This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft
File:                     8mag-YbyGUXIDYMVZ7ryliAQetw.mft (raw, json)
Hash identifier:          B/0ctNbyVwaJ1QsX2a+zhmbf/wquOYK8lNnSpPTkZy4=
Subject key identifier:   F1:C4:BF:21:2E:F4:F2:1F:21:24:5B:42:BD:54:A6:F4:6C:C8:DF:AE
Authority key identifier: F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC
Certificate issuer:       /CN=f266a0f986f21945c80d831567baf29620107adc
Certificate serial:       019AF19B21CD7B452687AB1C1010DADDCC00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 03:01:06 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:06 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:06 +0000
Files and hashes:         1: 8mag-YbyGUXIDYMVZ7ryliAQetw.crl (hash: vWk2dbqisuptTn4qrMIG0uPPpKFscKa8azPEV9o9Bss=)
                          2: M5jtoM41Y8zxhgX6892Azn7CbgI.roa (hash: SsoCa6KU5R2ocIrHDaK8+DXGCTEtvLA0sldxtO1jaaY=)
                          3: NhXAxr82j13CORIdeWDl9PifhbY.roa (hash: LWTp4X6BWg45hL0vGetxJ41kPYBDS+pDAAij0HwwDrY=)
                          4: xwKRlfuar5Ok0_Vuih0mv8ent54.roa (hash: ofzw4+EAI9dgA5ztmD8H8K5/VJLMCGrjBng1uGirlUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:21:cd:7b:45:26:87:ab:1c:10:10:da:dd:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f266a0f986f21945c80d831567baf29620107adc
        Validity
            Not Before: Dec  6 03:01:06 2025 GMT
            Not After : Dec  7 03:01:06 2025 GMT
        Subject: CN=f1c4bf212ef4f21f21245b42bd54a6f46cc8dfae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:56:bc:0b:e3:8a:ff:e0:e2:18:33:c2:61:d5:
                    9f:7e:98:a6:aa:b5:a4:d0:14:bc:9c:36:f2:06:37:
                    3a:d6:b4:f9:2f:86:af:84:de:a0:61:e5:68:ff:cb:
                    a3:55:db:d4:f2:bd:9f:f2:06:f3:a5:83:c0:d5:30:
                    63:41:bd:2e:4b:c8:3e:6a:01:90:d3:2a:dc:21:d3:
                    f0:68:1f:2d:0f:d0:3f:cd:f1:eb:ae:f7:65:04:c7:
                    ff:5b:f6:c8:a3:0f:4a:3a:51:06:5e:1a:aa:b0:85:
                    17:e0:ac:da:04:23:c8:dc:6e:59:7a:54:0f:c9:a8:
                    1e:6c:5a:31:3a:34:70:c9:32:08:0c:61:3e:e8:fa:
                    65:da:ba:54:16:bf:24:06:3e:82:07:ee:1e:2a:39:
                    c7:6f:1a:71:40:6a:0e:ee:a6:c4:ef:3d:65:80:91:
                    3b:26:77:db:f7:3a:30:e7:7c:a1:d9:d0:1e:1c:77:
                    c1:b8:f4:43:7d:f9:20:f4:61:97:68:f9:bb:fd:8e:
                    86:bb:6d:63:7d:1d:ee:05:09:8d:dd:36:64:2d:39:
                    a2:7c:96:77:3f:0f:0b:2f:cc:92:af:c9:53:e4:89:
                    da:9c:b7:52:ca:a1:7e:bb:23:05:b9:76:a6:19:37:
                    f3:9c:2c:de:1e:d1:c9:b6:fd:8a:8a:83:c6:50:53:
                    c3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C4:BF:21:2E:F4:F2:1F:21:24:5B:42:BD:54:A6:F4:6C:C8:DF:AE
            X509v3 Authority Key Identifier:
                keyid:F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ab:bb:2f:df:aa:fa:e2:7e:15:a6:65:e5:a2:6e:94:b3:c4:
         12:fc:58:29:82:80:f2:92:1f:d0:5d:40:6e:ff:3c:96:5b:3a:
         60:66:27:90:56:ce:be:aa:f1:c1:bc:d6:52:f4:fb:e0:eb:0f:
         a2:29:65:1b:eb:21:60:56:2e:eb:e9:32:b5:4f:45:21:59:47:
         7c:f5:00:77:9e:bf:93:7c:10:84:0f:6c:ec:aa:01:7d:7d:8b:
         2b:74:de:8c:f4:e7:38:2c:39:65:30:ef:ef:d3:9d:2a:f0:8f:
         6d:dd:a5:9b:0e:18:72:d1:4e:c4:97:fb:41:54:97:bb:10:f9:
         8f:3b:c7:b5:03:e8:61:d7:74:b0:ce:b3:aa:0b:0b:24:4d:63:
         03:9d:7f:23:6d:c0:c2:2c:74:fb:ca:f4:26:6c:da:a4:e0:d9:
         21:56:03:31:fc:9d:b2:e3:af:d1:a9:9e:e9:98:7c:8f:94:1a:
         78:be:f1:d8:b4:29:fb:0b:6a:46:d7:da:a3:da:cc:25:b4:f7:
         40:95:d2:95:db:86:3f:cb:53:e0:d6:d6:65:d2:4a:e4:e8:37:
         5d:a0:30:e9:2d:44:36:59:3e:c7:35:d9:93:a7:c3:60:46:67:
         48:35:8c:74:92:74:c0:0c:53:17:44:a0:d9:70:0e:75:d1:e7:
         a7:0a:9e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:07:22 2025 by rpki-client