This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.mft
File:                     eRP8_AYn_yGf5dZUmArUj0R6tBU.mft (raw, json)
Hash identifier:          jLkuTb2HPm4Cjwkl+f030DcJtYPD9a1H6mc0kJw9034=
Subject key identifier:   2A:77:B5:64:D2:7C:60:E7:00:41:5B:FC:A4:B6:1A:F2:64:CE:50:3D
Authority key identifier: 79:13:FC:FC:06:27:FF:21:9F:E5:D6:54:98:0A:D4:8F:44:7A:B4:15
Certificate issuer:       /CN=7913fcfc0627ff219fe5d654980ad48f447ab415
Certificate serial:       019AF19B7348A7FF113EEE39990DDC184F48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRP8_AYn_yGf5dZUmArUj0R6tBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.mft
Manifest number:          02AC
Signing time:             Sat 06 Dec 2025 03:01:27 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:27 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:27 +0000
Files and hashes:         1: eJu8DAG80mqEMpGkhj3wQuOHXr8.roa (hash: DOaRxNn/SrZmdsc84BhZlu4cBq+qb0YX2eXor7BoVjI=)
                          2: eRP8_AYn_yGf5dZUmArUj0R6tBU.crl (hash: EeOBW8kx6IxXX/JtEswkYQaQpuUdL+dNBquhzL5dClk=)
                          3: mao1uadVCeFMM8wryeWY5BR-7f0.roa (hash: O0Lx4ebG9mRcmgsWCpFUzVMc+24C/UMOL6lwkcukVPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eRP8_AYn_yGf5dZUmArUj0R6tBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:73:48:a7:ff:11:3e:ee:39:99:0d:dc:18:4f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7913fcfc0627ff219fe5d654980ad48f447ab415
        Validity
            Not Before: Dec  6 03:01:27 2025 GMT
            Not After : Dec  7 03:01:27 2025 GMT
        Subject: CN=2a77b564d27c60e700415bfca4b61af264ce503d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c3:6c:9c:17:16:8f:76:e2:50:87:83:01:72:
                    22:f7:26:bc:69:59:58:ab:7f:a1:95:b8:75:31:b8:
                    44:ad:d0:20:dc:77:26:85:9d:bc:dc:c2:11:ec:75:
                    62:56:61:80:bd:b2:5a:66:79:50:34:95:c3:9c:8f:
                    a8:28:f2:70:87:bb:1a:b4:fd:20:f6:5e:51:22:dc:
                    e1:30:8d:64:e4:b7:e2:13:16:31:e1:b7:7e:73:cb:
                    9a:d1:67:26:da:ed:7b:03:59:b4:57:dd:f0:6b:83:
                    7f:f4:75:18:fa:14:cb:c5:de:d1:d5:67:09:30:66:
                    cb:d3:91:ef:a7:4d:02:c6:c4:31:f1:ac:0b:17:55:
                    8d:40:6f:01:b6:47:54:6c:da:bd:be:41:0d:e1:84:
                    98:51:11:29:d5:c1:fa:c2:58:64:ff:94:ec:86:26:
                    1b:50:9a:62:ea:dd:34:c4:29:5f:c6:72:83:66:6b:
                    6e:66:53:4c:cf:0a:8f:b9:da:75:2e:7d:b0:e6:12:
                    46:bc:75:dd:46:96:22:46:b9:a4:52:07:a7:fe:36:
                    5e:11:5c:e0:61:39:1f:be:ae:8e:cb:47:96:0d:44:
                    dd:25:5a:87:6b:01:f1:91:61:54:5e:ca:21:74:ca:
                    05:3b:0c:54:70:5c:34:d9:ea:eb:3b:0d:d8:7d:c7:
                    38:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:77:B5:64:D2:7C:60:E7:00:41:5B:FC:A4:B6:1A:F2:64:CE:50:3D
