifier:          yA0zMmCN3D/trfiN+kPdaRnyJmi3zg9HHlo9AGKD5ik=
Subject key identifier:   C7:89:C2:FB:92:16:99:BC:55:F8:8B:53:E3:F9:C4:A7:A5:36:E2:C6
Authority key identifier: 1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
Certificate issuer:       /CN=1a001d77025f052af7d0e62e1701016b9e22e002
Certificate serial:       019AF3524A6ABE60DF53E022DF540D0622B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
Manifest number:          1764
Signing time:             Sat 06 Dec 2025 11:00:47 +0000
Manifest this update:     Sat 06 Dec 2025 11:00:47 +0000
Manifest next update:     Sun 07 Dec 2025 11:00:47 +0000
Files and hashes:         1: GgAddwJfBSr30OYuFwEBa54i4AI.crl (hash: cNbVpgTTdYwBSiAQb1auX7B/j5AUY/WT48jNd/vQkDw=)
                          2: _iJsde6qyC_6NAOojw9ckyW4I9Y.roa (hash: eA5RMaI/PSYqnEOMngz7pUxZUouDRioQk9k6T7VnnHw=)
                          3: itzE0xDc7Ed_isK4AHpghv2Rwx0.roa (hash: hFMUWP8HSIa3jUGL4S6vwaZpg8RitcYR7NXIvfp8JAE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 11:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:4a:6a:be:60:df:53:e0:22:df:54:0d:06:22:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a001d77025f052af7d0e62e1701016b9e22e002
        Validity
            Not Before: Dec  6 11:00:47 2025 GMT
            Not After : Dec  7 11:00:47 2025 GMT
        Subject: CN=c789c2fb921699bc55f88b53e3f9c4a7a536e2c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:7b:e5:a3:38:f8:4b:8a:d1:67:93:70:1c:93:
                    7e:74:10:61:fa:24:fb:3a:5c:67:17:4d:3a:71:d6:
                    dc:76:22:e6:6a:d1:a1:ae:7a:a6:98:69:af:6e:60:
                    92:dd:cb:9c:f3:3d:27:98:67:37:3e:38:42:2a:6a:
                    42:91:6d:f9:df:c3:1b:77:dd:74:74:67:50:97:1d:
                    69:aa:d7:76:4f:4d:39:3d:c8:07:05:0b:d3:92:cf:
                    05:c1:63:4c:ca:18:e0:27:80:bf:71:3d:27:4a:fe:
                    86:02:a1:71:90:ee:71:3c:f0:c8:eb:c2:df:9d:0b:
                    20:90:8f:3f:7e:6e:90:2d:1c:c4:52:5a:0f:51:67:
                    cd:d8:c0:de:09:54:58:90:84:af:12:6b:4c:00:09:
                    1c:d5:c1:dc:bc:14:ed:38:7f:a1:8f:42:17:e5:03:
                    3e:06:5b:71:f0:af:6b:74:f1:33:ba:5c:32:cc:10:
                    b8:b9:af:5a:cb:e5:65:b3:ff:df:d2:1b:9e:43:13:
                    0b:64:cb:57:00:55:e2:01:22:53:cf:04:5e:4a:5b:
                    9b:9f:eb:c6:00:81:56:a5:6f:e0:f1:ae:6e:31:01:
                    2a:e3:40:98:4f:f1:13:ff:9b:05:d5:b1:ae:35:a3:
                    57:d7:ec:ac:97:85:14:5b:19:b1:3e:9e:16:71:c9:
                    38:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:89:C2:FB:92:16:99:BC:55:F8:8B:53:E3:F9:C4:A7:A5:36:E2:C6
