This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
File:                     TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft (raw, json)
Hash identifier:          2urFpuzdk4o6azJifrp3OALFWoPORhcoBjlOU6gwL50=
Subject key identifier:   1D:DF:6E:9A:0F:54:DD:B1:B4:AF:69:11:81:7A:8D:5C:24:2C:6A:0C
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Certificate issuer:       /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial:       019AF19A9ABA3E6AD955712C573144554BC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
Manifest number:          176D
Signing time:             Sat 06 Dec 2025 03:00:32 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:32 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:32 +0000
Files and hashes:         1: TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl (hash: hvLIwwQs687GX4MPtbkK6TAF8tR2tN58ctYKml5ZNRg=)
                          2: YDDERAGfQG_P54V0MZVSyMjIVyk.roa (hash: C7Lh2t1ISlqhYDOs1dQ1HUfrAnVeSgApqdOD+isddQ8=)
                          3: kjjmj3_M89wAaSRBkczk1njDNSI.roa (hash: dWOfnCb6lmXwSX8QD5pO5gwpjqkbkqa9qW8b5CDCAF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:9a:ba:3e:6a:d9:55:71:2c:57:31:44:55:4b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
        Validity
            Not Before: Dec  6 03:00:32 2025 GMT
            Not After : Dec  7 03:00:32 2025 GMT
        Subject: CN=1ddf6e9a0f54ddb1b4af6911817a8d5c242c6a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:25:54:a7:c2:0e:ad:0d:5d:52:96:01:d5:1d:
                    68:2b:b2:d0:89:ea:f5:0b:aa:72:f7:bb:4c:39:57:
                    2f:b0:15:7d:0c:2f:4b:3f:e1:48:46:c0:be:20:da:
                    d3:94:16:3d:e7:03:27:24:a3:b6:d1:fe:a8:4b:29:
                    8d:78:cd:66:d3:f8:31:66:5d:7a:01:db:e2:ac:26:
                    64:e4:34:ff:3a:86:69:a2:4d:95:6b:12:49:04:36:
                    3c:68:b3:99:16:1c:f6:62:27:54:b7:be:a0:b2:88:
                    e3:f1:e6:e5:39:ca:28:8c:db:ed:87:3d:85:13:ad:
                    5a:83:b2:23:5b:51:2c:91:e3:33:8f:ef:a0:1d:b2:
                    fd:16:ba:2d:c7:3f:71:db:af:89:5e:6b:dd:a2:c0:
                    94:69:78:e5:1a:6d:1c:62:7b:68:f9:9c:19:71:10:
                    21:aa:d9:78:1c:a9:da:f1:06:a0:8c:7d:8c:03:b1:
                    2f:04:ec:1b:a4:0c:dd:c5:00:e4:2b:06:a5:71:a1:
                    23:d2:57:f6:a3:eb:61:48:5e:de:b5:9d:ed:c5:26:
                    d8:4d:97:65:99:de:f4:e4:a3:82:35:4b:93:ba:3c:
                    9f:5b:ce:bd:3f:df:8c:d3:b8:42:96:f1:26:e7:d2:
                    4f:f7:bc:e0:e8:36:76:a6:1a:59:48:48:aa:61:54:
                    42:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DF:6E:9A:0F:54:DD:B1:B4:AF:69:11:81:7A:8D:5C:24:2C:6A:0C
            X509v3 Authority Key Identifier:
                keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:17:1e:d3:dc:ff:67:67:78:a7:e8:94:ca:db:f2:29:cd:88:
         d4:9c:a3:6a:95:ff:25:80:80:d3:38:63:f1:88:9e:50:99:ab:
         e1:83:6a:ec:d3:ad:8d:e1:ac:2d:a4:f7:6b:42:75:25:31:37:
         fd:1f:0e:2c:7e:6e:30:b1:19:71:2d:f6:9a:ee:93:f6:27:13:
         8d:c0:fb:0a:b0:18:45:b5:56:c8:5f:86:90:c2:7d:6d:3c:a1:
         7e:b0:42:18:30:ab:7b:56:95:44:b0:08:1c:cc:87:81:1d:cb:
         4a:b3:06:c0:cf:18:22:9f:ef:55:c6:dd:b7:87:6e:d6:d4:de:
         11:03:8d:bc:25:65:7e:5e:8e:87:00:c1:0d:f9:09:7e:8b:78:
         39:08:2c:a2:83:f3:20:b3:7f:a8:21:44:fe:7f:57:8e:04:c5:
         ac:16:b8:0f:af:60:8e:27:39:71:8d:37:0b:6d:26:b9:30:1c:
         48:63:26:38:b8:4c:4d:e1:f3:92:8b:71:89:ce:06:50:c6:74:
         d8:9b:72:66:12:a7:a7:7b:ea:e2:26:25:fc:36:bf:25:b0:c8:
         77:bb:fb:ab:d4:f7:33:ef:d3:22:1c:b2:a1:61:bb:08:c4:45:
         e5:4d:75:dd:bd:a6:45:03:f7:dc:0d:ee:fb:dc:a9:9f:e7:54:
         20:59:43:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:25:24 2025 by rpki-client