            X509v3 Authority Key Identifier:
                keyid:79:13:FC:FC:06:27:FF:21:9F:E5:D6:54:98:0A:D4:8F:44:7A:B4:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP8_AYn_yGf5dZUmArUj0R6tBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:67:7e:d1:b4:81:f5:56:38:3c:bd:2f:43:96:2f:a5:de:2b:
         27:b3:54:75:fd:be:87:4b:50:0b:31:ef:1d:bc:18:88:28:b1:
         58:d0:cf:51:4b:7d:9d:e1:d8:8f:0d:4e:91:cd:c3:6d:cc:5e:
         06:a3:9a:76:2e:2f:07:64:ca:09:e1:6d:a5:24:5a:c1:b4:b4:
         17:dc:ba:78:58:fd:b9:a6:36:fe:51:8c:c3:15:83:3f:34:f5:
         a4:8e:37:21:f8:82:a6:d4:55:db:f7:c8:d0:f7:ca:fc:a2:0b:
         6b:cb:c2:26:2c:ca:c2:93:96:b4:3e:9e:33:4b:4c:07:cf:05:
         16:43:c9:ce:c5:9a:29:69:42:e7:4d:63:86:b2:fa:a8:53:43:
         9f:ba:3a:06:66:ce:79:4f:59:fe:46:02:76:51:66:af:ee:ac:
         a8:85:06:6c:a5:23:1c:4d:40:77:89:b5:99:df:40:11:b8:9a:
         75:ef:1b:b9:32:d8:e9:f3:83:09:49:c9:f8:89:46:0e:bd:db:
         34:1f:f7:00:9e:f0:c3:45:af:dc:cd:92:ba:a7:19:36:a4:d9:
         7d:9f:f8:98:f6:50:67:81:0e:16:87:ea:b8:d2:30:59:d5:cb:
         95:2d:69:b5:4a:a7:d4:b5:39:9f:4e:85:b6:04:ab:67:68:2e:
         87:aa:44:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxm3NIp/8RPu45mQ3cGE9IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MTNmY2ZjMDYyN2ZmMjE5ZmU1ZDY1NDk4MGFkNDhmNDQ3
YWI0MTUwHhcNMjUxMjA2MDMwMTI3WhcNMjUxMjA3MDMwMTI3WjAzMTEwLwYDVQQD
EygyYTc3YjU2NGQyN2M2MGU3MDA0MTViZmNhNGI2MWFmMjY0Y2U1MDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcNsnBcWj3biUIeDAXIi9ya8aVlY
q3+hlbh1MbhErdAg3HcmhZ283MIR7HViVmGAvbJaZnlQNJXDnI+oKPJwh7satP0g
9l5RItzhMI1k5LfiExYx4bd+c8ua0Wcm2u17A1m0V93wa4N/9HUY+hTLxd7R1WcJ
MGbL05Hvp00CxsQx8awLF1WNQG8BtkdUbNq9vkEN4YSYUREp1cH6wlhk/5TshiYb
UJpi6t00xClfxnKDZmtuZlNMzwqPudp1Ln2w5hJGvHXdRpYiRrmkUgen/jZeEVzg
YTkfvq6Oy0eWDUTdJVqHawHxkWFUXsohdMoFOwxUcFw02errOw3Yfcc4pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCp3tWTSfGDnAEFb/KS2GvJkzlA9MB8GA1UdIwQY
MBaAFHkT/PwGJ/8hn+XWVJgK1I9EerQVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVJQOF9BWW5feUdmNWRaVW1BclVqMFI2dEJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zMjE2NzgtYWIxMy00MzU0LWIwN2Et
MzU5ZTU2MjRlYjNjLzEvZVJQOF9BWW5feUdmNWRaVW1BclVqMFI2dEJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zMjE2NzgtYWIxMy00MzU0LWIwN2EtMzU5ZTU2MjRlYjNj
LzEvZVJQOF9BWW5feUdmNWRaVW1BclVqMFI2dEJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWd+0bSB
9VY4PL0vQ5Yvpd4rJ7NUdf2+h0tQCzHvHbwYiCixWNDPUUt9neHYjw1Okc3Dbcxe
BqOadi4vB2TKCeFtpSRawbS0F9y6eFj9uaY2/lGMwxWDPzT1pI43IfiCptRV2/fI
0PfK/KILa8vCJizKwpOWtD6eM0tMB88FFkPJzsWaKWlC501jhrL6qFNDn7o6BmbO
eU9Z/kYCdlFmr+6sqIUGbKUjHE1Ad4m1md9AEbiade8buTLY6fODCUnJ+IlGDr3b
NB/3AJ7ww0Wv3M2SuqcZNqTZfZ/4mPZQZ4EOFofquNIwWdXLlS1ptUqn1LU5n06F
tgSrZ2guh6pE9Q==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:08:47 2025 by rpki-client