This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.mft
File:                     8ve5y7uJUqw_GW580Lik26XeEcM.mft (raw, json)
Hash identifier:          jKSu9WwmPBz8rmANIBEGdY1odqNmuJGjfpzvCicLj5I=
Subject key identifier:   7D:F3:15:B3:8B:42:EB:C6:7F:93:74:A3:97:CC:26:2D:FA:59:EC:D0
Authority key identifier: F2:F7:B9:CB:BB:89:52:AC:3F:19:6E:7C:D0:B8:A4:DB:A5:DE:11:C3
Certificate issuer:       /CN=f2f7b9cbbb8952ac3f196e7cd0b8a4dba5de11c3
Certificate serial:       019AF16416F62D2C3201E2F8F2616BB29327
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ve5y7uJUqw_GW580Lik26XeEcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.mft
Manifest number:          44
Signing time:             Sat 06 Dec 2025 02:00:59 +0000
Manifest this update:     Sat 06 Dec 2025 02:00:59 +0000
Manifest next update:     Sun 07 Dec 2025 02:00:59 +0000
Files and hashes:         1: 8ve5y7uJUqw_GW580Lik26XeEcM.crl (hash: 2q7RgEGn1+VNxJl26c/PDiCBzkCKCuUreYZfDdkT+Ws=)
                          2: FEoCb1uLso1eMcNnqeUGMSiYYmk.roa (hash: 26Octt5FPf1NS0dc+QAphRfbrN5vSMqq/tDr6dMsThk=)
                          3: L-e-zboOd0EExBXLvbSt2An9q3Q.roa (hash: 0pabBp9L9dI7nk3zp1L+efYrvlvpBkJqxMVrUl1c6Tk=)
                          4: baYIpR8Fy3HGS97tT3TkbmdSPzY.roa (hash: 7opRxausXis4QYNC4y2ER1LVJpyQDudccsf+oeNI93c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ve5y7uJUqw_GW580Lik26XeEcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:16:f6:2d:2c:32:01:e2:f8:f2:61:6b:b2:93:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f7b9cbbb8952ac3f196e7cd0b8a4dba5de11c3
        Validity
            Not Before: Dec  6 02:00:59 2025 GMT
            Not After : Dec  7 02:00:59 2025 GMT
        Subject: CN=7df315b38b42ebc67f9374a397cc262dfa59ecd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b8:9c:01:d8:53:68:4e:3b:58:05:34:40:30:
                    e5:d4:fd:40:9e:8c:50:25:c5:73:66:66:ad:4b:82:
                    b4:9c:dc:88:20:26:46:d6:22:ed:71:f1:a1:99:d7:
                    ba:f1:54:f2:96:24:f5:f6:ab:45:42:e0:99:69:2e:
                    01:e2:23:cf:61:e5:fe:10:31:1e:42:ca:d0:a5:8c:
                    ab:5a:7a:0e:ab:4a:8a:80:22:16:a3:28:b4:77:a9:
                    31:52:70:18:5b:96:93:2c:73:34:16:bf:9f:a7:3e:
                    72:f6:a4:53:e7:90:dc:36:55:63:98:bf:bf:0b:03:
                    16:9d:71:7c:28:f7:a8:aa:77:be:6d:f4:55:42:8e:
                    a1:80:e0:9d:1d:6a:96:82:a2:5c:50:a2:f9:14:98:
                    88:67:f6:fe:20:36:19:f3:11:0d:45:15:3e:fe:55:
                    a4:f2:28:c2:45:da:ea:cb:cc:0b:5f:c6:53:ad:8a:
                    45:ac:3e:ec:ee:b5:1a:6b:d3:51:c2:ae:87:46:d8:
                    e2:43:2c:47:74:da:3b:84:23:0d:b3:74:c7:93:24:
                    6b:ae:d6:89:de:60:1d:63:a4:f6:94:21:35:42:e3:
                    a4:be:89:1c:31:63:f5:ae:1a:9d:93:12:40:a2:00:
                    1b:e6:18:a9:65:e9:88:35:5f:c0:02:7c:37:09:0b:
                    d5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F3:15:B3:8B:42:EB:C6:7F:93:74:A3:97:CC:26:2D:FA:59:EC:D0
            X509v3 Authority Key Identifier:
                keyid:F2:F7:B9:CB:BB:89:52:AC:3F:19:6E:7C:D0:B8:A4:DB:A5:DE:11:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ve5y7uJUqw_GW580Lik26XeEcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ea:a5:7c:6e:49:7a:57:63:17:86:f7:47:83:1b:c1:b2:2d:
         7c:3a:4a:ad:99:26:95:08:e4:76:61:41:62:59:c0:9d:69:18:
         dd:c8:b6:f7:ca:a0:f1:c0:43:91:18:5d:6e:74:42:85:82:c4:
         a7:76:ad:0a:a7:57:22:ba:4f:a0:49:cd:a3:46:aa:84:15:d3:
         0c:c1:17:0a:18:9f:cb:95:12:00:98:60:ea:40:a7:b0:42:95:
         5b:90:ab:99:52:ab:1f:67:3f:ff:98:f3:b1:04:f1:71:0e:a6:
         36:d5:16:5b:16:29:e1:b6:16:e7:84:d8:19:13:89:95:12:7b:
         a4:67:55:f6:b3:71:c8:10:b1:4d:7c:48:e1:19:14:75:58:f8:
         81:c6:a0:7b:4f:9f:8f:1d:fa:24:b3:0e:a5:87:25:0a:9a:2e:
         1d:00:1c:81:84:c3:b4:c5:79:21:b0:6b:a5:c2:df:3a:65:bd:
         cf:15:78:93:d1:00:7a:15:5e:bb:9d:b5:75:5f:21:55:32:76:
         51:1e:a9:38:43:5c:a2:2f:37:42:e1:81:e7:01:ee:fd:df:5a:
         4f:1e:f2:ac:c6:aa:87:08:cd:a5:ca:f3:32:35:a9:ac:af:03:
         df:97:4c:d5:be:8d:4b:6d:76:e4:8a:a8:f4:f2:c2:60:dc:dd:
         69:8d:17:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:57:49 2025 by rpki-client