This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
File:                     aMDy0Hdvfh00kHWIHDXp04dGNAU.mft (raw, json)
Hash identifier:          2oX7JX7p9n4szZI2vsXuCTxGTKkpt9BsC6uNcCSOVuk=
Subject key identifier:   A0:0F:79:8B:B3:66:37:56:70:87:5E:DC:74:75:F1:99:0E:30:19:CF
Authority key identifier: 68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
Certificate issuer:       /CN=68c0f2d0776f7e1d349075881c35e9d387463405
Certificate serial:       019AF23F977DEECC08FACEA0AEC5BD7600E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
Manifest number:          08B8
Signing time:             Sat 06 Dec 2025 06:00:44 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:44 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:44 +0000
Files and hashes:         1: 9Cor9nA5STtdeNAPJ4EF2UhIUNY.roa (hash: 2Xypo5/I10KMSVc6sd5OAZl2260JQAWQGDIcFZqWthg=)
                          2: 9L1jJAO_HMQ73m0y2wPc0NTq508.roa (hash: dppWJh2OxH8+hUL7V9AV0LikKL7kW2xpJmDuGMTyRBM=)
                          3: BofSOCqR9lVaW3XPh8s-hTi0YA4.roa (hash: GjLb3/wGRJd3Eao5cHxTciBM+9F+oErcKi5PWIvkCug=)
                          4: aMDy0Hdvfh00kHWIHDXp04dGNAU.crl (hash: qkBJw9mv4IKhgHs3miGd3B3E6MAFcQuh3BGALUE3OFQ=)
                          5: pGJ6hykI0SezIUBll3Bejkc4eK8.roa (hash: LOy2PAU5LyGNlvT8G9Ei0trOR6p2w0dY/EWeeNGTATo=)
                          6: sid7Fz4p9LsUb435z4rlURheO5M.roa (hash: tKFwC0bd+BEOCIW21NmrzUtEhbV3IutUiWL0BmRO0A8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:97:7d:ee:cc:08:fa:ce:a0:ae:c5:bd:76:00:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c0f2d0776f7e1d349075881c35e9d387463405
        Validity
            Not Before: Dec  6 06:00:44 2025 GMT
            Not After : Dec  7 06:00:44 2025 GMT
        Subject: CN=a00f798bb366375670875edc7475f1990e3019cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:95:2e:9e:ee:2b:c0:86:02:ad:fd:49:97:53:
                    08:61:5f:c2:a8:bc:7c:89:f0:f6:a5:01:4a:d0:f3:
                    e3:11:51:05:8c:db:d5:e9:1b:42:fe:71:e7:cc:50:
                    24:75:2e:af:0b:98:fe:21:45:e0:3b:d3:96:49:b1:
                    51:f2:46:69:86:be:ee:8d:29:b5:70:b0:5a:3a:ef:
                    97:c2:f8:de:23:f0:c5:ea:37:df:fb:bc:5d:ab:fb:
                    9a:33:db:b7:60:ab:fd:4d:8f:85:6e:df:64:d8:4c:
                    b1:54:9b:2d:eb:16:68:3c:bc:83:c1:d5:88:51:e6:
                    95:7d:0f:ac:ef:38:78:ed:f9:c8:4a:1d:d6:53:6b:
                    c5:5c:18:1a:bb:64:95:f4:2c:e1:41:70:bd:b7:19:
                    5d:12:f8:c5:60:44:c9:92:36:0b:bc:01:a5:5d:c8:
                    ad:44:20:02:ea:c7:e4:95:97:25:4d:bb:b1:3a:90:
                    e2:db:1c:dd:b0:1d:26:73:03:ad:c5:b9:bd:79:0b:
                    72:d2:e0:c8:25:cf:f9:37:f0:49:e1:57:87:8e:62:
                    69:bf:7b:c9:3f:e7:3d:5d:a5:1e:18:cc:d3:ef:3a:
                    fb:76:fd:44:cb:37:91:6d:33:be:cc:c0:47:8e:7a:
                    54:86:fb:96:d9:e8:17:ca:d9:ff:65:d4:67:2e:27:
                    62:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0F:79:8B:B3:66:37:56:70:87:5E:DC:74:75:F1:99:0E:30:19:CF
            X509v3 Authority Key Identifier:
                keyid:68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:90:45:f0:60:19:dd:98:3b:dd:ef:68:b4:b2:5b:2b:89:14:
         33:c7:e6:36:3f:73:ac:1c:9e:68:bb:13:9a:ca:26:43:a7:33:
         e1:e3:8e:7e:89:28:c3:fb:ad:ca:3e:80:79:8a:a1:d3:bc:aa:
         81:a8:7b:46:6f:f4:eb:cc:f5:b1:60:3d:3e:0f:b6:d9:9b:eb:
         a2:f8:71:48:24:f6:4b:4e:81:26:42:be:83:6b:d4:e9:7c:b3:
         a7:e0:52:55:c1:c4:a0:f7:28:51:00:c0:ad:4e:99:55:b9:89:
         84:55:96:be:d7:8f:39:50:55:43:17:90:0d:80:43:54:40:81:
         a7:c0:ef:bd:77:d4:a6:b3:72:96:c5:20:eb:05:99:32:cd:78:
         e1:32:c3:cb:4c:d4:d7:32:fa:91:a6:eb:6c:4f:6b:6b:b6:5c:
         d2:97:ed:d9:e8:79:f0:cf:e0:a6:56:3b:92:7b:63:d9:23:32:
         d4:ef:8b:7e:8b:09:41:5e:87:7a:3c:c5:c2:bb:be:83:41:29:
         7e:1c:46:4b:32:c9:6e:eb:54:38:dd:5c:2f:cc:32:43:41:f3:
         e8:60:6a:76:29:83:04:d2:35:65:3c:49:7c:fe:a6:26:50:df:
         ed:51:0d:9f:1c:50:e1:c8:84:34:3c:15:8d:dc:44:61:27:0f:
         71:11:f3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:44:55 2025 by rpki-client