This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
File:                     8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft (raw, json)
Hash identifier:          IcUSlc947hK6aCKwyStPNaOm33eMs0MZSNRZtjohTPM=
Subject key identifier:   22:10:FC:7F:07:A6:E1:AA:A9:A8:08:37:E7:A1:46:7E:DB:7F:A0:34
Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
Certificate issuer:       /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Certificate serial:       019AF31C780B48E1829B8B377B46BFCD05DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
Manifest number:          1765
Signing time:             Sat 06 Dec 2025 10:02:00 +0000
Manifest this update:     Sat 06 Dec 2025 10:02:00 +0000
Manifest next update:     Sun 07 Dec 2025 10:02:00 +0000
Files and hashes:         1: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl (hash: gbXLWIgyGx8gfjEmFec3PRaX7kX6HDBFeMRcmxG7JOQ=)
                          2: WVDdYi47m-6hf2_QV0K2CVkP7zw.roa (hash: 9WCgzOj2n+hDIFLmZXxef2ObXsI93yW31Mx8FRKIiM8=)
                          3: _nQyzxD5tzJPLFHKcoFX_hH-tT8.roa (hash: K943OWLrTeetJ5gY0wxowSl9TJP/OQ1YX347sbUwBP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:78:0b:48:e1:82:9b:8b:37:7b:46:bf:cd:05:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
        Validity
            Not Before: Dec  6 10:02:00 2025 GMT
            Not After : Dec  7 10:02:00 2025 GMT
        Subject: CN=2210fc7f07a6e1aaa9a80837e7a1467edb7fa034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e5:ce:18:51:0a:15:66:ce:ff:aa:c5:8c:cc:
                    1f:53:61:28:d6:00:e0:de:63:f3:d8:07:79:ad:e7:
                    b7:6a:37:32:6e:09:01:46:e5:1a:94:15:7c:11:13:
                    e2:1d:45:b5:2c:5d:7f:f1:df:16:61:73:7f:14:aa:
                    bf:06:9f:bf:5e:12:dd:0a:76:b5:35:cc:15:88:d2:
                    0e:46:50:c2:6e:c2:89:f1:e4:58:16:87:df:7c:ea:
                    25:3c:4a:da:86:f2:98:23:37:22:eb:32:a0:41:3a:
                    8e:55:d8:34:3f:ff:58:25:ad:5b:19:24:a7:c1:30:
                    9f:7a:dd:2c:9c:4f:c1:1a:2a:7d:6a:b3:60:3d:98:
                    05:da:f8:dd:f6:92:80:b2:87:4e:b5:fe:85:2b:83:
                    65:e0:e3:33:65:e2:04:11:1a:de:28:46:09:97:95:
                    2d:a4:29:ae:90:90:6e:2b:b0:62:71:47:a1:03:86:
                    16:91:da:b4:af:a2:c0:7c:42:1f:da:dc:91:6b:b0:
                    18:ba:66:90:f7:d5:f1:f7:ba:86:d8:b1:be:84:4c:
                    2b:a1:de:d0:c5:2b:33:34:05:04:69:c9:05:ba:91:
                    8c:8f:61:39:af:0b:4e:4b:cf:af:0f:1e:56:89:37:
                    1d:e1:88:17:de:1c:bb:e7:8c:fe:87:1a:ea:50:ac:
