This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
File:                     IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft (raw, json)
Hash identifier:          h8vPyxGMuDsZe5kewuvHcNhGfkFkEPhz7WAMEKSc0t0=
Subject key identifier:   84:31:FE:CC:7D:F6:3B:E2:AD:78:FE:9B:9D:13:98:DB:F0:FD:BB:7F
Authority key identifier: 20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24
Certificate issuer:       /CN=20820f796481ac0e9637c962414597b1fe227c24
Certificate serial:       019AF61C5676531C7998D2ADAD4E1919A364
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
Manifest number:          0277
Signing time:             Sun 07 Dec 2025 00:00:43 +0000
Manifest this update:     Sun 07 Dec 2025 00:00:43 +0000
Manifest next update:     Mon 08 Dec 2025 00:00:43 +0000
Files and hashes:         1: IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl (hash: Xrlr9gLbT2m/eyqABMySw/cDdbSYEHHUT2aRziGrt7I=)
                          2: _KyJrgx1hGK_hXMTclXxlPIPZn8.roa (hash: I4QZAN/FDUNiksKSSMZ5KyrS7bRdtRCczdlGK9iHX0c=)
                          3: iLANhbyVV3zbKcRa5e1j5ys5bQ8.roa (hash: HvIZEmUJodoCUOQJmSLlhYyGWehRd8s2eUB4GrSGatI=)
                          4: vXv88BHimThnafaryEHozjYrlDI.roa (hash: DV1U9+gs3m5mNc5xoVIc27oNoGuDOyBahRAnw8thlug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:1c:56:76:53:1c:79:98:d2:ad:ad:4e:19:19:a3:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20820f796481ac0e9637c962414597b1fe227c24
        Validity
            Not Before: Dec  7 00:00:43 2025 GMT
            Not After : Dec  8 00:00:43 2025 GMT
        Subject: CN=8431fecc7df63be2ad78fe9b9d1398dbf0fdbb7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f2:df:c1:61:11:d4:40:6d:56:a0:cc:2f:97:
                    2c:09:a8:df:bd:3a:3e:d3:55:9a:7b:f8:47:af:ea:
                    ea:ba:15:f7:66:cd:ad:33:fc:ef:ad:c4:db:ba:2f:
                    9f:a9:1b:06:8f:65:05:f8:97:bb:6c:b6:c0:78:55:
                    d5:76:6a:b9:69:d8:0c:57:c4:9f:63:3d:d8:c7:10:
                    9a:60:d2:a7:ef:4e:39:10:17:f3:3a:37:03:08:df:
                    81:2e:be:80:47:64:21:45:34:3d:ab:8a:f9:3d:8a:
                    d2:b4:61:31:39:f5:ad:19:ce:3f:0e:e6:49:d8:4b:
                    26:28:e0:35:51:38:5f:83:52:4a:c3:d0:36:04:12:
                    89:5e:ba:df:3c:24:98:e4:8b:dc:dd:09:70:1a:6d:
                    3c:0b:3e:43:6d:be:7d:90:c2:99:09:c6:05:de:96:
                    f8:d6:d6:b0:f4:48:ba:95:53:96:d9:7c:ad:9c:f5:
                    b2:58:ae:02:e1:5d:0f:4d:51:9e:41:d7:4f:8e:c3:
                    2c:84:b6:0f:5c:e0:0a:fd:22:06:93:dc:80:83:31:
                    bb:28:9d:80:01:05:3a:10:4e:1e:14:cc:fc:ca:64:
                    08:50:bc:f2:41:15:0b:a1:96:96:c1:3c:1a:5d:32:
                    ca:19:91:6d:70:fe:b2:01:a5:7f:2d:3f:b0:2a:32:
                    79:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:31:FE:CC:7D:F6:3B:E2:AD:78:FE:9B:9D:13:98:DB:F0:FD:BB:7F
            X509v3 Authority Key Identifier:
                keyid:20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:70:22:85:ff:91:11:05:d9:2d:f8:b1:26:a7:f8:72:ad:50:
         f1:ec:7b:77:1c:00:1d:c3:db:da:64:31:81:d8:b3:e1:fb:71:
         95:6d:8f:97:ca:b9:8f:aa:e7:52:d9:14:00:2c:ff:9a:24:f9:
         c3:2b:15:b8:14:13:b8:a3:23:87:21:12:da:4a:8e:b4:78:81:
         a2:82:0b:ab:a8:cd:8f:fa:47:bd:e0:3f:09:5c:c9:9b:d0:0b:
         7a:d4:d6:a1:52:fa:39:26:0c:fe:41:ee:d8:3c:d8:e1:f6:68:
         3b:36:48:7b:4e:6c:5c:cf:e4:5f:3f:b8:95:7b:9f:d1:06:ec:
         1c:86:b5:80:20:88:66:49:4a:6b:44:19:3d:e4:1c:e2:80:ba:
         02:b3:85:bb:10:f3:8e:c8:cc:34:b1:fe:01:2f:e6:48:53:24:
         74:60:52:75:3f:f8:99:98:97:9b:2e:f7:99:b9:bc:43:69:70:
         29:9a:43:2a:f8:cc:fc:25:72:c9:38:13:4a:c1:55:32:e0:74:
         20:d8:78:7e:20:c6:38:93:19:38:03:a1:e7:f8:75:ed:29:1e:
         c9:9f:b4:fe:77:f8:b1:29:05:ba:7b:f7:60:15:54:e1:10:21:
         ac:5a:23:66:5e:2a:22:0d:28:ba:19:a3:56:26:bd:5d:b2:d3:
         bb:4e:14:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:30:34 2025 by rpki-client