This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft
File:                     A8gBV7VkJs46X0PIn-sdQ3x3y84.mft (raw, json)
Hash identifier:          1zKOOb0iD6iPvEf1hr28RLvHaOvcYZ97kSUimjQK2u0=
Subject key identifier:   AE:4F:AD:9B:90:93:D9:84:EE:BE:AF:B9:43:81:83:88:EF:62:B8:B2
Authority key identifier: 03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE
Certificate issuer:       /CN=03c80157b56426ce3a5f43c89feb1d437c77cbce
Certificate serial:       019AF12E538C6F285BCE25C7F7184DCAAED7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft
Manifest number:          06
Signing time:             Sat 06 Dec 2025 01:02:16 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:16 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:16 +0000
Files and hashes:         1: A8gBV7VkJs46X0PIn-sdQ3x3y84.crl (hash: hXbeB+g74Ejorl7tjTim0Ig+zqHRlMSQIHKoiCffgWU=)
                          2: LSYKZL6bL-kdhHy7Rekdkn-v5FM.asa (hash: +N5sGX/uOLbypJ4AbC7ZYsPhCOcK9Y9mwfmo1tGT698=)
                          3: vMm4FVPVdLv-D-lL17N1Am09G_8.roa (hash: /zMuON3m9VqJT9Tvl4GQhmfLyHwwcX8ez8M/3XuNpqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:53:8c:6f:28:5b:ce:25:c7:f7:18:4d:ca:ae:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c80157b56426ce3a5f43c89feb1d437c77cbce
        Validity
            Not Before: Dec  6 01:02:16 2025 GMT
            Not After : Dec  7 01:02:16 2025 GMT
        Subject: CN=ae4fad9b9093d984eebeafb943818388ef62b8b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:42:0f:76:84:5b:e0:eb:22:0a:4f:79:9e:b1:
                    f3:49:21:ab:63:06:45:aa:ec:9a:f2:69:12:eb:26:
                    01:ea:84:ca:bb:41:59:d0:db:0c:a4:0c:e4:a3:0a:
                    8d:47:a6:93:e9:6e:6a:ae:5b:9a:75:3a:0b:9b:e6:
                    9c:c0:61:67:45:a5:b9:73:db:ca:55:b1:15:36:a1:
                    b3:86:8b:ae:6c:c9:94:0a:69:0a:f8:a7:7f:6c:85:
                    87:8b:c7:2a:2d:ed:f4:c2:20:3c:4f:96:db:84:2f:
                    5b:e2:9e:f6:0c:c3:45:d2:40:c4:3a:d8:c6:e1:7d:
                    39:db:66:61:3b:4a:a5:70:85:3e:13:72:49:22:f2:
                    75:64:10:13:ee:87:55:96:86:3a:4d:b5:6f:42:0f:
                    6f:61:83:76:c9:1c:c3:8d:a1:64:9b:98:6f:a7:34:
                    38:4c:c6:28:25:4e:60:74:ce:76:c6:ec:1c:23:30:
                    19:06:43:88:c5:11:f0:11:86:32:24:a7:ec:64:35:
                    2b:cd:15:d7:56:1a:17:c6:ac:e9:49:a8:2e:2b:01:
                    f5:ba:71:f7:cc:57:05:01:7c:9a:e9:84:e2:dc:1e:
                    97:bb:d3:eb:fe:10:b0:04:5d:2c:10:70:10:f1:ed:
                    7b:8e:8e:1c:7e:f5:85:4a:71:40:9e:cd:e9:1e:96:
                    39:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4F:AD:9B:90:93:D9:84:EE:BE:AF:B9:43:81:83:88:EF:62:B8:B2
            X509v3 Authority Key Identifier:
                keyid:03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:9d:22:88:c8:62:b8:b6:de:3d:9e:b0:ad:c8:78:e4:d4:62:
         d8:bc:ab:3a:d7:c0:ec:b3:35:20:af:30:9f:3f:ae:31:3c:7c:
         e9:79:5a:ff:b9:5f:97:87:76:5e:1b:d2:7e:ba:ba:4e:13:c6:
         be:f7:25:76:a4:4f:9e:84:df:87:81:ea:e9:fe:ce:f3:e0:b7:
         62:2a:1c:e1:1c:4d:ee:77:d5:2e:b5:84:f3:6b:1e:e9:eb:cb:
         6f:3b:b5:ab:74:d1:05:28:f7:db:1e:bc:43:c7:27:e8:03:b5:
         55:c1:56:94:29:d2:bc:ce:52:4b:b2:4a:33:a4:8b:bc:c9:ad:
         8d:ca:e9:ba:0e:c3:71:0b:1b:ae:d2:2b:80:08:60:49:17:bd:
         af:a2:e5:da:60:39:b4:0f:33:25:8b:cb:5e:51:d8:a5:d8:0c:
         25:35:69:2c:49:8d:50:51:63:be:9a:1b:27:fc:e3:1c:b4:68:
         a5:51:7b:e1:34:5e:6e:99:8f:1d:47:d2:17:7f:2d:b9:b5:04:
         b7:52:f5:3c:69:e1:09:6a:7b:a1:7e:96:64:73:3c:b1:4d:fd:
         82:67:72:bb:f0:9b:7e:48:79:9a:39:63:d5:b4:6f:fc:08:1b:
         7a:d9:d8:38:13:f2:66:10:0a:b3:43:51:00:b8:4e:98:d3:96:
         90:cf:11:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:43:56 2025 by rpki-client