This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
File:                     8UPRPHu9KqFfVnfBOawzyGeHnyw.mft (raw, json)
Hash identifier:          f/iqbp/zOBIMi1d7C3wF79QXcIFJmmlJFVSc33KvCYY=
Subject key identifier:   16:6B:7A:49:DE:83:31:4B:65:7C:5B:D4:A1:EE:D4:A4:37:05:BA:CA
Authority key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
Certificate issuer:       /CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Certificate serial:       019AF2ADC7C31A5352C02838E3DB8F7D53C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
Manifest number:          07B2
Signing time:             Sat 06 Dec 2025 08:01:06 +0000
Manifest this update:     Sat 06 Dec 2025 08:01:06 +0000
Manifest next update:     Sun 07 Dec 2025 08:01:06 +0000
Files and hashes:         1: 8UPRPHu9KqFfVnfBOawzyGeHnyw.crl (hash: pTVzWDBvhGlNPuS4DurfPvHKbYj/zu+PrbSEsCtNxL0=)
                          2: UMmv-WY7B5qYJViInJvlNV476mE.roa (hash: jHHOgpNZRXbrpDROEuRDFCxUXMl5uaCZV9NM+NW4eXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 08:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:c7:c3:1a:53:52:c0:28:38:e3:db:8f:7d:53:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
        Validity
            Not Before: Dec  6 08:01:06 2025 GMT
            Not After : Dec  7 08:01:06 2025 GMT
        Subject: CN=166b7a49de83314b657c5bd4a1eed4a43705baca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1e:15:79:1a:b9:c4:1a:4c:5b:3d:28:32:23:
                    2d:3f:a7:76:31:66:03:f6:31:ef:16:30:52:7e:5d:
                    9a:a2:3b:c6:32:65:af:22:c0:38:85:65:ec:cd:27:
                    04:db:88:03:35:b9:00:e6:e2:4d:7c:f8:6c:bf:03:
                    12:aa:d4:8b:c0:2c:c5:5a:a2:d9:06:4b:01:6f:a4:
                    66:ca:85:31:19:c5:6a:15:42:46:3a:8b:db:fd:a7:
                    4f:db:e5:d2:fa:7c:5a:3a:14:bc:65:e6:c4:79:82:
                    4c:0b:b5:30:86:a3:9a:13:a2:9f:7a:0b:0b:7b:2e:
                    be:94:58:96:fa:a8:cc:ef:eb:41:28:09:ce:d7:ca:
                    83:7c:70:ad:4c:da:9d:d2:9a:ef:43:32:14:97:89:
                    02:74:71:0b:fd:c1:be:38:92:7f:46:97:ec:46:1a:
                    89:d2:24:e0:b6:e6:53:99:6e:0a:d0:1a:57:3c:53:
                    f6:48:93:ce:b2:13:f3:f1:9b:f1:a8:9e:ef:d7:ec:
                    28:c4:9f:a9:c5:b2:00:c9:64:96:9a:80:2e:be:0c:
                    ee:c8:79:7b:d2:2f:80:ce:42:38:40:77:5a:ec:5f:
                    26:00:ac:4b:fe:44:46:60:90:68:88:b6:80:4d:62:
                    3f:71:44:d0:e4:82:d8:81:ed:ee:6b:72:26:9a:70:
                    5c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6B:7A:49:DE:83:31:4B:65:7C:5B:D4:A1:EE:D4:A4:37:05:BA:CA
            X509v3 Authority Key Identifier:
                keyid:F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:2e:c3:57:12:bf:05:92:58:62:f5:fd:9c:93:01:d0:dd:e0:
         af:ff:90:bb:71:6a:90:6a:fc:4d:84:00:bf:fe:7e:15:77:8e:
         cc:ed:e8:b8:4a:31:08:1f:e6:13:0a:b3:db:f7:d0:57:42:fb:
         54:3d:c9:9e:d0:9a:d8:c8:5b:62:2e:14:a1:7e:0d:ac:13:45:
         58:be:35:67:28:29:d7:e2:a3:dc:c2:2a:31:e8:1b:72:c6:63:
         6e:a6:9f:a7:31:df:36:40:a5:e7:60:fb:61:a8:0e:86:0b:cb:
         98:fc:17:8c:8d:4f:20:49:73:4e:64:00:0f:87:5a:65:83:c2:
         35:12:f9:a0:d5:5f:c5:e2:a0:74:0b:00:bc:22:32:2f:c7:2d:
         bc:eb:b4:74:ae:46:31:40:8d:c8:73:17:79:9a:39:17:54:bb:
         7d:eb:b0:3d:89:8b:87:c9:d1:d2:ee:d0:e0:c4:ad:c5:e2:fc:
         ad:e0:9f:56:f9:9c:36:07:a4:d4:52:5d:41:97:49:27:48:94:
         f2:7f:42:f4:15:a3:e6:4c:08:91:af:92:7b:60:1d:6a:4d:5e:
         e3:52:fd:00:85:9f:b0:e0:29:67:29:62:cc:03:00:06:bb:42:
         6b:5a:3f:d9:cc:ac:98:d9:cb:0b:f3:c6:7a:05:ff:d2:0f:f8:
         07:c6:6d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:41:27 2025 by rpki-client