            X509v3 Authority Key Identifier:
                keyid:1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:21:01:0f:c3:07:42:5f:64:ba:54:43:f4:26:34:6b:24:6a:
         08:f9:8d:ec:3f:61:aa:50:d3:28:57:ad:25:52:20:64:1c:ff:
         bd:96:f2:57:b4:53:80:75:42:79:06:4d:b6:db:12:a3:de:4e:
         9e:ec:6d:5b:47:f5:ea:ce:c0:55:0d:3d:89:78:89:1c:71:e2:
         93:78:e3:a5:3f:f7:00:4c:73:6c:61:71:0e:75:4e:ad:f9:18:
         81:4e:8d:41:38:d7:2e:4e:0f:b1:73:c7:95:fe:80:fe:ff:d4:
         5d:a9:ce:e3:42:bb:53:d3:90:6f:33:76:95:74:9b:8c:fc:87:
         f7:41:e1:b4:f0:0f:4b:a8:bf:c8:bf:34:27:22:d9:4f:69:07:
         bf:63:4f:46:e1:4d:bc:0c:78:80:ba:95:97:59:f9:a5:d5:51:
         91:2f:ec:8f:b2:29:83:7f:00:79:94:9f:2b:b5:60:04:b7:55:
         94:a4:79:99:76:58:0c:6f:72:cb:d6:98:d9:2f:48:4a:fe:0a:
         ec:a7:cf:70:f7:cf:ee:16:56:a5:b9:3e:02:33:79:52:a1:86:
         69:f5:ea:19:1f:c6:23:b9:5b:35:0c:46:9e:b5:86:04:2c:98:
         89:60:88:12:8b:07:5f:a3:31:17:9d:d0:8b:2f:12:34:bd:5e:
         4f:88:7e:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzUkpqvmDfU+Ai31QNBiK2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMDAxZDc3MDI1ZjA1MmFmN2QwZTYyZTE3MDEwMTZiOWUy
MmUwMDIwHhcNMjUxMjA2MTEwMDQ3WhcNMjUxMjA3MTEwMDQ3WjAzMTEwLwYDVQQD
EyhjNzg5YzJmYjkyMTY5OWJjNTVmODhiNTNlM2Y5YzRhN2E1MzZlMmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Hvlozj4S4rRZ5NwHJN+dBBh+iT7
OlxnF006cdbcdiLmatGhrnqmmGmvbmCS3cuc8z0nmGc3PjhCKmpCkW3538Mbd910
dGdQlx1pqtd2T005PcgHBQvTks8FwWNMyhjgJ4C/cT0nSv6GAqFxkO5xPPDI68Lf
nQsgkI8/fm6QLRzEUloPUWfN2MDeCVRYkISvEmtMAAkc1cHcvBTtOH+hj0IX5QM+
Bltx8K9rdPEzulwyzBC4ua9ay+Vls//f0hueQxMLZMtXAFXiASJTzwReSlubn+vG
AIFWpW/g8a5uMQEq40CYT/ET/5sF1bGuNaNX1+ysl4UUWxmxPp4Wcck4RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeJwvuSFpm8VfiLU+P5xKelNuLGMB8GA1UdIwQY
MBaAFBoAHXcCXwUq99DmLhcBAWueIuACMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2dBZGR3SmZCU3IzME9ZdUZ3RUJhNTRpNEFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8xZjljZWQtNmJjMi00ODZiLWE0YjYt
MDliZGViNmFmYWJkLzEvR2dBZGR3SmZCU3IzME9ZdUZ3RUJhNTRpNEFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8xZjljZWQtNmJjMi00ODZiLWE0YjYtMDliZGViNmFmYWJk
LzEvR2dBZGR3SmZCU3IzME9ZdUZ3RUJhNTRpNEFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciEBD8MH
Ql9kulRD9CY0ayRqCPmN7D9hqlDTKFetJVIgZBz/vZbyV7RTgHVCeQZNttsSo95O
nuxtW0f16s7AVQ09iXiJHHHik3jjpT/3AExzbGFxDnVOrfkYgU6NQTjXLk4PsXPH
lf6A/v/UXanO40K7U9OQbzN2lXSbjPyH90HhtPAPS6i/yL80JyLZT2kHv2NPRuFN
vAx4gLqVl1n5pdVRkS/sj7Ipg38AeZSfK7VgBLdVlKR5mXZYDG9yy9aY2S9ISv4K
7KfPcPfP7hZWpbk+AjN5UqGGafXqGR/GI7lbNQxGnrWGBCyYiWCIEosHX6MxF53Q
iy8SNL1eT4h+1w==
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:24:35 2025 by rpki-client