This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
File:                     8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft (raw, json)
Hash identifier:          b3lCgVc6EQOsiXWU4DeqTuKKQwZnBEIwQhcNfxEZL24=
Subject key identifier:   AA:90:CF:CD:A9:3F:2E:F9:3B:3A:07:5E:49:7D:11:5E:1A:AD:E3:F7
Authority key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
Certificate issuer:       /CN=f3211d2ecd60924ef2276f86939b070c0081574b
Certificate serial:       019B0F00661DCAD11AF3A744F4D872228249
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
Manifest number:          0366
Signing time:             Thu 11 Dec 2025 20:00:42 +0000
Manifest this update:     Thu 11 Dec 2025 20:00:42 +0000
Manifest next update:     Fri 12 Dec 2025 20:00:42 +0000
Files and hashes:         1: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl (hash: CSsWESbL86C6nLb2/qCsQjuaBUwhC8mPUL9q0jT5wzw=)
                          2: J84DjEhi_gEyD8-a87brecsYsNM.roa (hash: A66a3xMstZT0T3ni5nfFwwrP4QVYA3zVnvHKSfI3TDI=)
                          3: yitip1-kJD5dQRdS53t4KfkARHM.roa (hash: cgy9OckdIOJNSQ5+HtqFQg4ACHdIPiP47DMcF7GV8yY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0f:00:66:1d:ca:d1:1a:f3:a7:44:f4:d8:72:22:82:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3211d2ecd60924ef2276f86939b070c0081574b
        Validity
            Not Before: Dec 11 20:00:42 2025 GMT
            Not After : Dec 12 20:00:42 2025 GMT
        Subject: CN=aa90cfcda93f2ef93b3a075e497d115e1aade3f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:04:55:a4:63:58:59:6d:64:f2:89:f0:17:58:
                    bd:8e:b1:a8:26:6f:62:2b:72:f3:c9:c1:f5:a8:74:
                    15:d2:04:9c:c3:16:81:33:14:95:07:bf:29:75:1f:
                    bb:35:bb:ea:e2:9a:95:42:10:07:d3:28:2b:59:e4:
                    8f:e1:74:48:28:b7:a0:46:82:3f:21:fa:f3:39:29:
                    9f:c7:bf:ad:f3:22:2c:28:3d:94:36:ed:30:14:03:
                    50:24:97:72:31:31:2b:38:8e:a6:db:e3:41:c2:72:
                    78:c7:81:2c:72:e3:21:20:f3:62:ac:1c:bf:ee:68:
                    8c:cd:80:54:c8:70:0b:5e:50:3b:04:1c:f9:3d:24:
                    dc:f7:fc:c8:8a:41:16:43:11:26:d8:05:d5:6f:88:
                    ac:96:dc:ed:da:a2:f5:81:d4:8e:e6:08:37:2f:98:
                    9b:21:56:0d:28:8a:e3:13:ee:1f:a0:2f:93:3c:9f:
                    2f:0a:9b:a9:1e:f4:c0:92:2d:9f:a1:56:cd:c9:2b:
                    ac:be:2e:97:01:07:cc:e2:b0:3f:45:65:ba:55:d0:
                    1f:10:3d:aa:a0:dc:10:98:6f:f5:4e:07:82:10:6c:
                    a6:ab:d3:6d:b7:08:82:18:81:80:c6:41:01:bc:bf:
                    1a:a3:87:ee:a3:fb:5f:8c:c7:bb:8a:b8:d0:8f:2f:
                    67:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:90:CF:CD:A9:3F:2E:F9:3B:3A:07:5E:49:7D:11:5E:1A:AD:E3:F7
            X509v3 Authority Key Identifier:
                keyid:F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:7b:13:b5:86:88:24:ce:23:e6:d3:34:3a:16:3e:a0:43:da:
         bd:0d:b4:05:c1:7c:5c:66:1d:2a:11:fa:bf:63:e9:17:90:91:
         cd:c6:ea:a4:20:62:45:97:da:0a:48:4f:48:99:36:0d:3e:34:
         3f:ef:9d:b4:f2:93:84:38:18:20:15:bf:cc:ea:87:d4:2b:d4:
         99:4b:48:cc:d2:ae:f3:0a:91:8a:1b:b6:fe:54:02:07:e2:b8:
         8b:32:b9:ae:34:81:cf:e6:a9:a2:95:dd:f4:8d:e6:58:76:98:
         a5:e8:9d:18:6b:9f:c3:dc:ea:f3:9e:fa:98:4e:2b:10:73:f8:
         2d:81:88:58:a2:73:d7:c5:16:7e:b0:f9:4a:7e:b2:de:16:6c:
         94:31:70:0f:c9:c4:16:06:25:df:5e:f5:7b:d8:ad:94:b2:f9:
         58:af:db:f5:97:f6:61:6b:ad:5f:50:6d:68:fa:cc:9d:29:1b:
         87:c4:01:0c:4d:63:62:99:29:58:eb:a0:16:ac:39:ae:19:e2:
         5a:2b:ea:22:46:03:e4:72:2f:02:ce:c7:4b:13:89:c0:00:b8:
         26:c0:e5:31:5c:15:28:68:9c:41:7f:5d:21:47:88:92:bc:e4:
         97:5f:86:38:9f:f3:98:c1:71:14:6b:c6:0d:ef:b1:a1:66:fa:
         10:6e:bb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 23:56:29 2025 by rpki-client