This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File:                     l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier:          FGrTDrt3ySjbCgfGsLYe0IGaAQeM3pJnRaM8fJEFEjI=
Subject key identifier:   57:91:90:E2:2E:FC:EF:97:B6:9E:74:1A:91:03:29:7A:92:2F:F4:48
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer:       /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial:       019AF19B0FC7B5CA293F394B7AE18C879E73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number:          05CA
Signing time:             Sat 06 Dec 2025 03:01:02 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:02 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:02 +0000
Files and hashes:         1: O5tzYrtFkkmA82WUY-iM9I4npFQ.roa (hash: NAkRuZlLqZ6QGa6dyEO9WBh2M5GYWwb6X+60cj2kmSQ=)
                          2: UpM_9nRhN5sEo1jLWob4fYkRieQ.roa (hash: 1KbxTVWk0iQIjrJWGCs4uRw+yTwWoVCpGhtFHqc3mxE=)
                          3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: mZJlfITML7NOZ7ycCt4S6zTtaw9IRm1ki7CWgQGRUrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:0f:c7:b5:ca:29:3f:39:4b:7a:e1:8c:87:9e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
        Validity
            Not Before: Dec  6 03:01:02 2025 GMT
            Not After : Dec  7 03:01:02 2025 GMT
        Subject: CN=579190e22efcef97b69e741a9103297a922ff448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6a:ef:51:27:7c:e4:1c:a4:56:b9:5a:71:79:
                    0a:c6:10:9d:43:95:ef:bf:ac:d1:6d:98:89:31:d7:
                    7b:c6:62:2c:72:56:b1:60:ce:d4:16:b8:6d:39:ce:
                    f4:9e:ce:68:a1:1a:1f:a0:fd:14:32:b0:12:ae:e1:
                    aa:5c:d0:32:11:05:04:43:ff:a7:33:4c:6c:55:56:
                    55:33:b0:73:59:dc:f9:43:75:23:e8:97:ac:af:6f:
                    bc:9b:87:77:00:da:dc:62:cb:ba:42:97:33:b4:14:
                    2a:8e:1c:13:c4:12:85:0c:8b:f1:8e:7f:fd:06:aa:
                    24:33:5c:cf:a9:31:77:ed:a3:a1:6d:c1:53:ff:cf:
                    c1:a1:76:9e:b7:5e:45:73:38:c1:b6:a9:b8:cf:ae:
                    f0:40:e2:b3:cc:0c:8d:94:89:ea:22:8d:0e:0a:26:
                    51:4e:21:a6:01:cd:c0:51:b4:e3:5a:c5:5c:ab:92:
                    dc:cb:91:20:25:6b:bb:6d:bc:9e:0b:99:9d:2e:39:
                    8f:6c:92:08:86:ba:af:2a:ca:0a:62:0e:8e:27:a9:
                    fe:2f:16:c1:b5:e0:6d:92:69:b3:e5:96:53:8f:4c:
                    39:d0:ac:ec:8d:78:4a:b3:4b:f1:56:9a:c0:14:75:
                    07:87:2c:e5:d6:46:3b:6c:83:89:8a:3f:c7:04:42:
                    f5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:91:90:E2:2E:FC:EF:97:B6:9E:74:1A:91:03:29:7A:92:2F:F4:48
            X509v3 Authority Key Identifier:
                keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:e5:5c:9b:4d:c2:67:8e:0e:99:d1:4b:b2:25:81:40:e9:83:
         eb:2c:02:5e:d7:64:8e:2b:c0:fa:04:09:37:34:6e:53:19:da:
         51:69:cc:92:3e:dc:c0:a9:a9:36:66:8d:b5:18:f0:76:f8:fd:
         d6:1b:b3:6b:3f:97:5a:53:fa:9e:db:a7:f0:d8:80:56:e8:13:
         d9:60:08:f3:fd:d7:91:07:9f:3e:a8:cc:c6:28:f3:98:b1:1b:
         6e:5a:d0:de:a3:e5:36:c5:9e:86:d7:27:60:2c:59:1e:43:77:
         5a:95:90:2d:7f:fb:a8:0b:67:c8:56:81:89:d4:81:de:23:e7:
         61:b7:c8:5b:c1:16:96:b4:9c:fc:20:ae:f4:9d:1c:45:02:82:
         23:c4:2a:47:f0:91:fc:f2:3b:ce:bf:5d:06:13:f5:c4:91:78:
         62:08:7b:88:d8:3d:65:c1:a0:c4:d4:d9:31:56:15:7d:0d:f5:
         7a:a6:8f:f5:fe:d3:20:05:3f:57:be:aa:76:62:17:b2:6f:0d:
         13:02:45:28:21:49:cb:a6:c1:cd:98:61:22:19:22:de:1c:5a:
         52:31:b1:81:9c:04:ad:bb:42:6b:e5:82:85:61:b8:a0:73:b0:
         2f:20:1d:f8:75:c8:dc:cf:59:5c:d0:cb:78:37:1d:e6:b0:c5:
         46:ad:31:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:09:42 2025 by rpki-client