This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft
File:                     V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft (raw, json)
Hash identifier:          pP/E7AEhLIzPvGT15X2UAoTMLfSBwrtfu5No05iI9t0=
Subject key identifier:   4C:80:DD:E9:1D:80:44:00:33:8D:37:20:9D:D7:E7:50:8C:2C:E9:40
Authority key identifier: 57:C0:BD:9F:83:31:EA:84:38:FD:2A:2F:67:1B:71:AF:4A:2D:EC:17
Certificate issuer:       /CN=57c0bd9f8331ea8438fd2a2f671b71af4a2dec17
Certificate serial:       019AFBE77F4C07A5357E44E516D4F09976A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft
Manifest number:          08C3
Signing time:             Mon 08 Dec 2025 03:00:43 +0000
Manifest this update:     Mon 08 Dec 2025 03:00:43 +0000
Manifest next update:     Tue 09 Dec 2025 03:00:43 +0000
Files and hashes:         1: 0MC1362R9lRRGpq84ZgFyJggIsA.roa (hash: 2oe5jKK2VDNOSC6ja+1wPu+cY+lyRN63lTJAf4/SoR0=)
                          2: V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.crl (hash: HcM76r7rQ+BYDa3fBagGkL8cx3Anu9l47wpXLtp6N74=)
                          3: hxG-StCBPxemsj2qpKGT4GGzhQk.roa (hash: MYz1XQtFxhUeNPc3mCJTjKjV6pO6a8sxO3y4ixSgakg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:fb:e7:7f:4c:07:a5:35:7e:44:e5:16:d4:f0:99:76:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c0bd9f8331ea8438fd2a2f671b71af4a2dec17
        Validity
            Not Before: Dec  8 03:00:43 2025 GMT
            Not After : Dec  9 03:00:43 2025 GMT
        Subject: CN=4c80dde91d804400338d37209dd7e7508c2ce940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a3:0b:86:ea:cb:24:89:93:0c:04:ee:26:2f:
                    b5:54:1d:ab:0f:e2:ce:08:8f:b2:e7:da:61:e6:d2:
                    84:b6:30:ae:4d:fb:95:37:a1:7e:a8:d6:a8:bd:70:
                    35:8a:82:ae:d0:7a:27:dc:c2:71:1c:f3:bc:87:6a:
                    e6:7e:4f:b4:fe:80:e8:80:aa:98:aa:33:23:d0:84:
                    69:13:82:b6:e2:07:de:81:00:e7:9f:58:3f:18:1d:
                    e8:5c:49:c6:f6:b2:f6:15:96:fd:32:76:52:11:5d:
                    37:dd:e7:67:3e:98:cb:b3:16:da:e7:ed:50:a1:e6:
                    ed:4e:75:5d:8e:ed:26:89:90:f1:55:b1:ea:28:73:
                    f0:42:a5:31:7e:12:94:91:1a:88:b4:20:e7:3d:a5:
                    c8:9e:63:1d:1e:da:a8:41:48:cd:47:4a:75:1c:a0:
                    49:af:b5:f8:04:a0:80:c9:b5:20:d4:13:7a:d6:72:
                    70:13:1f:94:07:8b:98:83:b2:8e:66:2b:01:9f:ad:
                    29:52:e7:27:d8:ed:61:ce:c6:c2:ed:0f:15:db:73:
                    d0:5f:93:65:5e:b5:72:08:21:73:85:7a:26:a7:ab:
                    bb:15:9e:8f:52:f5:ca:ad:3f:93:d5:66:02:f2:0f:
                    3e:44:e2:46:08:cd:74:82:ae:10:ab:5e:23:22:e4:
                    e7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:80:DD:E9:1D:80:44:00:33:8D:37:20:9D:D7:E7:50:8C:2C:E9:40
            X509v3 Authority Key Identifier:
                keyid:57:C0:BD:9F:83:31:EA:84:38:FD:2A:2F:67:1B:71:AF:4A:2D:EC:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:42:c0:69:ab:c7:25:a7:82:7e:aa:1f:4e:e6:c1:85:bf:5d:
         74:fc:42:50:b8:23:f9:6b:1b:a5:5b:2e:48:44:1d:b3:cf:1e:
         4b:05:ce:66:84:ef:2e:1f:f9:47:21:96:d4:5a:97:2e:d1:fc:
         90:67:65:8d:bd:ae:c0:dd:ba:cd:61:6a:4d:b9:e0:fc:84:7a:
         24:b4:3b:9b:fd:0d:67:ff:d7:6d:92:d8:14:ef:79:1d:2f:78:
         1a:31:5d:ed:33:e5:f8:bf:3c:75:cb:17:51:c3:5b:e0:ad:ec:
         1b:ed:25:be:94:55:4b:89:9c:13:31:3d:61:c5:ae:6e:93:51:
         ae:53:5b:9c:93:f4:e0:5a:59:4c:5c:88:8f:f9:be:1b:e3:28:
         68:38:56:60:c7:4e:fd:e5:d1:86:c7:cc:e1:bf:70:4f:c0:65:
         45:62:0e:ca:fd:ff:7c:61:e5:9e:aa:77:31:42:e4:14:2a:ba:
         07:1c:0a:cf:a1:83:f9:95:d5:79:8e:97:ae:98:19:53:f9:e2:
         2f:75:13:04:19:0d:32:91:99:22:30:ec:8c:39:47:17:ec:3b:
         ba:89:30:a4:94:7e:b8:27:df:a8:4b:55:af:0a:aa:2f:72:2d:
         49:22:96:19:c6:af:02:2d:d1:0e:41:a4:37:ac:0b:68:a7:25:
         8d:29:3b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 10:38:09 2025 by rpki-client