This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
File:                     m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft (raw, json)
Hash identifier:          sxX0jPkxiIxKmiM+TjK1bHWrwUQJinX4oFCajzx8uZU=
Subject key identifier:   D0:8E:D1:97:2E:F2:A8:64:1C:C4:EF:DE:B6:80:5C:6A:1C:07:1A:CB
Authority key identifier: 9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3
Certificate issuer:       /CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
Certificate serial:       019B0E255308706D07CF647CC9E0218BF026
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
Manifest number:          1284
Signing time:             Thu 11 Dec 2025 16:01:25 +0000
Manifest this update:     Thu 11 Dec 2025 16:01:25 +0000
Manifest next update:     Fri 12 Dec 2025 16:01:25 +0000
Files and hashes:         1: 7kSoyCwS51Z99WFt9PFCATkixn8.roa (hash: YO8XFXWWJme9Ue9ZQYiu3rdgg2SuRg7amStm9PGC74I=)
                          2: A_x0lNCWfe35wqNn6JvNeRpzd_0.roa (hash: /J2aFcuVtqs0fxncL/uPU2qtngVaDUhWB5vaK8uf1CI=)
                          3: KpoJychajtxAMst2lNotjhOxrMI.roa (hash: X/JCLmAOExberdE56mUL9dRTSb/Mkf0OWMnUpBxfmmM=)
                          4: fwe15V3gbUwWh6q8fCfCPzZQDm8.roa (hash: z+s0N2irfFNbej65WJ0ONMjnTWiNWLahh/93F4XH3s4=)
                          5: m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl (hash: 3n9L8QT96Qkwp02TvITAmDp9vMNbBRfHI7SqqSSWMmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 16:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0e:25:53:08:70:6d:07:cf:64:7c:c9:e0:21:8b:f0:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
        Validity
            Not Before: Dec 11 16:01:25 2025 GMT
            Not After : Dec 12 16:01:25 2025 GMT
        Subject: CN=d08ed1972ef2a8641cc4efdeb6805c6a1c071acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:aa:3f:d4:68:f1:3d:b8:9f:7d:68:48:14:52:
                    b1:2b:89:76:77:02:4a:d7:12:01:e2:83:cb:82:60:
                    47:3f:fb:5e:ea:fa:43:2a:5f:31:95:29:a6:44:e8:
                    c6:aa:0d:f2:1b:96:65:0d:08:35:e8:34:f1:cf:6a:
                    bb:16:32:88:12:4c:ff:e5:97:d4:70:a5:cd:b3:8f:
                    ff:3f:77:2f:d2:ef:19:f6:7a:1b:a4:3d:62:40:3e:
                    3e:36:bb:e1:c9:ec:99:2f:2c:60:b7:df:d3:e8:b3:
                    ac:3e:40:88:2c:fc:19:e3:35:bd:15:a2:4d:82:7d:
                    c3:37:06:1f:a5:f9:39:c3:a9:11:61:4b:ae:e5:62:
                    5f:f2:28:98:a5:74:54:a5:49:3b:03:ba:db:ca:44:
                    c6:0b:8c:9e:f2:c7:fc:d5:5f:ed:e0:f5:f1:0b:70:
                    50:03:a0:0f:d2:ae:3a:52:4b:0f:c3:3d:9a:c0:b3:
                    ae:f8:0f:39:1e:2a:05:11:11:e1:10:be:9f:b2:fa:
                    da:8a:54:7f:fe:a0:2d:ab:33:ae:ea:65:54:72:4c:
                    e9:a8:fa:6c:cc:84:8e:50:38:d9:64:10:c6:35:3a:
                    bc:2d:86:16:d2:18:b5:c0:06:2f:9f:e9:a0:6a:b2:
                    fe:8a:ef:46:ae:c5:59:33:f4:46:13:8c:c0:75:b1:
                    04:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8E:D1:97:2E:F2:A8:64:1C:C4:EF:DE:B6:80:5C:6A:1C:07:1A:CB
            X509v3 Authority Key Identifier:
                keyid:9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c2:d8:c8:50:91:07:a4:a9:f5:55:89:dd:ff:a5:f6:63:ef:
         93:6c:be:13:59:b9:df:41:46:52:7c:6a:f0:b7:33:4d:09:2c:
         79:95:92:0f:93:83:1e:8b:ef:b4:f8:90:26:4a:b4:35:29:93:
         d8:04:ae:10:91:19:0d:de:2a:20:e6:47:de:bc:e1:23:38:00:
         e4:c1:0a:ef:19:5e:f0:39:32:80:96:db:de:35:c2:84:80:d7:
         ae:f7:24:1e:d4:71:5f:b6:ed:9c:8f:6e:23:f2:8a:08:2c:2f:
         9a:11:94:70:d1:f7:3d:b0:13:b8:5d:06:02:f4:a4:a2:53:10:
         f0:de:15:16:d4:83:dd:4c:0a:92:7f:78:99:bc:07:08:ce:08:
         57:e3:01:50:bc:71:b7:aa:ac:7e:08:bc:bd:a4:7a:f4:67:04:
         cf:73:80:e6:8a:27:4b:02:28:0a:3b:da:54:e3:12:d6:27:75:
         f0:1d:25:7d:fd:45:ac:dd:46:54:19:ec:ba:dd:fc:df:ca:3d:
         cf:4a:49:44:27:d4:3f:1c:6d:b6:8d:04:88:35:51:00:68:5e:
         d6:18:43:0f:25:cc:37:25:09:62:84:ee:4d:ff:37:b0:d5:52:
         c4:5a:11:fa:31:2d:f8:bc:c0:8f:48:b8:82:21:10:c2:cd:b8:
         d6:cc:48:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 01:26:16 2025 by rpki-client