This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
File:                     8TIZIhzAohMmzgBsQoJbrCvjHhc.mft (raw, json)
Hash identifier:          +AGPO7+GVRYdqmcTvzkC8AX9wX0ruJpYwtgM0hX/hIA=
Subject key identifier:   3C:ED:11:2A:2F:A1:58:7D:95:DA:4B:02:B2:2A:38:06:AB:1C:C2:2B
Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
Certificate issuer:       /CN=f13219221cc0a21326ce006c42825bac2be31e17
Certificate serial:       019AF088E52C62AB10518509E9F0C550E178
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
Manifest number:          1885
Signing time:             Fri 05 Dec 2025 22:01:34 +0000
Manifest this update:     Fri 05 Dec 2025 22:01:34 +0000
Manifest next update:     Sat 06 Dec 2025 22:01:34 +0000
Files and hashes:         1: 8TIZIhzAohMmzgBsQoJbrCvjHhc.crl (hash: pKKiygL6XFLFkjOIoXRx8I+vlFtYYm0OhmhuPxBG+Io=)
                          2: KjLlUbsy5OhkLv0qFbrgPhCDVXc.roa (hash: Y7RFJziGNZvZmqC0fcM/IrDDZFezUSlFPJ8Z47Y2wSc=)
                          3: ir7-RH8I6LOM7faVYPUvWtPtBkc.roa (hash: c3S12HvLqchLUsT4f7tqk56b2aJYvGDiRT3Sw4rhzw0=)
                          4: sioOqEQgSdt-Z2nuvjH-ipYeJ0U.roa (hash: e/yGVe5B1VqGg3IGxSr7CYJ11tiQj+M1xaKJk8xaUwo=)
                          5: wBll80eEVRcCiVNLyafIlwBJOvY.roa (hash: Vrtbp5BA+79ihdsDatt4sH3YRMZYNvpy4CEr3U+1Q18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 22:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:88:e5:2c:62:ab:10:51:85:09:e9:f0:c5:50:e1:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17
        Validity
            Not Before: Dec  5 22:01:34 2025 GMT
            Not After : Dec  6 22:01:34 2025 GMT
        Subject: CN=3ced112a2fa1587d95da4b02b22a3806ab1cc22b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:76:84:eb:f5:ac:1c:ed:71:29:19:ec:d2:99:
                    b7:63:33:18:6b:20:2e:f9:97:56:b1:c0:1b:89:db:
                    50:7c:2a:c1:11:85:80:68:90:84:cc:97:5e:b6:3c:
                    19:01:67:ca:8a:ca:36:e5:82:93:d2:65:80:27:60:
                    06:19:8a:ff:63:62:b7:ad:6d:62:d7:73:14:d3:95:
                    8a:2d:62:65:f7:db:93:94:82:20:6c:4f:9e:0a:98:
                    af:f0:a9:fb:03:f6:61:d6:14:57:6d:a4:c7:dd:08:
                    7f:16:7d:e6:41:c1:65:50:e1:ac:d1:58:b5:6d:81:
                    9c:06:f5:6d:ae:f6:eb:90:bc:af:22:af:f2:6d:74:
                    04:38:8d:7d:81:73:4a:0c:06:4a:62:40:8c:37:5b:
                    63:29:ca:dd:64:aa:67:29:ce:ca:69:e4:6a:30:cf:
                    9a:62:ad:b4:29:3c:4f:29:8e:6c:9f:6b:ab:16:a2:
                    6f:ae:52:b2:a0:27:9f:6a:bc:7d:04:7e:b7:c7:92:
                    b8:4d:77:0c:93:99:84:5b:26:17:b7:a5:36:a1:a8:
                    96:e9:24:77:49:fe:4a:ca:0e:73:98:e3:3c:43:58:
                    93:21:39:84:6e:25:ed:01:13:2d:63:3f:89:17:c7:
                    36:40:6c:56:e2:1e:08:b3:fa:90:6e:54:b0:fe:08:
                    6e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:ED:11:2A:2F:A1:58:7D:95:DA:4B:02:B2:2A:38:06:AB:1C:C2:2B
            X509v3 Authority Key Identifier:
                keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:1f:5a:3b:6d:b8:de:34:26:40:99:b6:f7:f6:de:ee:13:3a:
         45:af:72:d6:51:9b:bb:11:ce:37:c3:dc:88:4d:4a:45:66:be:
         42:48:d2:65:82:1f:5b:a3:b1:af:ec:ce:e3:d2:5a:7e:22:f7:
         b7:6d:97:0e:4c:32:3c:c2:aa:f8:35:2a:d7:a0:c6:3e:71:09:
         6f:49:56:d1:e7:01:af:b7:25:af:92:77:19:f6:18:c3:26:8a:
         1d:d2:0a:0e:a8:4a:f0:eb:42:16:bc:b8:e2:cd:65:6d:51:7f:
         06:fb:3d:32:8c:5a:28:9f:12:f8:3c:31:0b:4a:88:61:3b:45:
         e4:25:8d:29:e8:bd:92:e0:3f:fe:d8:9a:5d:6a:0f:99:c8:78:
         55:2d:a2:1d:82:fe:96:a4:a7:3a:43:d4:84:d7:a0:9b:de:ea:
         88:85:bc:bd:5b:c6:a5:ba:43:9c:04:08:4e:9a:f2:66:b6:80:
         91:4e:81:70:b6:19:e8:02:f8:2d:cd:92:e3:56:b3:ef:18:b4:
         2b:f4:fe:50:79:91:04:b5:ed:cf:4d:cf:9b:26:94:1f:e3:a4:
         8b:34:8f:03:c7:42:3c:6a:bf:30:57:fc:fd:91:67:82:c6:93:
         c7:05:7e:f2:65:c7:ad:b3:68:0e:ec:45:0a:e1:84:81:68:13:
         56:a1:93:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:15:05 2025 by rpki-client