This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
File:                     f8rYnfG_maNvKQzD7w8ee00CdTM.mft (raw, json)
Hash identifier:          sMVyf3No5LwbBUbdk3O1pNaZx5aP7HFKvASvTButSm0=
Subject key identifier:   E1:3C:C0:C7:31:E4:AD:FD:45:4A:15:0B:97:83:59:7C:BB:79:D9:29
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Certificate issuer:       /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial:       019B10EF33629BB778EF1CB2685B60CA6B9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
Manifest number:          174D
Signing time:             Fri 12 Dec 2025 05:01:10 +0000
Manifest this update:     Fri 12 Dec 2025 05:01:10 +0000
Manifest next update:     Sat 13 Dec 2025 05:01:10 +0000
Files and hashes:         1: 08MOvb96w4xsKgP9JS0zoI8sRTk.roa (hash: 8gdw/ohva2RMhv163mHOocjNP3BJgaz4YyRqUuNJ7fc=)
                          2: 2D749NTS5rsUM88WTokU4j35DFk.roa (hash: OdYrjeQoE7Y6O0peufvBGoL7G9BCb/mFSDo6H0HN/ds=)
                          3: 7tTd0Y2ZnKb8gxUeaW3ZD-Mb1Mc.roa (hash: Es9QZWARbJ6C98H+Xkn9OEO1buIXC30gN6Niopkz94k=)
                          4: M4W4uWryEo_HfddT_AlFpyx_-QU.roa (hash: ZQcu1jp7yrg3C7qwL3G3AXidULBmINV1yHbudKjEVWc=)
                          5: f8rYnfG_maNvKQzD7w8ee00CdTM.crl (hash: cneItLMEi6vDjhykQ2oFexs3HCXv+FXb9yDQogZQTE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:10:ef:33:62:9b:b7:78:ef:1c:b2:68:5b:60:ca:6b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
        Validity
            Not Before: Dec 12 05:01:10 2025 GMT
            Not After : Dec 13 05:01:10 2025 GMT
        Subject: CN=e13cc0c731e4adfd454a150b9783597cbb79d929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cd:47:58:09:66:43:99:e0:d0:dd:32:31:43:
                    ca:8f:9c:b8:a7:ec:cf:45:82:78:cd:46:d3:39:68:
                    4a:c4:ba:8c:c5:48:56:1f:72:9c:bd:08:30:e9:6e:
                    59:43:c6:23:db:63:f2:83:03:27:27:c3:5f:7a:a1:
                    ec:d0:00:cf:99:17:4a:8c:a3:4f:bd:c1:3d:a0:ad:
                    37:3f:0e:6a:75:4a:1d:ef:5b:d5:05:02:f2:23:51:
                    24:12:57:fa:a8:46:00:92:d7:b5:7d:dd:a7:e8:19:
                    c2:8f:93:f5:27:fb:2c:7f:ea:aa:82:7f:4d:41:e4:
                    a1:59:e1:4c:0e:2a:5c:a9:4f:a8:a6:e1:c2:21:19:
                    ca:af:0e:18:b5:26:51:c4:b7:0d:ad:11:f3:e4:9a:
                    1e:03:09:cc:c1:21:7b:72:13:b8:04:01:35:1b:71:
                    61:0c:42:32:8a:d6:66:24:53:08:a7:b2:5a:7b:30:
                    71:cb:b1:67:47:3b:c2:0e:2a:52:d3:63:4c:cc:46:
                    ab:bd:6b:7a:ab:cd:90:59:01:71:33:86:b9:16:53:
                    c1:ee:66:28:dc:7f:ae:8b:dd:f1:84:cc:84:b6:5d:
                    7c:d6:50:07:8b:1e:02:05:7d:ea:e7:cd:20:6b:e6:
                    df:dc:1f:8c:61:4b:d8:12:3c:f3:6a:63:76:30:c7:
                    07:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3C:C0:C7:31:E4:AD:FD:45:4A:15:0B:97:83:59:7C:BB:79:D9:29
            X509v3 Authority Key Identifier:
                keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d2:ae:ee:cc:fc:dd:74:02:52:51:eb:46:f8:f7:3a:34:1a:
         08:a7:b6:12:3f:3e:88:06:a4:92:e2:b8:2e:1d:33:4a:13:f8:
         46:e2:25:c7:00:69:11:a1:44:28:21:a9:c4:d0:4c:8b:dc:11:
         9c:d1:88:b1:fc:55:0a:79:4b:00:45:23:a1:12:76:37:d8:57:
         7b:f2:19:1b:90:5a:bd:f1:7c:8a:7e:0e:b4:0a:bf:54:3c:1a:
         44:2a:af:1f:ee:b8:2c:28:75:64:9e:c5:7e:3f:29:9e:c8:97:
         66:d2:69:8f:d9:19:00:38:b8:0c:a9:e0:0f:cb:fc:98:4d:66:
         bf:ab:07:53:77:ad:7f:8f:8e:4c:90:e0:09:7b:82:f7:26:10:
         8b:e5:c8:b5:d1:54:fc:71:ce:72:59:80:c8:b7:e6:97:77:a1:
         bb:c4:b9:56:4f:4b:33:5b:db:28:40:70:bd:2e:cf:f0:b1:19:
         7a:ba:e5:e6:7d:51:b8:fb:8d:d4:29:23:ef:d5:6a:b5:13:c5:
         18:a5:44:b1:8f:f2:b5:c2:f3:60:1b:56:07:3b:f3:5c:9d:0a:
         25:9a:63:92:50:e5:5f:9f:21:79:15:03:53:53:f9:00:f6:77:
         1b:24:98:77:05:1e:45:f7:3a:24:2c:1c:c4:24:9f:85:24:fc:
         e8:99:5a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 08:02:32 2025 by rpki-client