This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
File:                     _PyV8biAEebcM9BBuYsxMHdsQo8.mft (raw, json)
Hash identifier:          WKccusi/1MnCKLlxmJxAxqmtPch6464NG+5DMtLnc5M=
Subject key identifier:   14:D0:DD:C9:DA:88:32:E3:58:E6:8A:49:DC:BA:C6:35:61:F1:D0:2B
Authority key identifier: FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
Certificate issuer:       /CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Certificate serial:       019AF209220C4B3B196C7310C9A77C5DDF5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
Manifest number:          08D4
Signing time:             Sat 06 Dec 2025 05:01:16 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:16 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:16 +0000
Files and hashes:         1: _PyV8biAEebcM9BBuYsxMHdsQo8.crl (hash: jfY6jjaIig01WZzz3l2Q66yjb1MbunQQCtBTE16hlaM=)
                          2: wbsu-F9aDLpOh1E-iGGerHKMETE.roa (hash: 4WuiCYXkI7bOEQ/qzC3UfWfQ5q7CLtdWh5T4lSpp9Nw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:22:0c:4b:3b:19:6c:73:10:c9:a7:7c:5d:df:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
        Validity
            Not Before: Dec  6 05:01:16 2025 GMT
            Not After : Dec  7 05:01:16 2025 GMT
        Subject: CN=14d0ddc9da8832e358e68a49dcbac63561f1d02b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:16:ad:b2:ca:6f:a3:5a:28:c5:29:09:9d:5a:
                    44:b7:9b:68:fc:ca:2e:7a:4f:9d:20:6f:d5:09:da:
                    7e:84:a4:55:0e:af:17:05:fd:aa:ad:e5:21:8c:de:
                    b9:89:8c:3b:0b:30:e6:6b:53:61:42:93:c4:26:bd:
                    f0:5f:d3:0c:b6:1d:51:93:d3:19:83:b9:6a:2b:b4:
                    bb:16:87:2e:a4:b9:40:09:92:9d:2f:8a:da:22:18:
                    5a:7a:79:b2:10:34:51:96:e6:c7:64:bf:67:61:72:
                    ef:29:cc:26:f1:c1:e7:18:a9:a3:4b:31:7a:85:ac:
                    35:93:b9:a3:f6:79:f4:1b:4c:77:00:61:81:22:2f:
                    19:98:38:9a:4c:a0:19:9d:be:ed:20:d3:e5:ef:6d:
                    70:32:0b:7a:2a:ed:65:79:80:a4:a4:ea:65:b4:ba:
                    8f:6d:9a:b7:00:f3:cb:ef:76:55:29:94:54:30:bc:
                    8a:c5:cf:a3:99:27:a9:25:34:c9:89:59:91:1e:18:
                    6c:b9:30:20:e6:94:5c:ec:9b:06:25:3a:34:e4:7a:
                    e5:6e:43:d3:7b:40:b8:1e:6e:9b:66:20:08:34:d5:
                    65:3d:3e:ac:14:c5:fc:03:e2:8f:76:62:e9:12:6f:
                    2e:50:96:96:bb:d8:46:a8:19:fe:3c:9b:f9:73:d4:
                    b4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D0:DD:C9:DA:88:32:E3:58:E6:8A:49:DC:BA:C6:35:61:F1:D0:2B
            X509v3 Authority Key Identifier:
                keyid:FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:45:de:2b:4f:be:a4:69:32:2b:1c:af:93:76:1d:56:e0:8d:
         5f:7e:df:99:06:c6:e6:2f:84:6e:42:19:05:25:27:2f:82:58:
         c5:4b:c1:b6:a6:7f:37:31:f8:d6:80:67:85:f3:5b:4a:ef:f6:
         04:be:6b:e7:6e:75:28:5c:6d:08:a9:ba:ee:07:90:1d:07:78:
         0f:e0:af:7c:b5:ac:59:78:a9:d2:fe:0e:8a:38:ad:fa:d3:b4:
         e4:c9:52:ec:0d:95:3d:2b:be:fe:b2:43:0b:c0:c9:6f:50:f8:
         0c:a4:7b:af:b1:59:10:2c:da:e9:58:b8:b5:75:22:4e:90:4e:
         86:bf:9c:ee:b1:5d:33:be:fe:2c:92:71:ef:4b:70:a7:9b:f1:
         53:26:56:7d:3e:b4:df:58:a9:f5:24:2a:87:9a:72:d4:11:ea:
         5e:f5:9a:8d:a5:6a:9a:99:18:97:6f:75:02:dc:23:1b:b9:36:
         89:b0:8a:07:91:12:d8:17:5d:7e:f9:e6:61:24:2e:d0:66:ff:
         6c:ab:37:60:08:aa:33:e7:72:cc:32:21:33:dc:b5:25:f2:d0:
         9e:0c:9a:1a:a8:20:6d:ad:4d:0e:a7:69:dd:74:2d:41:86:28:
         be:fe:72:e6:73:51:08:e4:95:55:b5:d1:41:b2:d9:6e:24:e8:
         1d:04:fa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:59:07 2025 by rpki-client