This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File:                     8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier:          zNacNsG1hmhDilAf1Ny1ppmSRBqBYO3TUEq4GTnOj/o=
Subject key identifier:   F5:32:86:24:61:CB:E2:F1:B3:66:01:D5:0A:7A:5F:1A:84:F0:AC:5D
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer:       /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial:       019AF23F98ED8670B1AE52C15902B60FB00B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number:          11C7
Signing time:             Sat 06 Dec 2025 06:00:45 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:45 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:45 +0000
Files and hashes:         1: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: vGIs3BK0NBwHGXCR7BYctI0jYRgB5TCUcMKwWv+Jqy8=)
                          2: dPscEX-Zy8evMbxWuU7vJ2Ixhv8.roa (hash: D+72QcpH+TK76A0ijjgkoRMMQ5NsFbRIC95DTaeOIrc=)
                          3: eKaWRxU48jVjME70Pg-sKw71ysM.roa (hash: Fvcwn/TmHPQrbKfRxQXdczBfOElJLonqigBoxqw+IFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:98:ed:86:70:b1:ae:52:c1:59:02:b6:0f:b0:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
        Validity
            Not Before: Dec  6 06:00:45 2025 GMT
            Not After : Dec  7 06:00:45 2025 GMT
        Subject: CN=f532862461cbe2f1b36601d50a7a5f1a84f0ac5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d0:a6:30:b7:42:11:8d:5f:42:e2:26:96:82:
                    51:48:7a:4b:7e:8d:bb:95:83:c3:e2:ed:8c:86:82:
                    2b:cf:74:0a:3e:eb:70:67:d5:64:5f:81:ee:39:4c:
                    f3:5b:ee:85:d3:b3:5e:56:22:01:76:13:21:05:00:
                    9d:3d:b0:a8:f7:f6:82:f8:0e:66:6a:11:4c:0a:21:
                    b7:75:16:ca:fb:46:73:19:e6:68:c1:53:ca:6b:02:
                    e0:cf:b0:53:28:dc:75:e5:e3:7e:7a:e7:34:16:0a:
                    33:13:a3:be:e1:8e:1a:a7:2f:3a:e4:27:ca:5f:1d:
                    da:c6:46:b0:ed:c2:d5:a7:e9:8c:29:07:f8:33:15:
                    0c:51:4f:dd:3b:c3:35:26:8b:20:52:c1:6c:56:05:
                    a6:79:5c:13:68:f9:19:fd:96:87:f0:41:b5:cd:5c:
                    90:a5:5e:93:8d:92:09:f2:c9:39:1d:35:5f:6a:b9:
                    e2:fc:4c:c6:83:6f:74:6c:bd:34:77:2c:18:df:6c:
                    b2:4b:8b:4a:ad:4a:e2:e1:9d:f0:24:f0:40:4e:bc:
                    62:15:fd:92:14:ab:ed:8c:f1:a9:83:d2:77:d9:33:
                    fd:aa:49:f8:e7:4c:a7:5f:b8:d9:9b:a6:f8:b2:7c:
                    8e:7a:a4:71:70:a0:50:44:70:c2:f9:5f:68:50:d4:
                    ee:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:32:86:24:61:CB:E2:F1:B3:66:01:D5:0A:7A:5F:1A:84:F0:AC:5D
            X509v3 Authority Key Identifier:
                keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:d1:90:55:a1:07:4b:c6:1f:cb:1f:eb:ae:c4:cb:8c:2b:4a:
         ba:28:b4:97:86:b1:b4:79:38:d6:a2:7b:7f:9b:4d:1b:b3:b2:
         d8:13:0e:48:00:2a:6c:4e:96:a9:9e:cf:e6:56:7d:86:a2:52:
         8f:02:fd:6f:e6:93:84:20:e9:e4:24:38:3e:2d:5d:19:0d:16:
         45:ea:8c:19:47:0e:5e:86:5e:3e:d1:b0:a7:10:ac:47:5c:80:
         7a:46:d3:49:9f:1b:56:c6:6c:d0:7f:86:0d:0e:a5:89:39:08:
         b7:59:a9:75:f9:f5:b9:b5:32:96:73:77:b6:69:93:eb:8e:86:
         3c:f2:2e:76:cf:48:c8:c1:a4:79:a5:d5:23:e3:8b:05:d6:89:
         46:f9:b4:e4:d1:b3:7d:06:a5:bd:2f:7d:6b:bf:3b:c7:7b:b0:
         34:1d:59:1f:33:9c:6b:fb:ca:a5:1b:e0:c5:ce:90:f6:76:67:
         98:b8:72:48:88:9d:33:7e:c9:96:b6:b0:e4:13:28:7b:13:16:
         c3:d5:70:45:98:ec:81:6a:6f:c8:77:e1:f3:e7:06:ba:f2:73:
         3c:a4:33:a1:71:17:74:ab:35:ca:d2:87:ad:db:61:52:e3:b5:
         0d:6a:64:ca:0a:99:01:02:2e:f9:0e:76:51:37:32:8f:52:5e:
         1d:ef:5c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:10:31 2025 by rpki-client