This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
File:                     8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft (raw, json)
Hash identifier:          XeoPxV242Bgg+6jiyrBho9lIm+RKhRSE2eB4XhGm12A=
Subject key identifier:   7F:E5:E6:27:F1:00:18:3C:EA:80:35:4F:2A:67:EA:FA:59:3D:FF:D2
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Certificate issuer:       /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial:       019AF276AE437BE90DECBD9861FD484B9814
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
Manifest number:          1853
Signing time:             Sat 06 Dec 2025 07:00:55 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:55 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:55 +0000
Files and hashes:         1: 1-pkoPKMCZ9qOJcUpbg4SD3YM82I.roa (hash: fr0BGqmmgkymb/Io2tWlqm6/TRfrQYD5zH4bv2liAY4=)
                          2: 60lT6E7Hw-SybLa6dCTef8Owqso.roa (hash: kxBaSXQQFFLnQ/jWfDvLC1N4uboGoYMJnKAExPscFWo=)
                          3: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl (hash: yj0ENpaa0NFs5IjodPHbwKjqsE+yG56QXtEPauhu/XY=)
                          4: AkeW0dNO6HwoGorE-RVkvkd5lYI.roa (hash: cFEnsrh1nsOvG/GU22O2yZ4HJtAwycOwC2PtRPjLqBI=)
                          5: B1142MZmoWC79cU7wc6SpTqGiyI.roa (hash: ho8/5G5V6c0C9LD1lAUutQeKnpgOVsvxXS6BHwKivQY=)
                          6: G9iD8U4QCioeA79cHr2xVSAWeEI.roa (hash: isof3/aO68rNSeHuTbxaBE/zI2rUwZRzXlA4N/t2RR8=)
                          7: H8YJLWnpWipMvgIr9ji5smf4Tfk.roa (hash: M3PeYVw02zCqgGsGWVEqY9NDqtJ4pOhlFV2aXiG2+JY=)
                          8: KbXum3tGxYpXO3QIbsz4v0Gc9YE.roa (hash: Xdbf5vp7RPXfCgiOaz1rHhCCOGhSA6vAYCYI/x90YU0=)
                          9: MNEt8VrSmpVV6QQFZEtFkOb964o.roa (hash: Qp6oqipOgd4f6BqRbUAiNDAjU+YosYUxQPAPrWVqcBE=)
                          10: Mdp9Kv-Vu7KoI3CAPKr9JqJyQF0.roa (hash: SVNqMzugCbLVwMP8haqTfMrXYGbHl90Ct7rAkwp4GGU=)
                          11: Nx6plveuESXQK8zHN0saWCNgZtg.roa (hash: QL/uKZ/nr+28xsvZGhgIMqZgRaxPkWfGMmZV7z027VM=)
                          12: O9cN0ZR3uRs9JZLPjZ_apekO_1o.roa (hash: VyuL/Lcqim34ks+x+bFHqTVYiETL9VCXnibosD6RzqE=)
                          13: PXz0xECU6TjhYqxiIXtEO5Wt6wc.roa (hash: IQ6HG99adaSd4g8dYN9Tq5G654BtgGfHZKvbtQePiBg=)
                          14: QUqReStf6TEFnsU1tSixUGPYTuI.roa (hash: K60fCDp86LLBo6obO2VN9uWaTquDob132b4Q/cH5WYU=)
                          15: S5aHdm30TryFtG2jDVy3wkSOz2Q.roa (hash: gGROgcge0wvbKabdkDSLw/YtICixKaiQd0Hk++1c5Is=)
                          16: SUo0DyFvECncRbWyydY2boWfDw0.roa (hash: KZ9eDlHCtBK84KWAdJ7YZAtQ8L4glAEpb/0BP5qJVMg=)
                          17: TW2quqEtMmBMtjFETxrg2LVk9Oo.roa (hash: 63aKh4PjYXwflLNSYPKfmuOdFvd6LVwJFipNOxlRjJI=)
                          18: WZKLhLcb_14f65w-Gxi0P7Y4PGI.roa (hash: rd8mwsH5vvMfna/I2W08kC0v/oG9b9ll9tJk/Yl4I2o=)
                          19: XLs5m7yFpYbQixlyQEPtxV_7mOs.roa (hash: Fghw0ZM8qJSM1Rk38Og5x502OtV7xRwTHNOwSJX4CJo=)
                          20: YJCi9AWh99xuK45xoYGOeQ7CnmE.roa (hash: Ti9BtXIsKFet++HwcTL4uva9A9w4W22YtG5seAitsY8=)
                          21: ZasgQLj553uShFx9qygvcO1idVY.roa (hash: xV4yVjOGaxnmU8uKE6oE/eSTkUdEZQ/Ub4WuQWWJos0=)
                          22: _NcltatYeskVsJ2GmWYQEOtBuzU.roa (hash: EFUSsiFNwzbPc+B6nty0bVOEIqERfMB5igPoEOdQ1Ow=)
                          23: eB2hSV_Hdx6UpXi8AI7IynGR-nU.roa (hash: dc/doO6o1+KWXt12g3TR56aCxeeTLAIL3hhXaij4HvQ=)
