This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
File:                     f8rYnfG_maNvKQzD7w8ee00CdTM.mft (raw, json)
Hash identifier:          pMLagglWNOd904brNEhwoFlfaU2QRTgDBqQRIAHF03I=
Subject key identifier:   E1:C7:6E:3A:7C:98:D8:9D:55:E7:39:D7:B4:80:8C:C6:F5:25:14:51
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Certificate issuer:       /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial:       019B432545806CE16648D24504E8A6CA82AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
Manifest number:          1767
Signing time:             Sun 21 Dec 2025 23:01:14 +0000
Manifest this update:     Sun 21 Dec 2025 23:01:14 +0000
Manifest next update:     Mon 22 Dec 2025 23:01:14 +0000
Files and hashes:         1: 08MOvb96w4xsKgP9JS0zoI8sRTk.roa (hash: 8gdw/ohva2RMhv163mHOocjNP3BJgaz4YyRqUuNJ7fc=)
                          2: 2D749NTS5rsUM88WTokU4j35DFk.roa (hash: OdYrjeQoE7Y6O0peufvBGoL7G9BCb/mFSDo6H0HN/ds=)
                          3: 7tTd0Y2ZnKb8gxUeaW3ZD-Mb1Mc.roa (hash: Es9QZWARbJ6C98H+Xkn9OEO1buIXC30gN6Niopkz94k=)
                          4: M4W4uWryEo_HfddT_AlFpyx_-QU.roa (hash: ZQcu1jp7yrg3C7qwL3G3AXidULBmINV1yHbudKjEVWc=)
                          5: f8rYnfG_maNvKQzD7w8ee00CdTM.crl (hash: VU9HhuK/vuzYTecTWVSp+6COpg752b/34OacHnDE0pA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:43:25:45:80:6c:e1:66:48:d2:45:04:e8:a6:ca:82:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
        Validity
            Not Before: Dec 21 23:01:14 2025 GMT
            Not After : Dec 22 23:01:14 2025 GMT
        Subject: CN=e1c76e3a7c98d89d55e739d7b4808cc6f5251451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d8:7d:c4:60:25:1a:9c:bd:67:c0:dc:c5:c8:
                    bc:36:c8:58:0d:f8:6f:5d:1a:64:ff:4c:73:ad:18:
                    75:2a:c0:8e:03:80:6e:69:6e:a3:61:63:58:5c:67:
                    88:ef:ae:e0:12:76:a1:25:e8:d1:26:16:6b:10:d1:
                    b4:ff:bc:57:7a:59:33:73:0d:fc:7e:da:41:6c:c8:
                    c7:41:c1:f3:a1:31:ed:34:f7:93:24:10:3e:2c:92:
                    8d:08:0f:10:85:04:78:0a:9f:53:8f:a1:72:f3:a1:
                    86:be:21:22:1e:83:e6:cd:da:aa:fa:6b:7f:7f:76:
                    1a:62:e9:02:2f:16:16:c7:b1:93:a9:86:94:74:b8:
                    42:bd:2f:f7:02:06:b7:8d:5c:3e:fc:83:5a:29:ad:
                    45:ad:f4:bb:ac:3e:a2:e2:55:29:9b:4c:79:55:f7:
                    12:66:8c:ef:79:f5:2d:b3:f9:13:81:f3:21:f7:cb:
                    e7:44:f9:17:ed:09:f9:95:41:ec:60:ac:06:ab:11:
                    6d:2a:49:c2:1c:7f:7a:b4:03:9b:7f:10:04:d6:fc:
                    6c:df:2f:2b:31:bd:15:ea:09:fa:79:29:bf:3a:64:
                    03:f3:3c:44:da:05:cc:54:45:f5:50:55:a9:8b:b9:
                    aa:49:dd:b5:06:95:06:ce:37:f3:26:29:12:e4:8e:
