This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File:                     B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier:          inOiWuGSSh10CH1cOanMIRgxmBnSHAs1VtiC3JuMEIA=
Subject key identifier:   DE:06:EB:95:E0:FC:B6:E8:F3:E3:B1:04:1C:B5:30:11:46:9C:34:D1
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer:       /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial:       019B217531C62C6C39302952F5D86FAE9771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number:          0E21
Signing time:             Mon 15 Dec 2025 10:01:27 +0000
Manifest this update:     Mon 15 Dec 2025 10:01:27 +0000
Manifest next update:     Tue 16 Dec 2025 10:01:27 +0000
Files and hashes:         1: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: pEZnppi38EoCU+nrALCMq9iCuFQUP5kUPDU18v4hVNA=)
                          2: f8mNy-1avonS_WiVxLnjQLPSSV8.roa (hash: Zx+TLSuG3LLevKeGkpvoHFC+rwTqCzGzO/bzI3CHmxw=)
                          3: s6pjMkaUMJH3bmFXp69HLkN6HiA.roa (hash: nbZzfTGEGLYlrEJQFB74A8uRuG/tPptj9lY9KUc17PU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 10:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:21:75:31:c6:2c:6c:39:30:29:52:f5:d8:6f:ae:97:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
        Validity
            Not Before: Dec 15 10:01:27 2025 GMT
            Not After : Dec 16 10:01:27 2025 GMT
        Subject: CN=de06eb95e0fcb6e8f3e3b1041cb53011469c34d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:86:2c:9a:0b:4d:78:ed:4b:c9:c4:4f:e3:91:
                    69:88:57:8c:7f:d8:e8:2d:a3:c5:ac:81:7c:18:70:
                    db:5b:ef:b5:25:71:ff:f9:e2:8d:0d:9f:9c:2d:cf:
                    a8:77:45:3a:d7:3e:90:cd:ce:09:3b:75:a1:5a:c6:
                    3a:68:31:89:6d:02:19:7d:1f:0e:13:a0:aa:b6:85:
                    b4:94:21:41:d8:ab:84:bc:cd:fd:c3:7a:96:60:3f:
                    ab:b5:11:78:89:d0:e7:d8:69:fd:f6:9f:59:08:58:
                    b6:dc:2e:b4:35:c8:45:26:51:14:72:c8:81:ee:c6:
                    14:fd:5a:b9:26:d9:48:8f:f6:94:f1:4b:85:3f:e6:
                    d0:4b:b9:04:19:0a:dc:99:47:ab:fb:7a:51:e3:bf:
                    d5:c9:bb:20:80:e0:0e:f0:f0:53:f7:db:f9:77:61:
                    51:f6:5e:fb:41:9c:8d:45:4b:d5:0d:02:37:8c:2c:
                    a4:31:6b:4f:88:aa:bb:30:24:ad:24:43:54:90:e8:
                    e9:0f:54:30:33:75:7b:47:6e:f8:0a:e0:1e:25:81:
                    76:06:76:03:b7:23:fd:f8:0a:ca:fd:15:44:5d:c1:
                    d1:e3:da:5b:b1:20:ee:07:29:01:bf:94:4f:62:02:
                    97:15:ad:9b:1e:2c:6d:77:ef:ea:97:65:35:1b:68:
                    4f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:06:EB:95:E0:FC:B6:E8:F3:E3:B1:04:1C:B5:30:11:46:9C:34:D1
            X509v3 Authority Key Identifier:
                keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:84:30:ba:70:e6:82:38:a1:88:1f:5e:01:6e:3b:3e:93:aa:
         d7:93:94:3b:08:af:e6:aa:61:ee:2b:79:29:7b:7d:a5:3a:0a:
         9b:e3:26:b6:09:f5:d3:dd:0b:2d:82:af:91:c3:ad:09:a9:42:
         e9:22:57:32:ad:7b:e4:57:8f:68:69:63:dc:83:30:87:b9:45:
         11:c5:63:b1:70:5e:a3:27:4b:1c:aa:e8:3d:8d:1b:48:2d:1a:
         a1:f4:d2:11:ca:45:93:e0:db:48:c8:3a:12:3c:23:a0:e2:df:
         8a:39:c6:f0:b5:c4:b8:b8:1d:68:a7:d2:cd:96:12:7f:1b:b9:
         ee:8c:d2:25:71:f9:60:ad:3c:70:b2:7e:27:19:15:fa:0d:a1:
         5c:30:85:2f:cc:54:41:09:f2:27:34:d3:26:3f:0e:14:ff:87:
         91:28:8f:bf:83:fe:56:60:ae:2e:8c:55:63:8f:c0:d1:1e:31:
         32:fa:32:16:d5:ee:5a:3b:2c:17:64:80:1e:80:3c:a2:34:b9:
         1f:89:44:85:d5:e8:0a:f7:95:22:d4:14:21:e5:0d:48:4e:6d:
         0c:19:ef:c6:5d:0b:6a:61:39:a9:fa:63:42:2a:07:fd:c2:f0:
         ae:79:e5:ea:08:61:c2:cf:ad:a0:80:00:db:c1:98:4c:db:3b:
         9f:cf:b3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 16:55:23 2025 by rpki-client