                    4b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:10:FC:7F:07:A6:E1:AA:A9:A8:08:37:E7:A1:46:7E:DB:7F:A0:34
            X509v3 Authority Key Identifier:
                keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:74:c6:40:8a:b8:1c:df:b0:18:e5:de:c4:29:c0:b9:e3:38:
         8e:6d:96:01:99:dd:15:d8:11:b6:88:0e:09:72:b1:62:5d:ff:
         94:41:ed:8f:0f:db:27:5b:4a:4e:04:a5:b7:f5:b6:e7:d2:f5:
         ae:f8:27:13:d4:fd:db:12:46:51:32:73:95:47:41:62:16:b8:
         9e:7d:f1:bc:63:8f:62:70:88:99:3d:4c:63:72:0e:e7:be:d4:
         4c:64:f7:b3:6f:16:2b:ac:79:33:25:f9:73:51:96:37:37:1b:
         85:aa:c6:18:55:75:c2:88:f7:0d:92:72:2d:96:27:ee:12:cb:
         08:3e:7c:aa:99:15:a7:61:74:48:dd:17:19:58:09:24:b5:e9:
         0f:b4:bf:33:04:bb:b7:24:97:55:94:25:a3:6a:c7:00:88:7f:
         d2:20:98:d4:8f:03:fa:59:2b:8a:0a:ee:75:f4:61:1d:8c:3f:
         39:bd:38:4d:1e:3f:da:02:b9:e1:11:46:3d:15:74:73:e7:8c:
         6a:83:96:b6:54:6b:ed:9a:37:3f:45:41:56:ae:0e:9d:7c:d7:
         51:ff:41:7a:e6:86:d8:b7:34:f5:09:3b:aa:a4:3d:39:43:64:
         d2:dd:42:8c:3c:61:3c:2d:da:92:14:a1:3c:b6:4b:27:4f:b9:
         ae:51:ca:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzHHgLSOGCm4s3e0a/zQXcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMWM4OTk3YTM1NGJjN2Q0ZTVhNjBhOWY0MjQzOGExODJm
YTk5OGEwHhcNMjUxMjA2MTAwMjAwWhcNMjUxMjA3MTAwMjAwWjAzMTEwLwYDVQQD
EygyMjEwZmM3ZjA3YTZlMWFhYTlhODA4MzdlN2ExNDY3ZWRiN2ZhMDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOXOGFEKFWbO/6rFjMwfU2Eo1gDg
3mPz2Ad5ree3ajcybgkBRuUalBV8ERPiHUW1LF1/8d8WYXN/FKq/Bp+/XhLdCna1
NcwViNIORlDCbsKJ8eRYFofffOolPErahvKYIzci6zKgQTqOVdg0P/9YJa1bGSSn
wTCfet0snE/BGip9arNgPZgF2vjd9pKAsodOtf6FK4Nl4OMzZeIEERreKEYJl5Ut
pCmukJBuK7BicUehA4YWkdq0r6LAfEIf2tyRa7AYumaQ99Xx97qG2LG+hEwrod7Q
xSszNAUEackFupGMj2E5rwtOS8+vDx5WiTcd4YgX3hy754z+hxrqUKxLAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIQ/H8HpuGqqagIN+ehRn7bf6A0MB8GA1UdIwQY
MBaAFPAciZejVLx9TlpgqfQkOKGC+pmKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mYWE5NWYtM2IzMi00MWZlLWFiZTMt
YzI3YzRhNjEwYmQzLzEvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9mYWE5NWYtM2IzMi00MWZlLWFiZTMtYzI3YzRhNjEwYmQz
LzEvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnTGQIq4
HN+wGOXexCnAueM4jm2WAZndFdgRtogOCXKxYl3/lEHtjw/bJ1tKTgSlt/W259L1
rvgnE9T92xJGUTJzlUdBYha4nn3xvGOPYnCImT1MY3IO577UTGT3s28WK6x5MyX5
c1GWNzcbharGGFV1woj3DZJyLZYn7hLLCD58qpkVp2F0SN0XGVgJJLXpD7S/MwS7
tySXVZQlo2rHAIh/0iCY1I8D+lkrigrudfRhHYw/Ob04TR4/2gK54RFGPRV0c+eM
aoOWtlRr7Zo3P0VBVq4OnXzXUf9BeuaG2Lc09Qk7qqQ9OUNk0t1CjDxhPC3akhSh
PLZLJ0+5rlHKgA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:00:10 2025 by rpki-client