This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft
File:                     V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft (raw, json)
Hash identifier:          eYzdTNmYZyvsBDgtpjRhN+LXX4dN120BkYfNx1KsjdE=
Subject key identifier:   37:87:BE:AF:7A:CF:AB:8B:A5:7A:9B:11:71:B0:34:1B:C3:78:06:AB
Authority key identifier: 57:C3:5B:F2:0C:7E:43:31:2C:2F:08:DD:EC:7A:6D:E8:10:DD:F3:E5
Certificate issuer:       /CN=57c35bf20c7e43312c2f08ddec7a6de810ddf3e5
Certificate serial:       019AF19B6B585203F071BBEC861610F6339B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft
Manifest number:          078D
Signing time:             Sat 06 Dec 2025 03:01:25 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:25 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:25 +0000
Files and hashes:         1: V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.crl (hash: R7qFuwSrI0zBj36EkNTRib/f1zVrYszxjWpyO2+/M0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:6b:58:52:03:f0:71:bb:ec:86:16:10:f6:33:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c35bf20c7e43312c2f08ddec7a6de810ddf3e5
        Validity
            Not Before: Dec  6 03:01:25 2025 GMT
            Not After : Dec  7 03:01:25 2025 GMT
        Subject: CN=3787beaf7acfab8ba57a9b1171b0341bc37806ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:9d:4b:35:81:3d:be:c8:34:ac:3b:c9:13:
                    44:04:4d:ef:06:85:31:c2:40:8c:dc:6f:8e:a0:61:
                    b6:32:8e:c9:9a:17:93:52:80:4e:04:e3:8b:ac:9f:
                    d2:d8:c1:ee:76:fc:4b:6e:00:b6:29:60:d1:57:94:
                    ce:49:f0:53:77:87:89:ba:80:38:1b:f1:05:3b:fa:
                    96:5a:56:9d:45:5a:ee:1d:27:1e:27:60:d7:56:57:
                    e4:10:48:6e:79:ce:19:59:2a:5d:89:5d:2f:68:a0:
                    2d:29:ec:f2:0b:16:fa:31:5c:68:d2:e8:b6:cc:f9:
                    72:d3:5c:db:a0:61:a5:6f:b5:9e:54:71:2a:da:30:
                    51:e3:ad:cb:03:5d:81:01:a1:f0:2e:f2:0a:a8:80:
                    89:24:fb:31:01:9d:93:91:37:e7:6f:02:6a:e3:f0:
                    05:28:29:32:79:4d:a2:2a:b7:8f:f7:97:6e:11:4d:
                    31:a0:4b:38:56:60:f9:07:dc:ca:b1:6b:84:02:d3:
                    c1:6f:a5:9c:7d:88:67:cd:3c:2f:cb:c2:86:b0:b0:
                    6f:be:86:e4:f4:d4:81:2a:5f:b3:4c:c1:b2:b4:09:
                    59:99:1d:6d:ac:df:5b:3f:0a:b6:a4:f4:fb:61:42:
                    da:d0:0d:d9:07:11:59:cc:e7:c6:b3:66:95:a6:e4:
                    2e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:87:BE:AF:7A:CF:AB:8B:A5:7A:9B:11:71:B0:34:1B:C3:78:06:AB
            X509v3 Authority Key Identifier:
                keyid:57:C3:5B:F2:0C:7E:43:31:2C:2F:08:DD:EC:7A:6D:E8:10:DD:F3:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:a4:20:92:66:3a:8a:be:ea:18:60:af:8e:03:92:34:3e:a7:
         64:46:f8:ea:bf:b6:de:03:e0:c0:c8:77:e1:69:35:e8:f4:ce:
         2c:0a:a5:d2:4a:2a:5c:fd:77:31:12:eb:e8:e7:ce:fd:50:46:
         72:d6:8a:13:68:57:82:8c:2d:25:f0:d8:00:3c:58:3f:5c:ff:
         3a:42:fe:34:c9:17:31:7a:cc:13:ed:46:dc:42:67:9a:9a:25:
         42:48:e6:98:b1:3d:77:b9:1f:fa:fb:67:da:34:24:ad:1d:ee:
         82:12:57:53:3c:48:5a:06:ba:d1:82:5e:c9:b8:78:ce:d3:7a:
         00:41:30:e1:63:69:f4:cb:5f:c5:0d:56:0d:8f:05:20:5b:7c:
         88:df:af:6e:af:f4:df:4d:f9:65:30:ff:1c:63:8a:a4:23:18:
         57:07:4a:a0:71:f9:c5:48:a4:2a:a5:28:ac:78:53:ae:07:91:
         75:98:a8:43:b0:b9:41:6e:95:69:5a:1c:6c:fe:2a:b0:25:0e:
         51:fe:54:1e:0b:21:cc:7a:bc:5d:2d:0a:4a:9c:f6:77:0e:b3:
         1d:1e:c7:88:34:d6:ae:4c:a6:ce:01:fd:9a:d8:2b:b2:52:5a:
         0f:79:d2:f5:19:af:3f:51:ea:59:2e:7e:ca:48:cd:02:19:bf:
         c7:51:d7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:57:12 2025 by rpki-client