This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
File:                     8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json)
Hash identifier:          MDC/c7WtIplzpPMbsPkX8QZY8C7cyLN4qGgdnYLG+VY=
Subject key identifier:   C8:FD:90:CE:2E:54:11:22:3B:A0:76:A5:FD:DB:F2:0B:1F:53:5B:8A
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Certificate issuer:       /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial:       019B06A1F4F97C852F371E6879886AEB6748
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
Manifest number:          1722
Signing time:             Wed 10 Dec 2025 05:00:35 +0000
Manifest this update:     Wed 10 Dec 2025 05:00:35 +0000
Manifest next update:     Thu 11 Dec 2025 05:00:35 +0000
Files and hashes:         1: 1-jVAuwl23O0NOs1-bK6yeNscKls.roa (hash: Uvxs615yu+WEWoRFMHOzorsioWG8H9U4nAbzC8roX+c=)
                          2: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: jrF61AN3OuQ8esV3T/HqXyGD0VQfnRbceGs/0CdMrVs=)
                          3: Hl-LGslDYIhPlAkXHQHVv-RvB0w.roa (hash: O2E13yhrehXyHLH26oeDji6bWmBZEWAoPwvjmCy5UcQ=)
                          4: KeGOh-2gcusv29keikRHiEVKS4s.roa (hash: QrPYIqt13xYHx5UZtiEmzISVzXSCi7pxjFZqjccXxgI=)
                          5: PCT5Mgh2BfqwgaWaY02UF5LaLEs.roa (hash: XaBzd5GEKaiXR6sIMeiAlmk2HwlM0MvOxOjSag3QaY4=)
                          6: asCMHwRsfFwCKLi99bMyFo21krk.roa (hash: utShPNIu2DvLofXXWk5YOZ1a0OQi1aHbqM+BbMHKgoE=)
                          7: euk47PXoK5T6-tp0xVlaMzoR2zU.roa (hash: ELFMwMZ6NBCdcRDyZO9f72nzLI4WiJG57xVHtBVDcdU=)
                          8: fs_wxLugKiT_ydUrQOwGSh335rY.roa (hash: Q5dvvgKthsbcb9JzHMCTpI33x4XiWX2kEMaFSL83EKo=)
                          9: s-NcW6l6hXn5NOmuFXHN7mTAqcY.roa (hash: Ec6KZfarDMvuXKyozJ8ogUajfjL0rcRRpwLDmiHket8=)
                          10: xs5EMPFexMMDbg6ZozpAr6uWE70.roa (hash: qg/QvTawYThYqecFxjzESCzrgezKdtEVEc1jID0tLZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:06:a1:f4:f9:7c:85:2f:37:1e:68:79:88:6a:eb:67:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
        Validity
            Not Before: Dec 10 05:00:35 2025 GMT
            Not After : Dec 11 05:00:35 2025 GMT
        Subject: CN=c8fd90ce2e5411223ba076a5fddbf20b1f535b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:18:f7:90:5e:3d:90:96:09:7b:55:1f:30:b9:
                    25:ad:ac:7b:ee:f6:64:98:cd:3b:ec:0c:ff:03:30:
                    74:2f:c1:8c:29:90:32:55:18:11:33:b2:ec:44:2c:
                    c6:77:ca:f0:20:b8:4d:9b:d5:ba:e6:53:8a:d0:0d:
                    94:d4:35:32:6d:94:da:29:bc:11:4c:49:da:9f:6d:
                    9d:e2:f8:6d:c4:3a:84:1c:10:25:d4:89:58:d3:a2:
                    fc:3e:3b:29:ce:ee:87:cd:f9:bc:ce:3c:d2:56:52:
                    89:62:5e:77:81:98:45:d5:b6:2d:d9:67:88:ed:06:
                    64:e2:b8:22:4b:72:2b:d3:9d:56:d8:ed:7a:db:07:
                    b9:77:a8:47:9f:d6:11:fe:88:17:71:d2:27:c2:ce:
                    9b:03:81:f8:86:a0:c0:09:17:1c:fa:a0:1b:84:a5:
                    35:d6:00:cd:21:13:2e:e7:1c:43:39:c8:bf:a3:37:
                    67:35:94:85:cb:c4:41:38:93:7c:91:b4:e7:33:5d:
                    68:d0:9b:42:e0:f1:d8:79:6d:9b:ca:f7:41:c9:6e:
                    cf:1d:5d:04:a8:85:19:35:20:cf:18:ac:e6:8f:37:
                    3f:91:b7:f5:35:cb:25:1b:fa:b6:d6:0b:82:74:c5:
                    44:18:49:b1:fa:c0:37:e7:2a:d0:29:df:b2:cc:17:
                    de:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FD:90:CE:2E:54:11:22:3B:A0:76:A5:FD:DB:F2:0B:1F:53:5B:8A
            X509v3 Authority Key Identifier:
                keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:83:e0:72:9b:00:11:cb:d8:6c:fa:a0:a1:57:37:1e:56:9f:
         6e:e1:4d:f7:e3:1f:f2:a9:24:ef:69:f4:73:fc:7b:58:28:21:
         41:a4:cc:8d:a4:23:d3:4e:b6:19:7d:3e:24:13:e0:cc:e6:24:
         33:20:1f:e3:d8:24:ac:75:f0:4f:02:54:e6:6d:97:68:ce:36:
         d6:fc:3f:d1:d0:22:a0:c9:d1:16:a0:d2:82:5a:47:cc:ba:a4:
         b8:81:09:41:ed:ab:7c:b0:59:91:cb:d5:38:3f:4a:86:70:63:
         8f:62:30:ea:af:b2:51:84:29:96:10:f6:60:90:4b:d1:27:ef:
         7c:19:29:1a:c6:74:54:81:2f:e3:d2:b8:37:f7:26:2d:78:aa:
         bf:9a:43:56:1e:98:cb:c8:dc:d7:6a:8f:fd:bb:69:75:e9:f3:
         65:64:08:c1:55:43:6b:3c:22:7f:f9:59:4b:d4:9a:fa:0f:9b:
         44:26:4e:fb:14:27:f6:a8:c4:39:a4:e5:25:15:0d:0b:3d:76:
         ae:c2:63:e5:43:8e:e2:3a:38:f7:6d:17:d4:c9:6f:04:95:6e:
         87:40:66:13:c7:d4:60:b7:16:a8:0c:15:26:44:42:08:99:d6:
         c8:9d:c3:16:cc:26:31:c6:dd:80:32:aa:48:89:82:18:87:4f:
         23:52:eb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 11:23:50 2025 by rpki-client