                          24: eYe0ntoHsn5C9aoZKH_cB21Bfys.roa (hash: rbiYcU0iwzMDkl2hqOmLPRmcdqv8DqvFIgub7i+wD8o=)
                          25: f460IPqQlQEG9Ilmybk9LOnau4A.roa (hash: 1vIbZBuCjlKIeaULpU2EaovNh3t6eGRb6tKyHFFkmzQ=)
                          26: gGO9icMrdD7N9uiJnKWR-Ueytgo.roa (hash: 1RTOeLDADO5dBwjjbWYNNQtq640SgJeezRVf2Hcyp3A=)
                          27: pAaBglS_ph_lomtz_pi-YWsNz74.roa (hash: +DNf/G42yq93h12+GOLlNd9IxjCcQ12CMJ+kjCCl/Cw=)
                          28: qq4fM1ObQGyaLMmavbeC_4huAhs.roa (hash: uj3kwNGwI3ye+3/FlFrfR0c/PIhlj04gSoV4ikzeXw8=)
                          29: sJ8MWzOJrRSDCEy5539zFEW54Fg.roa (hash: SrkAclwJ6pGZe3QnLXmTkQWct0fK9CqayvHKB5l708k=)
                          30: tIoiJqn_Zw4bkifEyWUceFVpDXE.roa (hash: +3bSV4N3AQ7/Wh4s2xd9vZBKmvEVCXYmroX/aifAP+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:ae:43:7b:e9:0d:ec:bd:98:61:fd:48:4b:98:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Dec  6 07:00:55 2025 GMT
            Not After : Dec  7 07:00:55 2025 GMT
        Subject: CN=7fe5e627f100183cea80354f2a67eafa593dffd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1a:bc:d9:49:2b:4e:72:81:93:7b:14:c3:e9:
                    36:e2:d8:63:51:a8:47:54:01:ed:e8:9d:9a:23:79:
                    1f:28:3e:fc:ea:a1:ae:a6:ce:c5:e3:34:a9:00:1e:
                    41:03:c6:b2:41:4f:6a:06:ef:a9:24:b6:43:80:4d:
                    19:f8:f8:52:06:b0:86:15:87:87:d6:e3:09:d2:00:
                    e2:ae:f8:f0:29:2e:e3:73:31:a5:d2:2c:28:6d:ce:
                    58:5c:06:0d:53:dc:3b:cd:0e:20:d2:8f:f9:8a:e2:
                    fe:37:6b:c0:37:c0:a0:a5:86:c8:a0:fa:bf:73:64:
                    a6:a5:5b:20:d1:76:98:f4:5c:65:ab:6d:98:8e:a1:
                    64:6b:09:2c:51:6c:b5:88:f6:2c:78:86:91:fb:52:
                    03:f1:fe:dd:4e:a0:e9:6e:d6:ec:3b:2d:df:3a:03:
                    b9:5e:df:53:79:d0:00:db:31:ad:df:7b:cc:2d:d7:
                    f3:f0:46:92:d3:da:d2:fb:31:26:66:1e:6f:bc:68:
                    c3:07:d4:d3:14:22:ac:66:b9:b1:b0:c6:d1:46:83:
                    e4:2e:c2:11:75:ac:03:bc:25:bd:65:aa:cc:a4:75:
                    8e:f8:d5:06:84:5b:f3:70:8a:66:98:25:d9:05:32:
                    20:be:25:81:f8:8d:e2:d1:8a:9f:94:71:42:a7:30:
                    dc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E5:E6:27:F1:00:18:3C:EA:80:35:4F:2A:67:EA:FA:59:3D:FF:D2
            X509v3 Authority Key Identifier:
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:8e:b6:8f:d9:52:57:ce:54:e4:73:02:a7:6b:2f:b7:e5:23:
         8b:84:d9:3b:d2:3e:fb:59:3a:31:56:2f:5d:39:ae:39:20:f6:
         b8:70:b9:66:5e:01:81:3b:da:b8:d9:80:25:ab:cf:20:f7:44:
         02:81:50:91:54:ed:f6:a6:7c:0a:18:79:a0:0c:de:97:31:6a:
         2f:e7:88:b9:05:c0:7c:db:a5:dd:8c:98:87:11:66:4a:f8:14:
         ab:ca:8f:98:73:1d:eb:8d:2e:75:12:c1:dd:38:4e:8c:a5:87:
         19:a1:ec:78:53:39:f9:f2:09:21:ec:54:01:af:73:d9:8f:2b:
         d2:be:bf:e7:cf:0c:95:64:bb:96:da:28:72:50:a2:83:b1:87:
         bb:2d:73:a6:5f:a7:b6:86:d3:cb:66:85:fc:e9:77:55:fa:06:
         a0:17:0f:54:3a:74:50:94:ac:30:97:91:63:85:76:35:d6:4e:
         b7:05:e5:a6:cb:7f:cd:13:47:dd:74:97:d1:fc:30:5a:30:29:
         26:05:e9:a6:35:6c:cc:23:55:1d:e3:9c:8d:05:52:50:a2:d6:
         76:07:c6:5e:15:40:b6:a8:76:3a:b8:ba:79:e3:7f:6e:d9:a9:
         3a:54:26:e5:8c:d8:28:fb:bf:8e:e6:a3:fc:c0:a6:88:75:8d:
         94:d8:75:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:54:45 2025 by rpki-client