This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft
File:                     80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft (raw, json)
Hash identifier:          r+D8kbbPse4uUY9v0UMI5B7+O6Fv1fNkKDaSWXhpaz4=
Subject key identifier:   BA:38:4A:FA:B5:2F:8A:20:25:2C:B2:38:E7:E8:D7:DB:C5:C6:72:65
Authority key identifier: F3:44:A9:F3:66:50:84:F5:00:99:21:AC:52:D1:19:75:0B:EE:D4:B4
Certificate issuer:       /CN=f344a9f3665084f5009921ac52d119750beed4b4
Certificate serial:       019B39EB51AF63BE28E0053624692F5FB3A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft
Manifest number:          1789
Signing time:             Sat 20 Dec 2025 04:01:21 +0000
Manifest this update:     Sat 20 Dec 2025 04:01:21 +0000
Manifest next update:     Sun 21 Dec 2025 04:01:21 +0000
Files and hashes:         1: 80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl (hash: xbMeOg3wXBeatOaAFv/VFxSB5vMW4kXbxzTyU1OMmoc=)
                          2: duO9LxBTkVs9bWkFXNzc7GNBnLM.roa (hash: qNyvixX6BJstTr21KHWMkBm39t0mtYSLiR/YYgK3594=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:eb:51:af:63:be:28:e0:05:36:24:69:2f:5f:b3:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f344a9f3665084f5009921ac52d119750beed4b4
        Validity
            Not Before: Dec 20 04:01:21 2025 GMT
            Not After : Dec 21 04:01:21 2025 GMT
        Subject: CN=ba384afab52f8a20252cb238e7e8d7dbc5c67265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:37:bd:00:e5:81:fe:ce:31:e6:84:0b:8a:c0:
                    95:6d:3b:48:81:da:2e:a3:52:56:20:a3:d7:59:58:
                    dc:84:e3:be:af:82:f2:20:bd:45:bd:9c:63:5f:75:
                    fb:15:ea:84:20:1f:5f:31:37:62:c4:f4:db:ba:35:
                    ae:b8:91:96:df:f8:21:89:13:ac:86:dd:01:54:95:
                    9a:1b:33:c9:b3:b8:56:4a:07:7f:aa:f0:7d:40:f6:
                    50:90:6c:73:75:28:9d:f7:40:08:38:10:85:fe:df:
                    a3:5b:6c:de:de:c3:88:c4:ba:42:38:51:94:af:ad:
                    c6:53:51:4c:75:a1:59:3f:c9:71:81:d4:09:56:83:
                    f6:12:e7:fa:58:0d:a2:5a:4b:a4:55:bd:0a:9a:f4:
                    ef:2b:0f:b9:b8:62:29:88:a3:1e:4d:06:b6:49:95:
                    4a:ab:b9:b9:8b:fc:20:d3:29:d3:8c:c1:84:05:5e:
                    d2:a1:86:fa:d8:db:53:b5:8f:05:48:8d:76:73:2a:
                    f5:17:a9:34:49:8d:38:ba:47:ce:0f:57:a8:8f:2c:
                    5d:81:7e:fa:c0:20:ed:4c:12:78:c4:6f:e6:d7:c6:
                    f3:64:28:0e:77:2d:32:cb:eb:f0:c2:31:4a:6b:18:
                    f6:12:15:6f:c9:41:f4:c6:3d:d3:f2:93:6f:fe:ce:
                    ba:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:38:4A:FA:B5:2F:8A:20:25:2C:B2:38:E7:E8:D7:DB:C5:C6:72:65
            X509v3 Authority Key Identifier:
                keyid:F3:44:A9:F3:66:50:84:F5:00:99:21:AC:52:D1:19:75:0B:EE:D4:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ca:35:8d:d6:f3:89:9e:3b:4a:c5:de:35:a1:bd:65:cf:6f:
         84:0f:1a:d1:71:93:bd:b1:27:36:90:71:a7:9a:72:09:5a:63:
         2b:b2:1f:f3:f2:dd:a1:c7:8e:eb:64:3e:0c:84:d3:6b:b1:f9:
         ea:c7:6f:b0:53:ed:8a:d2:fb:39:e7:eb:5d:19:1f:eb:67:da:
         81:96:79:bc:39:a5:5b:67:25:b7:f0:35:dc:cc:1e:8d:90:0b:
         49:9b:d4:6d:a1:79:db:9b:6b:a5:8c:7f:6d:c8:d7:01:3a:64:
         de:0c:f5:30:02:21:78:7c:34:f9:96:8f:66:bc:06:34:36:7f:
         36:63:39:5d:41:ac:be:06:bf:af:2d:dd:ee:f9:c2:32:ae:51:
         4a:76:a8:12:38:fe:c7:3f:4c:51:b2:b9:27:86:1c:b3:c3:25:
         83:02:3a:0f:21:55:c1:41:55:bd:b1:47:4f:ba:7e:17:e9:af:
         e4:2e:bf:55:6d:78:75:a5:db:e1:17:a1:d1:09:31:cb:92:c9:
         15:f1:1f:5d:e7:66:89:a1:4e:85:7d:b0:0b:50:83:9b:e7:5a:
         59:2f:6a:20:6b:b9:c6:3a:1c:fd:7a:e7:14:fe:69:05:38:e9:
         2d:48:16:be:81:a3:db:50:44:e3:0c:b6:5f:85:e8:62:1c:56:
         9e:e8:18:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:03:54 2025 by rpki-client