This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
File:                     8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft (raw, json)
Hash identifier:          zKxxd8ZIOwwJzDQeArLGtcGw+SW5IrBJ74TKQ8n/7Vk=
Subject key identifier:   81:19:C9:A2:07:04:C1:C4:CC:5B:8B:FE:38:86:1D:CF:98:CF:39:92
Authority key identifier: F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA
Certificate issuer:       /CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
Certificate serial:       019AF1D1D75D52D7A6F06FCAB30B9F4D1CEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
Manifest number:          1764
Signing time:             Sat 06 Dec 2025 04:00:52 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:52 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:52 +0000
Files and hashes:         1: 8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl (hash: a5R5aIZNxcbUOLXtT6XNB2qUijEQn1T7bgQLhRJ0qg8=)
                          2: HCmwt2WAK-H7WYTy1icgaTefv78.roa (hash: +bS4/m9dhw+Ug0oj+WLZYyQxSyPJBlp+QZfTQscGHe8=)
                          3: Haz2dutrUVMMKz8DWDpTMKU7v-M.roa (hash: UYJn16zkfgLSDIIDhGPHhj8L2SfoMr/Jiya6AdzxVHU=)
                          4: lTV0wmQBB48Ktr0Vf2ykH7NjIHY.roa (hash: bq6a+K+pPXFxcaKzeiruinFGWe/rm0xE/5P0J11lvFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:d7:5d:52:d7:a6:f0:6f:ca:b3:0b:9f:4d:1c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
        Validity
            Not Before: Dec  6 04:00:52 2025 GMT
            Not After : Dec  7 04:00:52 2025 GMT
        Subject: CN=8119c9a20704c1c4cc5b8bfe38861dcf98cf3992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:75:71:5c:12:cd:6f:54:0b:13:85:b5:5f:3c:
                    b6:20:5c:4c:09:bf:1e:80:51:81:81:27:73:3a:43:
                    ad:d4:ac:13:d3:06:77:e1:c5:6f:2f:8e:ad:ac:46:
                    9e:cf:f2:eb:b4:31:92:e5:51:95:7b:df:63:7d:5f:
                    a0:28:8d:b6:c5:9e:9a:15:ec:45:af:f0:62:05:f9:
                    2d:1b:4b:82:62:8a:43:56:3f:39:6e:f4:b4:e6:09:
                    de:f1:f5:0b:3f:55:31:bc:f7:33:ab:df:9e:02:be:
                    d0:c4:da:9b:ae:5d:f4:90:40:62:3a:71:d4:e4:18:
                    fd:8e:75:8e:fc:0f:af:05:80:7e:2e:8d:95:7c:8d:
                    16:63:17:df:97:2e:b3:a7:63:83:0a:b8:42:fd:10:
                    7a:c9:5a:67:35:a9:66:71:d5:de:2f:4a:3f:a5:30:
                    35:2c:df:a7:a6:4b:9a:3a:02:7a:2a:a3:7a:a9:a5:
                    a3:dc:46:27:34:6d:8c:ca:08:59:91:8c:ee:b0:69:
                    97:c9:ea:dd:90:dd:33:77:b9:58:5f:f0:f3:04:21:
                    b3:3a:b9:ad:c5:3e:03:8b:e6:ef:53:a8:db:7a:9d:
                    09:53:30:04:52:d9:1b:f2:75:52:cb:1d:6c:c4:8b:
                    37:cf:ea:5b:b4:ca:52:b5:e9:53:fb:ae:c1:24:6b:
                    1d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:19:C9:A2:07:04:C1:C4:CC:5B:8B:FE:38:86:1D:CF:98:CF:39:92
            X509v3 Authority Key Identifier:
                keyid:F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:07:6b:0e:20:77:ef:a3:96:e8:b5:62:a3:37:d0:ca:b8:e6:
         3a:cc:1e:0d:c8:e5:e6:98:54:0e:67:f9:0d:db:b2:fa:34:4a:
         c7:ef:5c:e5:17:42:c0:12:d6:20:74:ca:93:86:92:c9:91:97:
         70:f6:a6:f9:fc:cb:bb:da:aa:2b:bc:f4:93:05:be:be:f5:5c:
         43:93:17:93:e8:3f:ab:ed:0d:92:df:6f:97:93:8b:21:19:23:
         ba:6a:14:06:a4:06:e9:18:ad:a5:c0:10:b9:5a:fd:8e:cd:ef:
         bc:23:df:b6:dd:05:c6:18:c7:bb:df:f1:b2:42:02:69:6b:da:
         c6:b6:98:72:b1:53:a1:4e:cc:a5:0a:75:d7:ff:f9:83:37:6a:
         5b:6c:8e:07:10:8e:0e:d0:56:ab:10:e1:4b:ca:4f:ef:10:bc:
         3a:3f:fb:94:fe:d9:0b:07:6b:2a:51:2b:62:b1:15:f5:7a:b9:
         f2:2c:15:d8:b7:11:a4:ee:69:85:b0:46:60:fd:bf:5e:93:e3:
         0c:72:62:c0:3b:07:84:b7:b4:0b:e3:ac:4d:1a:68:a5:a5:90:
         d0:2d:02:a6:be:e2:4b:1c:ff:64:45:0e:08:2b:66:ad:12:11:
         2d:bf:18:f6:3a:1a:f0:40:ba:ab:d1:4f:ca:88:c6:ab:06:2e:
         0f:04:b1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:00:21 2025 by rpki-client