This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
File:                     82DHix1GLWuv33NZ08Iz3b-SnTE.mft (raw, json)
Hash identifier:          WyeyknVAgjqV5S1eT+ek6y2g6K7dniVfEzz9m/KW78o=
Subject key identifier:   69:D8:53:CB:B7:A9:7B:14:F8:62:64:06:7C:03:51:E6:48:8F:28:24
Authority key identifier: F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31
Certificate issuer:       /CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
Certificate serial:       019B262D65FEE98D8D335B8E5C2942218FE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
Manifest number:          06EC
Signing time:             Tue 16 Dec 2025 08:01:07 +0000
Manifest this update:     Tue 16 Dec 2025 08:01:07 +0000
Manifest next update:     Wed 17 Dec 2025 08:01:07 +0000
Files and hashes:         1: 82DHix1GLWuv33NZ08Iz3b-SnTE.crl (hash: 46pVEip6QwyXsmw1oZOa9A7sUDNSoI+9x9KS1NEc/K0=)
                          2: nPeojOrbaPs45UMM5xBsx67HUyw.roa (hash: I+r6NKoTQ/LaZOROIxMVJyc2C7XDOY211tQjVI17x0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 08:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:26:2d:65:fe:e9:8d:8d:33:5b:8e:5c:29:42:21:8f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
        Validity
            Not Before: Dec 16 08:01:07 2025 GMT
            Not After : Dec 17 08:01:07 2025 GMT
        Subject: CN=69d853cbb7a97b14f86264067c0351e6488f2824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:52:fd:f7:b4:0b:02:66:bd:93:20:3b:7b:1f:
                    d0:3a:39:9f:75:89:f7:35:b3:cd:e8:eb:76:e4:6e:
                    58:4c:51:02:ad:e9:ab:e7:e2:e0:ce:1e:6a:a8:e8:
                    80:46:1d:b2:ac:4e:69:a8:40:bf:12:cb:31:5b:fa:
                    e2:8b:84:b8:ad:ab:ce:5b:4f:55:73:0e:7f:03:47:
                    d4:b7:aa:ad:7d:c9:de:c1:f7:7e:0a:ba:e9:9c:bf:
                    e4:81:fa:2b:b4:c5:a0:ca:6f:cd:39:bc:92:63:77:
                    22:65:93:b1:1f:8f:78:57:db:51:d6:72:85:a8:a6:
                    64:f6:8e:72:7d:b1:45:a6:54:91:c3:43:a3:b9:5d:
                    29:7c:bd:54:00:4d:88:11:ee:6e:a4:e1:3a:6e:8e:
                    7b:a4:1a:fe:11:35:72:4b:48:00:1b:ee:9b:a7:a7:
                    6b:2c:fd:55:30:55:38:e2:9b:0a:63:18:ac:b7:5c:
                    f5:ab:4e:05:26:2c:9f:75:6b:ae:5c:48:28:20:6b:
                    b4:df:61:13:bf:06:87:34:0f:c8:b8:68:37:e7:34:
                    f6:ac:8c:e9:92:bf:0d:0a:dd:21:f6:47:17:07:2b:
                    b0:b6:a2:c1:a4:0c:09:11:06:f3:e0:fc:39:95:16:
                    48:6c:6c:4e:03:33:62:ba:b3:0d:d7:09:16:2c:ae:
                    5d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D8:53:CB:B7:A9:7B:14:F8:62:64:06:7C:03:51:E6:48:8F:28:24
            X509v3 Authority Key Identifier:
                keyid:F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:0a:1b:95:d5:62:7b:76:89:be:93:98:83:b7:a7:0e:c1:a0:
         6a:f3:62:02:1f:18:ab:42:29:5a:a7:fa:f9:f0:d6:c0:3a:c0:
         0d:f3:31:22:87:22:07:58:20:ae:b9:8d:30:85:b4:ef:ea:b2:
         cf:76:00:63:47:1a:69:3a:05:41:46:e6:b2:5e:03:b9:4c:1f:
         15:5c:fe:bf:dc:c8:7e:83:6c:6b:bd:d9:f7:80:27:ed:fa:c6:
         da:97:51:4d:63:78:dc:c4:7f:98:2e:f7:24:ab:26:e2:9c:2b:
         ff:2f:f8:48:b6:fb:73:aa:56:65:65:c3:43:91:ef:88:e4:39:
         d5:ab:4b:62:0d:6f:98:1a:c5:de:a9:c2:6d:15:93:53:5e:cd:
         ea:0a:0d:86:5c:4e:fb:b4:80:2b:cd:85:72:29:16:00:98:5b:
         30:58:ec:c3:0b:79:65:7d:56:7b:38:8b:0e:e3:ed:7e:04:b6:
         c7:c8:93:d4:f3:e9:fa:29:40:51:d5:a5:3c:b4:f5:88:b1:43:
         59:17:7d:fd:b6:b3:59:fa:22:01:04:af:31:9b:74:8a:62:4b:
         34:73:c7:b5:eb:36:a7:3d:d5:20:4f:b6:36:cb:0d:91:82:40:
         5f:5b:52:64:68:15:bb:33:66:7a:c9:c0:37:df:f2:7f:b4:4e:
         b6:14:33:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 14:19:04 2025 by rpki-client