This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
File:                     TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft (raw, json)
Hash identifier:          h3ISxc6gWOqrwJYPyCu8KSrYAzq6q1ipozxNwfKiEJ4=
Subject key identifier:   B7:99:C5:2D:6C:B2:D7:C3:18:4E:5A:74:16:C1:3C:A6:2E:2D:E9:F2
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Certificate issuer:       /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial:       019B3EDA91191BE532299DAD27C258CBD019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
Manifest number:          1795
Signing time:             Sun 21 Dec 2025 03:01:09 +0000
Manifest this update:     Sun 21 Dec 2025 03:01:09 +0000
Manifest next update:     Mon 22 Dec 2025 03:01:09 +0000
Files and hashes:         1: TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl (hash: b2QIQE0hT+jqtpyJNppICthWbEQB36n0CZtAioOEDfg=)
                          2: YDDERAGfQG_P54V0MZVSyMjIVyk.roa (hash: C7Lh2t1ISlqhYDOs1dQ1HUfrAnVeSgApqdOD+isddQ8=)
                          3: kjjmj3_M89wAaSRBkczk1njDNSI.roa (hash: dWOfnCb6lmXwSX8QD5pO5gwpjqkbkqa9qW8b5CDCAF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:da:91:19:1b:e5:32:29:9d:ad:27:c2:58:cb:d0:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
        Validity
            Not Before: Dec 21 03:01:09 2025 GMT
            Not After : Dec 22 03:01:09 2025 GMT
        Subject: CN=b799c52d6cb2d7c3184e5a7416c13ca62e2de9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:61:81:ab:fa:27:8a:9a:95:7b:b8:ea:9c:f7:
                    dd:22:49:98:16:23:79:9a:80:4c:2c:ac:96:e8:75:
                    60:08:74:60:25:81:f6:78:31:a7:b2:11:c2:8c:19:
                    bc:07:f5:22:c2:a3:00:66:ea:a4:e2:d1:69:f4:b8:
                    fb:ce:a5:17:29:3b:2c:2b:d8:5e:10:98:8d:83:61:
                    37:18:7d:e6:a2:8f:0b:5c:76:f3:48:62:2c:61:36:
                    e1:80:fe:51:fb:8b:fc:dd:36:46:49:c8:a4:cc:b3:
                    5d:03:53:cf:dc:11:d6:e1:74:84:63:29:a2:00:92:
                    b1:8b:09:be:bd:11:2f:83:c9:dc:bf:c0:2a:84:20:
                    e1:5b:08:c5:69:e0:76:13:f1:cf:d7:80:3d:59:dc:
                    60:9b:0a:dc:42:47:ff:b2:50:01:57:b1:96:c8:e5:
                    ec:c4:e7:0c:f1:2a:b0:45:e9:29:3a:24:75:de:ac:
                    3b:39:0c:79:d4:8d:2a:47:7e:55:cb:3f:f9:47:5b:
                    22:4a:42:00:5b:fb:ee:e6:e2:b9:eb:c0:74:11:03:
                    c3:38:cb:4c:9a:b5:33:dd:35:13:4c:a0:5c:6c:13:
                    c7:17:d8:95:2e:48:60:49:c2:1d:41:e1:b5:48:74:
                    34:33:eb:6b:bd:0a:d9:7f:83:b3:67:c7:7d:b3:ae:
                    5f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:99:C5:2D:6C:B2:D7:C3:18:4E:5A:74:16:C1:3C:A6:2E:2D:E9:F2
            X509v3 Authority Key Identifier:
                keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:66:48:1b:0a:dd:ea:06:90:75:8f:40:5c:24:34:5b:aa:9a:
         6a:b1:7f:23:60:5b:77:87:df:03:6c:39:1c:a7:5d:fe:9e:af:
         34:d9:14:d1:4f:15:e5:a4:34:29:49:10:d9:22:4d:e4:d2:11:
         08:29:ee:30:17:7c:55:65:1b:5c:ae:70:76:97:ba:35:0e:ef:
         81:b1:6e:5e:17:f7:9f:d7:c4:68:91:d0:46:48:7d:bc:3b:22:
         be:6e:97:ef:c5:a3:e5:ab:a7:32:25:a5:b4:f4:16:a4:d0:06:
         b1:f0:75:aa:fa:5c:c7:ab:42:dc:78:06:70:02:d2:63:6a:14:
         7c:40:1b:3e:a5:25:8b:73:00:4a:7e:81:25:2c:30:23:b2:6a:
         cb:09:a2:7b:4f:73:1e:9f:1f:fe:5e:1e:b9:f5:3e:3b:b8:27:
         d9:62:ee:6c:1f:96:0d:f3:ce:10:8e:db:4c:f8:9b:ae:81:98:
         38:8a:af:83:2f:3a:cc:87:ba:18:0e:b3:e3:d6:96:5b:35:a6:
         71:14:60:22:e0:76:27:af:77:3a:51:e3:67:f6:2c:57:11:c3:
         94:90:4a:37:2b:c0:4f:63:a2:fd:f8:99:08:43:fa:fc:0e:cb:
         e8:da:02:04:7e:4d:08:fb:fa:c9:51:07:b2:1d:c3:48:fe:a4:
         c8:d5:73:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:58:35 2025 by rpki-client