This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
File:                     8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft (raw, json)
Hash identifier:          5+dwOppb6phim1mXIxM3qOD9n1JpcjtTFWEc0qc/JTE=
Subject key identifier:   78:8D:AD:D3:A4:68:F3:20:B6:CF:EE:8D:34:C2:1F:7A:00:46:C8:72
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Certificate issuer:       /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial:       019B337B295EED739538C930C2178AA210FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
Manifest number:          11CC
Signing time:             Thu 18 Dec 2025 22:01:08 +0000
Manifest this update:     Thu 18 Dec 2025 22:01:08 +0000
Manifest next update:     Fri 19 Dec 2025 22:01:08 +0000
Files and hashes:         1: 3xyNiwxMLt2FgnnzD8FWO0WnAhc.roa (hash: pOZz2o1zgseBlXSeMbMTXOoQ45eoVXgqdP67Uo4BTQg=)
                          2: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl (hash: MA8+kYB40sV4u7QZobreb0pmfXaKdn4QyWkJBLl96go=)
                          3: I-Q-pMgCHQ9W_jpWDux3P7cZIcY.roa (hash: pAX53nRh4A+NdTng//otyGRQizgrDPu6+ERbaPVic0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:7b:29:5e:ed:73:95:38:c9:30:c2:17:8a:a2:10:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
        Validity
            Not Before: Dec 18 22:01:08 2025 GMT
            Not After : Dec 19 22:01:08 2025 GMT
        Subject: CN=788dadd3a468f320b6cfee8d34c21f7a0046c872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:84:24:88:cc:b8:37:b3:d8:b4:90:a7:00:b8:
                    c8:07:2f:fb:fd:51:1f:d5:66:45:e5:f5:4b:a3:2d:
                    e5:8d:a8:6f:ad:de:99:cd:18:d1:92:00:37:1e:e7:
                    76:00:70:69:78:d3:8a:d1:c2:62:4b:30:8d:47:f7:
                    67:5d:8a:03:bf:78:53:df:4f:31:80:82:77:64:a8:
                    88:e1:ee:2d:86:f6:57:70:b4:45:c2:20:f4:e9:ae:
                    3b:05:cf:4f:17:43:15:2c:9d:4d:56:a6:bc:d1:44:
                    25:6c:c8:39:46:06:dc:23:30:e6:8e:e9:3f:37:72:
                    ca:87:69:68:6d:ab:83:70:f1:34:d4:0d:90:cf:b2:
                    9e:2b:2f:93:20:5f:fc:df:9f:cc:4d:60:15:84:02:
                    a1:8b:72:d0:d9:fb:ba:6b:49:52:c6:37:f7:23:87:
                    46:0a:32:b4:d4:36:b1:f0:96:df:4e:8e:60:89:2b:
                    ea:e8:75:a2:06:b0:6d:2e:9b:a4:90:5d:05:4e:33:
                    ea:18:e5:18:c7:1f:86:3d:bb:ec:3b:c3:05:13:3b:
                    21:c0:02:99:c3:be:74:83:15:31:67:fb:48:60:31:
                    6e:29:d9:16:2d:2f:01:50:68:28:4d:b8:32:2c:15:
                    05:fd:07:e7:c9:1d:2f:d9:1f:d1:9c:a9:2b:4d:e8:
                    64:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8D:AD:D3:A4:68:F3:20:B6:CF:EE:8D:34:C2:1F:7A:00:46:C8:72
            X509v3 Authority Key Identifier:
                keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:13:18:c7:ee:b1:5a:47:b6:5c:86:9c:7c:87:b0:a4:1f:66:
         84:02:96:bb:57:a2:16:a4:ab:51:32:aa:96:f9:d9:24:af:50:
         a1:fe:ce:79:e6:b7:02:36:c0:2b:67:d2:ae:06:0f:92:52:51:
         05:45:ff:a2:63:59:bf:ef:6f:c8:15:bb:d8:43:6d:b1:d5:dd:
         49:e8:a1:ab:4c:23:3e:49:ed:f5:ea:d4:d2:13:9d:f5:b6:c2:
         ba:50:cd:bb:cd:3e:87:e1:df:dc:8d:ec:91:41:05:5e:78:6c:
         67:76:ba:52:46:ae:ad:69:8d:9d:d0:06:5b:0b:6d:01:8d:d9:
         f9:69:f3:68:e3:7d:55:11:3a:d5:38:ad:f8:65:3b:71:67:5e:
         e2:5d:7a:41:95:5f:01:32:33:63:e0:b4:db:8a:57:b7:1c:6b:
         7f:01:05:5c:fd:e1:f5:ba:22:2a:19:73:f5:a8:6c:11:22:60:
         01:8d:0c:eb:89:1d:c9:b7:54:77:35:31:74:6d:27:30:e6:3b:
         99:7c:95:2d:dd:43:1b:e8:dd:a4:03:9b:54:d5:9c:ea:19:f8:
         b4:0d:e9:3f:b2:37:10:b5:7a:c9:f4:77:80:80:18:02:50:01:
         0a:c6:12:5f:86:54:2a:8e:cd:19:15:67:b6:ef:7e:dd:7b:d1:
         84:fb:bb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 05:22:51 2025 by rpki-client