This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          I/1wpAM6Zkw3aIR/m7lmasltubLv6G68qI2T0Iketkk=
Subject key identifier:   27:E4:7A:70:82:01:2C:6E:F1:F7:51:46:87:41:F9:8E:91:68:8E:F1
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       019B5E2F01FAB82AF57DA3A6A5EED06C240F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          17BB
Signing time:             Sat 27 Dec 2025 05:01:37 +0000
Manifest this update:     Sat 27 Dec 2025 05:01:37 +0000
Manifest next update:     Sun 28 Dec 2025 05:01:37 +0000
Files and hashes:         1: 19QpkXgghLM3Nv0nEMVJTVhhYlk.roa (hash: J5AzJxFSrkUz6NEqgZpKHFp1Qkuuq+hf2j4tyd26uK8=)
                          2: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: 6o54tp5pYL70OssF71ASVynLQmXTSS7TQDRvrfv2kYs=)
                          3: aUt9STDYB4WpJzoIeOhkBXlmRGY.roa (hash: OBmceRN0cnIIMX2WS5mLBG1wMtaz4OUFUqNkNJhbrA8=)
                          4: c9sXvnnFKQwKh05j0TaYAQugLQM.roa (hash: eyB+ysjYhGow5lnf5FUGFEiyTh1wZN2qzaaHi/6zhTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Dec 2025 05:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5e:2f:01:fa:b8:2a:f5:7d:a3:a6:a5:ee:d0:6c:24:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Dec 27 05:01:37 2025 GMT
            Not After : Dec 28 05:01:37 2025 GMT
        Subject: CN=27e47a7082012c6ef1f751468741f98e91688ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:93:48:95:84:7a:26:05:3f:b8:d6:99:1f:fa:
                    db:cc:9b:0b:cd:ff:e6:43:2d:86:0c:be:71:08:f7:
                    c1:e6:4d:18:1d:7c:74:f2:41:d0:c0:ed:a7:3f:d2:
                    55:c1:1a:f0:46:be:01:42:43:4d:94:9c:90:ef:07:
                    36:f8:76:45:25:5c:35:37:a7:00:33:a9:51:a9:dc:
                    c5:db:99:fb:65:7b:68:fd:59:b1:e0:68:88:d9:05:
                    de:d2:22:06:23:10:d8:8a:54:6e:72:65:5e:7d:34:
                    83:70:bc:7f:27:46:72:d3:f2:60:20:b3:e5:b5:72:
                    6b:02:86:b4:9a:14:5b:58:5c:1e:16:22:7d:fa:e7:
                    c3:9b:53:3a:4b:b7:83:c4:be:b9:bc:db:f9:21:60:
                    c9:ec:20:92:c2:16:72:6a:ba:7e:17:c1:45:76:84:
                    04:f6:54:35:fe:63:45:c3:54:37:46:33:47:75:0b:
                    5d:8b:d3:ae:0a:b6:80:63:48:58:97:20:09:bf:ea:
                    ff:7c:4c:1a:17:75:c5:45:b5:1d:a6:c8:88:4b:2d:
                    fb:e6:1b:6f:b9:63:6f:12:f9:9d:ee:f2:c9:d7:19:
                    dc:94:9a:ce:3d:8d:ea:da:0c:6d:e5:5f:46:70:d7:
                    14:e0:e3:87:d5:2a:27:46:90:d7:74:1b:27:11:57:
                    e1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E4:7A:70:82:01:2C:6E:F1:F7:51:46:87:41:F9:8E:91:68:8E:F1
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:80:a1:51:04:8e:18:8c:a0:87:b4:b5:57:1d:80:e6:2c:fe:
         8e:77:7d:e2:69:f8:b3:23:0c:17:83:eb:73:de:4a:eb:0f:0e:
         0c:16:ce:f1:ab:c0:f5:cc:ff:e8:6a:d5:cc:c3:a5:24:72:9d:
         12:3f:d2:6d:26:a8:2a:0d:eb:86:ad:07:1a:b3:bd:88:e6:f1:
         dd:ed:57:36:6a:70:69:de:1d:ed:25:13:61:44:61:13:4a:10:
         4c:83:1f:c1:66:76:48:3b:f8:f2:1a:fe:08:dc:b2:6a:f9:6f:
         f1:2d:80:45:2c:37:43:ff:24:20:5b:32:e9:15:55:ba:a4:38:
         d4:e8:ed:26:b9:4b:e3:89:6a:4c:70:ad:d3:e0:ba:82:90:a4:
         78:bb:04:a7:29:f7:69:a0:ea:6c:b2:c0:33:bc:b1:a6:29:32:
         ec:24:d3:ef:ec:63:f1:cc:a7:e9:1f:6b:32:93:26:f3:1c:88:
         c8:be:b3:96:ba:cd:51:fc:2a:1d:29:3b:58:2e:10:cd:3e:02:
         71:75:94:d7:b2:6f:dc:34:5f:c7:fd:75:96:be:1d:37:6f:db:
         db:29:23:16:33:df:a1:19:58:9b:76:5c:35:48:eb:ca:b0:46:
         2b:a5:17:eb:cb:a6:2b:85:d5:79:7f:f9:3e:f9:70:60:f9:27:
         5b:02:b7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 11:37:57 2025 by rpki-client