This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
File:                     8yvpggYKQ3NNCtEmrUbaLzlcne8.mft (raw, json)
Hash identifier:          3KHpjm+xJsnfWy5oKGAn1Dtt0jYFUKSK1aggBwoiKKg=
Subject key identifier:   2C:0C:A0:AF:2A:34:27:82:3C:95:B5:97:B3:D9:F6:17:96:CB:4C:AF
Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
Certificate issuer:       /CN=f32be982060a43734d0ad126ad46da2f395c9def
Certificate serial:       019AF3F705DBC890818D39B3E15FBB98C5D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
Manifest number:          1769
Signing time:             Sat 06 Dec 2025 14:00:43 +0000
Manifest this update:     Sat 06 Dec 2025 14:00:43 +0000
Manifest next update:     Sun 07 Dec 2025 14:00:43 +0000
Files and hashes:         1: 8yvpggYKQ3NNCtEmrUbaLzlcne8.crl (hash: pvX+bujTrT+nsMG+uhh3M2kNzCPfkTTjTXKFRPpZFx8=)
                          2: _ez--C0KRSwSRmH4lyGu5zUk1HU.roa (hash: KFrEJZmjOcmfSBpY7GDcoqxz0mSObldiNHL67FlKf8w=)
                          3: bHl4gP55LgKhhE_L1xho4xppPEo.roa (hash: rqcbN4+Al2DH9m3ppJi1E488vxtH8t3M86sJsdVuXgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f7:05:db:c8:90:81:8d:39:b3:e1:5f:bb:98:c5:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def
        Validity
            Not Before: Dec  6 14:00:43 2025 GMT
            Not After : Dec  7 14:00:43 2025 GMT
        Subject: CN=2c0ca0af2a3427823c95b597b3d9f61796cb4caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:95:b0:81:04:9d:e7:13:fe:80:aa:d4:8d:5e:
                    a1:d5:e1:35:e8:35:85:30:d9:6d:fd:be:93:1a:a1:
                    10:cf:4f:99:36:df:2b:91:81:47:3a:ed:3b:eb:74:
                    70:1f:da:a9:1e:75:73:7d:f6:aa:d7:99:de:96:56:
                    7f:85:96:e0:5a:77:f2:d2:3a:f4:f8:ba:d9:b4:49:
                    6a:e6:18:b4:a2:2e:7d:8e:b2:a7:dc:a0:10:a5:27:
                    56:ed:83:b0:43:59:9d:de:a1:bc:af:5a:9e:f4:93:
                    ae:27:75:e4:68:02:13:0c:a8:f2:67:89:01:9c:48:
                    d7:9c:51:81:57:cd:48:a6:8f:08:f6:81:b1:05:aa:
                    67:51:b6:2f:4f:7b:1f:79:27:f2:ce:c2:62:90:60:
                    46:e7:02:6a:90:c1:34:fb:24:06:18:7e:f2:20:6c:
                    fa:22:0b:e3:03:75:f0:44:ba:ce:de:aa:1d:b8:dd:
                    45:23:cf:d0:a5:c3:fa:f9:85:a6:c6:e2:27:15:5f:
                    bc:cb:fa:25:6f:4f:a9:a2:9e:bc:5e:3b:c2:2c:a3:
                    04:c8:0e:6e:34:be:cd:6f:fc:f2:3a:06:c2:17:77:
                    10:b6:5f:0d:8f:99:d4:d2:89:af:1e:22:27:a9:7a:
                    ad:18:3f:69:c7:df:89:ae:27:43:69:e7:7f:c8:fc:
                    bd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0C:A0:AF:2A:34:27:82:3C:95:B5:97:B3:D9:F6:17:96:CB:4C:AF
            X509v3 Authority Key Identifier:
                keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:3f:e3:5c:48:ac:c7:65:ff:c2:d9:9d:96:07:1e:04:d1:27:
         6f:0c:0d:6d:d6:07:60:6e:a8:28:7e:b4:de:18:cd:e4:c6:40:
         d6:12:e2:d2:07:87:12:58:4a:92:c4:2a:88:54:41:8d:a4:dd:
         19:24:e0:0a:1a:ea:70:be:d2:28:88:82:ce:b6:40:92:73:fa:
         de:ac:6e:90:e6:ed:6c:09:9c:6f:51:bd:99:5d:19:c7:4e:01:
         fb:8b:aa:79:5e:cd:88:a2:27:6b:e3:22:f3:0e:13:47:86:0f:
         a6:71:4c:c7:32:61:5f:d3:ba:41:72:15:6c:ab:b7:44:e5:15:
         82:3a:1b:1f:f3:ee:e4:1f:d8:f6:68:7f:e1:bd:8b:c3:7d:a3:
         27:54:8c:5f:8c:31:e8:e1:6e:80:4b:bd:27:25:dc:01:a7:fb:
         17:44:16:93:52:bb:2c:28:4c:1f:a0:fd:d6:7a:af:c3:d2:7d:
         aa:9f:17:d1:cd:77:c1:8b:40:d7:a6:c1:61:22:c9:75:c2:26:
         0a:52:6c:2d:42:7c:3f:50:e2:9f:e6:65:c4:89:c2:53:fa:13:
         11:27:2b:85:c1:80:40:95:97:de:87:86:aa:4c:2d:8d:cd:81:
         0e:21:e4:bf:d9:fb:98:ea:28:64:b9:ab:0a:a8:d6:80:76:df:
         d8:ff:71:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:13:56 2025 by rpki-client