This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
File:                     2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json)
Hash identifier:          8WwtDI1uZS8RJaY/oCoHOVwMfRmaN6HuDUubx0gFNK8=
Subject key identifier:   6F:69:D4:0D:07:AB:BE:27:86:A4:AF:F7:8B:F0:15:8E:8C:98:0E:5F
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Certificate issuer:       /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial:       019AF1643E0C704619F423D8A9176C568BC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
Manifest number:          0A41
Signing time:             Sat 06 Dec 2025 02:01:09 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:09 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:09 +0000
Files and hashes:         1: 03ow7Dc2lnWCoVaeZRSpYs4zpac.roa (hash: hu8UrK2ZA8s91ytmOHbTQuFlg+aaKVbgiAK/MIh6Ii4=)
                          2: 0uOd6pkbVcZjPk-Kbr-5tFBqZCU.roa (hash: xqBleUY4Z9zq7UyMqOMWy7ryf9KoBj1PjfY1uJWx7sk=)
                          3: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: hMsievHp+aynz1AgrvvQb5JJ+0ATf40XHwJudDBmpBk=)
                          4: 6fo87MmGE1UjtxclnRa9qrk6UGM.roa (hash: pci8N0GbpCHAxgqqnFxgDiIt1lIp8+ssI2b4Yf5Rg+E=)
                          5: 8qpcVnGYsLxwTiVc5wTV5dRFK4k.roa (hash: RbWUZtrPDR/A3Nx2zGfdIax0nOuzV8AAA7cnBdypxWc=)
                          6: F_o6NXPe1tvEejEQhjQ8a0pNQkk.roa (hash: WQqBcZLWfw2MO44b+gkf5uaizI2fUG1+n9FgPJJVmb4=)
                          7: Hax2CM_u8tv_Y_4IhciZMhkDl3c.roa (hash: e9PckbluSyyzMKimJgtpYDPOMt/2roevlfetav7K+BQ=)
                          8: KvD4Pa3lfXKcjfgVEMsuUlxyqpQ.roa (hash: BVkdPRLTcswZV+vMxoNSYxQYWyflcpgaedXCE6/uDRk=)
                          9: RR9CZyYi6n9Q08SG7w4DsIQSJqE.roa (hash: N5pZ5HpdV+sU2XpEoXlts+Mklu638CuRARvFwE/FmiI=)
                          10: qOO5dT9W5xkoHAQL601E08xwv24.roa (hash: 1FhIPAsVstrUOOgTU9C0JI4gYu/byZYWA//QylDnCnw=)
                          11: sUb0Zw8pjJl8ScoJeLuqD9laegA.roa (hash: pDiLmEvZRUyivCYPJwe74TSCfaSqIBI4xYENdV2R1wk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:3e:0c:70:46:19:f4:23:d8:a9:17:6c:56:8b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
        Validity
            Not Before: Dec  6 02:01:09 2025 GMT
            Not After : Dec  7 02:01:09 2025 GMT
        Subject: CN=6f69d40d07abbe2786a4aff78bf0158e8c980e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8c:4c:68:10:83:07:f9:37:4f:08:cb:ce:01:
                    4c:2f:d6:a8:f5:f9:00:bd:46:2b:54:de:32:af:0a:
                    17:75:b7:25:79:5b:b5:f0:dd:1b:6f:4e:a5:65:41:
                    b0:33:37:2b:50:14:29:89:c8:83:dd:63:88:34:84:
                    e4:86:94:06:57:c3:9c:ff:e2:ee:5e:28:1f:09:40:
                    00:cd:86:95:7a:26:69:b8:51:a6:9c:b4:67:68:5b:
                    94:dc:ad:b1:fb:76:fa:ca:50:73:dd:e5:8f:31:aa:
                    99:30:69:34:a6:d6:2c:07:44:2d:2f:0c:ba:0b:92:
                    55:c1:cf:94:64:0e:98:fe:1b:ff:e8:6a:43:f4:09:
                    77:fe:14:24:d1:34:5c:13:75:2b:d4:96:f2:ca:c7:
                    52:b6:02:31:7b:a7:a5:55:03:7b:2c:22:ee:20:33:
                    ea:1d:5d:e7:d8:52:58:14:9f:1c:c2:8b:59:2a:ab:
                    4f:c9:00:c5:8b:ba:62:b5:5e:6b:ca:d0:94:fb:1b:
                    8c:52:74:90:da:f7:ff:03:50:5d:95:2e:19:98:b5:
                    73:3e:aa:a7:f0:4a:2c:59:d1:af:cd:73:49:e5:95:
                    bf:59:c6:f4:1d:ff:fa:6a:cf:5a:d5:d0:12:29:59:
                    21:7c:ef:6b:0d:b1:97:55:85:0d:89:d6:1b:0f:6c:
                    bf:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:69:D4:0D:07:AB:BE:27:86:A4:AF:F7:8B:F0:15:8E:8C:98:0E:5F
            X509v3 Authority Key Identifier:
                keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:da:48:f7:4a:39:86:04:3a:9e:79:cc:48:78:40:c0:24:75:
         21:70:e6:d0:a9:f0:00:ea:8e:ba:4e:51:10:48:2e:83:a8:26:
         de:16:c9:e4:ce:b4:db:61:5c:27:c7:c7:3b:ac:bf:c4:74:ea:
         76:11:36:df:52:bb:74:23:3f:b9:3e:21:42:97:30:ce:22:81:
         6b:59:f9:a0:f0:1d:2f:7e:ec:bc:dd:b5:84:8c:e7:3c:b2:2d:
         38:7e:de:5a:19:ad:83:02:70:ca:6f:ee:0c:36:13:c8:75:07:
         18:1c:62:aa:a7:af:3c:16:fd:dd:6b:96:e5:ce:82:4e:dc:0c:
         de:9a:20:4f:0c:fa:4f:3a:97:74:c8:6a:bf:97:47:ad:39:22:
         8f:3e:be:6c:7e:86:9b:06:1d:77:11:40:35:79:d5:9f:ab:73:
         ac:c3:8f:4b:ef:f5:2f:fc:56:d7:c2:80:cb:66:24:38:d4:e2:
         65:bf:31:40:6a:82:a1:28:9e:95:8e:6f:20:6c:24:f4:06:4a:
         11:51:0d:6f:62:93:23:f7:01:d6:18:12:d1:9f:73:19:51:fd:
         49:55:21:40:58:3b:df:42:a2:e3:c3:da:62:78:7f:32:dc:ad:
         53:e7:80:1d:33:01:84:fe:c9:17:b9:18:11:75:3d:fd:42:54:
         83:50:4f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:38:52 2025 by rpki-client