This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
File:                     8yvpggYKQ3NNCtEmrUbaLzlcne8.mft (raw, json)
Hash identifier:          uWlCXehj/A6taQoLt8mvgzhnqza0mQBoDLI0TOPzWWk=
Subject key identifier:   5C:AB:A1:FE:5B:22:9D:45:FC:7A:9C:61:C7:F1:DB:5A:6D:12:54:50
Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
Certificate issuer:       /CN=f32be982060a43734d0ad126ad46da2f395c9def
Certificate serial:       019B1C85191EEEBED3FD78E5F8D489B0333A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
Manifest number:          177E
Signing time:             Sun 14 Dec 2025 11:00:43 +0000
Manifest this update:     Sun 14 Dec 2025 11:00:43 +0000
Manifest next update:     Mon 15 Dec 2025 11:00:43 +0000
Files and hashes:         1: 8yvpggYKQ3NNCtEmrUbaLzlcne8.crl (hash: AL3Xlb2f8+ILlVKdQFb8EsdBcYvZyx0tY53RjU1Acu8=)
                          2: _ez--C0KRSwSRmH4lyGu5zUk1HU.roa (hash: KFrEJZmjOcmfSBpY7GDcoqxz0mSObldiNHL67FlKf8w=)
                          3: bHl4gP55LgKhhE_L1xho4xppPEo.roa (hash: rqcbN4+Al2DH9m3ppJi1E488vxtH8t3M86sJsdVuXgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 11:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1c:85:19:1e:ee:be:d3:fd:78:e5:f8:d4:89:b0:33:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def
        Validity
            Not Before: Dec 14 11:00:43 2025 GMT
            Not After : Dec 15 11:00:43 2025 GMT
        Subject: CN=5caba1fe5b229d45fc7a9c61c7f1db5a6d125450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:42:37:18:86:d0:67:59:a2:8e:a1:6f:ae:c2:
                    aa:a8:88:ed:17:3c:68:9b:1e:f9:f9:23:a9:4d:ab:
                    34:64:c5:d5:fa:8e:36:e8:b2:2d:da:01:c0:b2:a1:
                    b9:1e:cd:e2:2a:b3:34:08:39:ec:e7:fd:6a:d3:97:
                    bd:78:29:a4:47:47:3d:1e:2d:d6:98:0d:e1:d0:4c:
                    b8:5a:ec:80:48:7b:b1:d4:d0:7b:15:0d:aa:77:70:
                    75:66:ca:f5:50:81:d7:65:a5:f9:87:00:97:59:7d:
                    29:4e:04:bd:c3:55:97:20:51:db:80:52:69:17:5c:
                    61:2b:e9:0a:3c:03:47:d6:41:f7:fa:35:71:08:8f:
                    6f:31:aa:c5:38:58:14:07:5e:bd:a0:23:a5:09:c8:
                    cd:a1:20:2d:35:03:94:a0:36:b1:37:5d:76:6f:b2:
                    ad:b7:18:b0:28:f7:80:38:e4:2e:c1:ec:08:9f:f8:
                    f1:a9:30:68:f6:6b:2e:8c:e5:0b:51:1a:2b:f2:3e:
                    04:f8:4b:1a:1e:39:ce:6b:d4:27:57:37:38:c4:7a:
                    f7:7f:cf:ef:e0:3b:f0:1d:95:e1:6d:f7:3e:be:ec:
                    b5:90:5a:e2:d6:21:eb:ef:0d:d8:02:4e:a2:b6:88:
                    da:95:9e:8d:15:3c:94:8b:5f:fd:45:85:d4:50:f4:
                    0a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AB:A1:FE:5B:22:9D:45:FC:7A:9C:61:C7:F1:DB:5A:6D:12:54:50
            X509v3 Authority Key Identifier:
                keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c9:88:de:c3:a4:e2:7b:10:42:c4:3b:32:9e:20:a1:b1:e5:
         42:e2:73:b9:9d:f3:75:b2:f8:bc:a5:d7:aa:6f:1a:12:53:a5:
         0d:ba:79:11:c1:34:4c:b5:15:5c:0a:1c:73:de:95:ac:b5:95:
         3f:fb:05:db:7f:02:39:ae:39:e9:6b:e1:50:9a:af:7f:db:82:
         b4:0e:fe:88:cf:0e:32:ae:0e:75:4e:f5:31:5f:c4:5f:03:e1:
         d5:9d:2c:25:00:74:34:a6:e8:3a:26:df:37:0f:27:46:45:ac:
         df:d0:f5:d0:71:16:35:c4:b0:76:df:47:ec:10:c9:70:a4:f8:
         34:a1:36:d2:82:c0:bc:9c:c7:8b:23:0f:01:f1:5e:17:88:90:
         44:b1:71:17:81:d6:fc:5a:46:3c:61:28:a3:0e:bb:ca:36:d1:
         db:e5:9a:0c:7f:50:f3:e7:1e:af:50:36:10:e8:ee:0b:db:cd:
         8a:82:5c:0c:95:95:7a:14:e1:fd:0c:69:af:37:9d:c8:87:9c:
         c5:ce:c9:3e:a2:18:1b:63:6d:af:1e:29:30:e0:1d:31:1a:dd:
         0e:ef:0e:08:9d:60:35:a7:dc:62:59:92:bc:2d:01:24:a6:ed:
         f4:18:5b:53:70:79:14:f7:f1:5e:76:20:64:ab:52:48:45:a0:
         91:0d:8c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 21:37:03 2025 by rpki-client