This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
File:                     t8wtor25e-kSotlC6-fq-kZR6IU.mft (raw, json)
Hash identifier:          X4OKkMG0IG5S2zQstgIgXfn51M4csblZT8mE1YUp+d0=
Subject key identifier:   61:51:72:1B:A0:DC:C3:DD:BC:2B:45:95:80:1F:DA:E9:BF:16:1D:A8
Authority key identifier: B7:CC:2D:A2:BD:B9:7B:E9:12:A2:D9:42:EB:E7:EA:FA:46:51:E8:85
Certificate issuer:       /CN=b7cc2da2bdb97be912a2d942ebe7eafa4651e885
Certificate serial:       019AF23FA995D59AD386361D7E7E8FAE707B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
Manifest number:          176A
Signing time:             Sat 06 Dec 2025 06:00:49 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:49 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:49 +0000
Files and hashes:         1: INh9G5iQoMvQ_1itqGn6rIFWztw.roa (hash: DlHpU6WxKqPj/r93yoW9dLdgNHjiaW8IJyXbLuzYYAg=)
                          2: t8wtor25e-kSotlC6-fq-kZR6IU.crl (hash: BhsFuuTfPBE3oQJXtrypf8EEm0oZ/qP0073/glo4vEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:a9:95:d5:9a:d3:86:36:1d:7e:7e:8f:ae:70:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7cc2da2bdb97be912a2d942ebe7eafa4651e885
        Validity
            Not Before: Dec  6 06:00:49 2025 GMT
            Not After : Dec  7 06:00:49 2025 GMT
        Subject: CN=6151721ba0dcc3ddbc2b4595801fdae9bf161da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:64:1d:43:e8:a4:a8:6c:70:93:8c:19:f7:28:
                    ad:01:76:af:06:b0:06:2b:3e:7d:f5:7d:3f:b2:e6:
                    fd:32:10:8e:12:df:14:f2:da:6a:e7:12:fa:b5:fd:
                    8a:48:fa:46:d7:80:2e:38:43:07:19:f3:c9:3c:3e:
                    b5:5c:8b:46:41:5f:d1:ec:7c:fa:c8:0e:71:47:8a:
                    c4:a4:17:58:de:28:13:a9:42:e5:d1:9a:b0:cb:1a:
                    98:47:b6:c8:20:f1:20:e0:ba:0f:ee:52:0b:15:d5:
                    08:9f:f7:99:7e:86:50:b1:3d:87:bc:57:e7:2c:da:
                    ef:75:30:d8:33:73:3a:8c:f3:4f:4f:c4:47:f8:53:
                    45:57:17:62:01:19:bb:77:75:fc:a1:d5:cd:c0:b0:
                    5c:37:8e:86:cf:c5:87:40:af:00:0f:d6:6a:91:ba:
                    a8:38:07:f3:b7:14:f0:5c:d6:2a:7a:24:2d:f7:f4:
                    63:99:ea:51:98:4a:df:c4:83:dd:2d:01:bf:7c:40:
                    9b:ab:46:5f:88:ba:f1:cd:1b:b0:1d:61:a7:96:19:
                    1f:b0:a4:30:96:a0:9e:65:08:4c:dc:98:80:ad:34:
                    8c:3e:d2:ea:3d:6d:2a:f4:24:d9:95:18:67:65:22:
                    d3:a9:49:83:ec:ea:2a:43:7b:b1:ea:a5:84:c0:75:
                    a8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:51:72:1B:A0:DC:C3:DD:BC:2B:45:95:80:1F:DA:E9:BF:16:1D:A8
            X509v3 Authority Key Identifier:
                keyid:B7:CC:2D:A2:BD:B9:7B:E9:12:A2:D9:42:EB:E7:EA:FA:46:51:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:80:11:9b:5a:82:b1:b6:03:57:1c:3b:2b:14:dc:c2:17:54:
         3c:0b:f1:29:46:25:4a:50:96:11:a3:c1:f1:15:22:82:03:c0:
         c0:74:63:28:4f:8e:5a:48:33:df:9d:9d:65:bf:1f:0b:a9:18:
         04:ed:ee:54:e6:1f:5e:5c:2c:0e:ee:17:d1:81:6b:eb:72:f7:
         92:90:82:f4:77:55:76:1a:30:f9:7f:c6:16:b9:4e:01:69:e6:
         3c:fa:d4:78:03:9c:f3:55:49:a9:0d:b8:f9:c5:60:f7:f0:3e:
         9f:9c:12:4d:21:4f:98:6b:bc:cd:69:32:8b:b9:ac:10:51:fb:
         79:93:95:13:65:bf:62:ea:11:ed:2d:de:bf:9c:b5:54:77:c1:
         09:18:5f:fd:33:d1:58:35:74:e7:77:be:d1:61:87:fa:e1:8a:
         e2:29:05:56:fb:c6:11:b1:a6:c9:46:43:3a:7b:99:5b:e8:41:
         49:83:16:2b:33:11:bb:a6:3c:63:88:72:77:65:3e:4f:4a:05:
         27:05:f1:69:c6:ea:7c:fb:51:5e:44:9b:3a:62:7e:08:67:fc:
         ef:92:c7:1c:59:9b:39:ed:31:40:82:12:a4:d9:7f:3c:7c:c2:
         d3:e4:7a:d1:66:41:93:3f:e5:5f:e2:00:dc:22:1a:d1:ee:5a:
         9d:74:28:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:43:54 2025 by rpki-client