This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
File:                     aMDy0Hdvfh00kHWIHDXp04dGNAU.mft (raw, json)
Hash identifier:          hX1GXSZZS1Dq5NumJzxNHK2sHPZnHRC55JlnD5mlcB0=
Subject key identifier:   D4:69:B4:49:CE:AC:87:D5:5D:42:D0:F6:0A:B8:A0:9E:24:D6:E4:73
Authority key identifier: 68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
Certificate issuer:       /CN=68c0f2d0776f7e1d349075881c35e9d387463405
Certificate serial:       019B1125FE8F5E00BD86F4C71BF38531202A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
Manifest number:          08C8
Signing time:             Fri 12 Dec 2025 06:01:01 +0000
Manifest this update:     Fri 12 Dec 2025 06:01:01 +0000
Manifest next update:     Sat 13 Dec 2025 06:01:01 +0000
Files and hashes:         1: 9Cor9nA5STtdeNAPJ4EF2UhIUNY.roa (hash: 2Xypo5/I10KMSVc6sd5OAZl2260JQAWQGDIcFZqWthg=)
                          2: 9L1jJAO_HMQ73m0y2wPc0NTq508.roa (hash: dppWJh2OxH8+hUL7V9AV0LikKL7kW2xpJmDuGMTyRBM=)
                          3: BofSOCqR9lVaW3XPh8s-hTi0YA4.roa (hash: GjLb3/wGRJd3Eao5cHxTciBM+9F+oErcKi5PWIvkCug=)
                          4: aMDy0Hdvfh00kHWIHDXp04dGNAU.crl (hash: 08dpqm0H+UnWs2ux3Q61aB9R3yMMVwVt6ZovGOPdnWI=)
                          5: pGJ6hykI0SezIUBll3Bejkc4eK8.roa (hash: LOy2PAU5LyGNlvT8G9Ei0trOR6p2w0dY/EWeeNGTATo=)
                          6: sid7Fz4p9LsUb435z4rlURheO5M.roa (hash: tKFwC0bd+BEOCIW21NmrzUtEhbV3IutUiWL0BmRO0A8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:11:25:fe:8f:5e:00:bd:86:f4:c7:1b:f3:85:31:20:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c0f2d0776f7e1d349075881c35e9d387463405
        Validity
            Not Before: Dec 12 06:01:01 2025 GMT
            Not After : Dec 13 06:01:01 2025 GMT
        Subject: CN=d469b449ceac87d55d42d0f60ab8a09e24d6e473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fd:ba:21:e1:2c:e7:7b:48:af:f0:35:4b:6f:
                    40:87:22:b2:45:bf:1b:99:60:af:dd:47:cd:00:d5:
                    39:3e:f6:9d:03:da:eb:19:6e:c3:e9:ab:08:fa:e4:
                    14:01:34:82:46:95:f5:08:71:1d:62:d0:ba:d8:77:
                    f5:a2:02:06:c2:98:11:fa:59:54:f6:1b:b2:62:95:
                    43:8b:d6:3c:5e:36:2d:89:fa:0a:17:a5:39:a0:74:
                    8d:ef:4e:37:f0:50:42:ee:60:28:61:db:86:92:3a:
                    ff:a1:00:1f:7c:27:e4:a5:5d:78:0e:f8:67:b8:29:
                    9a:db:54:6f:08:1a:59:7d:f4:f2:09:fb:c3:7e:99:
                    4a:ae:1b:6d:ac:6c:09:d3:40:d6:65:65:ae:0a:f8:
                    9c:68:33:0f:bd:c7:d0:2d:4a:bb:31:e7:be:ae:9e:
                    6e:ba:22:d1:4e:ca:ab:a7:f7:1f:42:3d:d3:db:5d:
                    d2:fe:9f:71:2d:3e:18:a3:63:a1:81:8e:a6:4b:3b:
                    9c:d8:68:1d:35:ab:38:13:d3:6f:14:54:62:9a:a5:
                    90:cf:51:09:9e:3c:3b:e1:22:cf:4c:aa:d9:4e:ad:
                    07:f3:96:af:ab:78:ea:e0:c1:93:0b:fc:a9:57:6a:
                    46:50:f1:00:b7:ea:99:c7:34:38:c9:1b:f6:85:ec:
                    1c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:69:B4:49:CE:AC:87:D5:5D:42:D0:F6:0A:B8:A0:9E:24:D6:E4:73
            X509v3 Authority Key Identifier:
                keyid:68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:8e:1f:48:10:45:62:c4:cf:38:d0:c4:02:f8:a4:00:e4:02:
         72:ef:41:e6:33:04:6c:e0:60:2d:6b:07:72:7b:42:96:28:6f:
         2a:9d:61:27:78:27:bd:18:c7:c6:eb:60:4e:6f:1d:9b:e0:57:
         4e:11:f3:07:e5:09:97:d3:a9:2f:79:37:20:56:65:50:c1:a4:
         49:9d:0a:db:a2:e8:61:12:f7:4d:22:0a:f1:da:5f:44:23:37:
         8e:ce:b4:31:b9:38:05:e5:18:8b:5b:4e:67:73:67:20:d4:79:
         59:65:5c:13:b1:8c:37:3a:27:75:8b:a2:1d:fb:3e:89:fe:4e:
         f0:d8:a0:1a:08:34:fc:1b:c8:2d:8f:6a:4c:1d:f4:1f:7f:18:
         9e:77:34:e4:52:92:ab:d3:c9:cc:5d:3f:0e:7c:22:0d:05:aa:
         fd:cc:14:85:4c:ac:52:24:09:3b:7f:c3:8c:8d:a4:dc:1c:86:
         6d:94:69:ac:89:12:4a:a4:4e:0c:7f:53:19:1e:45:ec:77:be:
         17:1a:ec:17:ac:e2:19:3f:31:5c:5b:41:3e:2b:65:b3:d9:ee:
         2e:8a:6c:a8:75:e8:ba:90:a6:8d:b4:98:2a:00:91:1c:aa:13:
         91:24:69:82:c4:3a:eb:26:54:3f:0e:77:85:db:72:20:76:58:
         25:97:39:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 09:27:43 2025 by rpki-client