                    b4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C7:6E:3A:7C:98:D8:9D:55:E7:39:D7:B4:80:8C:C6:F5:25:14:51
            X509v3 Authority Key Identifier:
                keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:b3:2a:f1:7f:75:dc:a0:10:6e:fe:f9:53:df:e8:19:5f:9e:
         89:0a:b0:6d:c2:c2:ad:8a:60:51:88:d7:19:4a:91:9c:19:b7:
         ee:13:9f:fd:0c:6c:23:df:03:6b:78:bf:3f:a5:49:f7:f0:29:
         9f:e5:6d:e7:c7:15:eb:d6:f4:00:eb:b7:ba:24:a6:21:cb:b5:
         30:8f:ed:ef:d0:c8:76:13:cc:ef:3b:27:84:27:0e:45:64:47:
         b9:84:b8:ff:c2:d1:6f:65:79:84:06:e9:06:47:27:1e:77:16:
         ff:35:52:d4:41:27:a0:95:3a:48:a3:89:ea:bd:26:38:e5:a0:
         58:f0:cc:b0:5f:d3:24:85:64:72:7e:bc:df:61:33:78:20:ff:
         65:19:b0:59:07:bf:73:9f:e2:e8:5e:1d:a4:bd:24:05:88:e8:
         47:bf:53:b7:9d:e0:d7:da:1f:14:74:6b:c1:24:d1:0d:d1:1e:
         b6:41:4f:95:89:84:c8:b3:cb:2e:26:ad:d8:f2:25:b4:75:78:
         c6:2b:97:fd:88:47:fc:b8:1c:bf:8b:50:b3:10:ea:9c:49:d6:
         61:44:f8:ab:55:40:81:2a:3d:3c:f9:79:da:aa:84:40:9d:f1:
         78:c1:96:07:2a:55:ab:ea:71:96:cc:cf:da:e5:7f:1b:6a:6b:
         8c:91:cb:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtDJUWAbOFmSNJFBOimyoKrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmY2FkODlkZjFiZjk5YTM2ZjI5MGNjM2VmMGYxZTdiNGQw
Mjc1MzMwHhcNMjUxMjIxMjMwMTE0WhcNMjUxMjIyMjMwMTE0WjAzMTEwLwYDVQQD
EyhlMWM3NmUzYTdjOThkODlkNTVlNzM5ZDdiNDgwOGNjNmY1MjUxNDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9h9xGAlGpy9Z8Dcxci8NshYDfhv
XRpk/0xzrRh1KsCOA4BuaW6jYWNYXGeI767gEnahJejRJhZrENG0/7xXelkzcw38
ftpBbMjHQcHzoTHtNPeTJBA+LJKNCA8QhQR4Cp9Tj6Fy86GGviEiHoPmzdqq+mt/
f3YaYukCLxYWx7GTqYaUdLhCvS/3Aga3jVw+/INaKa1FrfS7rD6i4lUpm0x5VfcS
ZozvefUts/kTgfMh98vnRPkX7Qn5lUHsYKwGqxFtKknCHH96tAObfxAE1vxs3y8r
Mb0V6gn6eSm/OmQD8zxE2gXMVEX1UFWpi7mqSd21BpUGzjfzJikS5I60IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHHbjp8mNidVec517SAjMb1JRRRMB8GA1UdIwQY
MBaAFH/K2J3xv5mjbykMw+8PHntNAnUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjhyWW5mR19tYU52S1F6RDd3OGVlMDBDZFRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85ZjhiMTYtMjg0Zi00NTEyLWIzZGMt
MDE1ZDlmMWI0YjUwLzEvZjhyWW5mR19tYU52S1F6RDd3OGVlMDBDZFRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85ZjhiMTYtMjg0Zi00NTEyLWIzZGMtMDE1ZDlmMWI0YjUw
LzEvZjhyWW5mR19tYU52S1F6RDd3OGVlMDBDZFRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7Mq8X91
3KAQbv75U9/oGV+eiQqwbcLCrYpgUYjXGUqRnBm37hOf/QxsI98Da3i/P6VJ9/Ap
n+Vt58cV69b0AOu3uiSmIcu1MI/t79DIdhPM7zsnhCcORWRHuYS4/8LRb2V5hAbp
BkcnHncW/zVS1EEnoJU6SKOJ6r0mOOWgWPDMsF/TJIVkcn6832EzeCD/ZRmwWQe/
c5/i6F4dpL0kBYjoR79Tt53g19ofFHRrwSTRDdEetkFPlYmEyLPLLiat2PIltHV4
xiuX/YhH/Lgcv4tQsxDqnEnWYUT4q1VAgSo9PPl52qqEQJ3xeMGWBypVq+pxlszP
2uV/G2prjJHLrw==
-----END CERTIFICATE-----
Generated at Mon Dec 22 04:23:01 2025 by rpki-client