This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
File:                     8FAUfun2L5cEI8vYttUupfSg7aU.mft (raw, json)
Hash identifier:          53qG5jwlOaN/iN2pS2yqo8ScTDJe+BkTwH8QEhtb058=
Subject key identifier:   D2:FC:30:9D:EA:58:9E:F1:9A:9C:92:DE:FB:94:91:70:EC:66:BF:05
Authority key identifier: F0:50:14:7E:E9:F6:2F:97:04:23:CB:D8:B6:D5:2E:A5:F4:A0:ED:A5
Certificate issuer:       /CN=f050147ee9f62f970423cbd8b6d52ea5f4a0eda5
Certificate serial:       019B3BA2AC0D768BC66799023DC5F72D851C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
Manifest number:          02D5
Signing time:             Sat 20 Dec 2025 12:01:15 +0000
Manifest this update:     Sat 20 Dec 2025 12:01:15 +0000
Manifest next update:     Sun 21 Dec 2025 12:01:15 +0000
Files and hashes:         1: 8FAUfun2L5cEI8vYttUupfSg7aU.crl (hash: v/vJI1PaJpRE2UFV4AfoHaH8S9kKhG2Zja03sNRZofw=)
                          2: I9B7Iw-lVDjKZXQpLdWJsK0y0wg.roa (hash: 51ni5eAnE+Uva7Z7eVwqTn8UmbMwpkaozroHS0ckX3Q=)
                          3: uYmDkNSOTpoFpFn87a-aXY254ZI.roa (hash: f1Ff5ggY03B285EwxB+EjeSorrx1qWrOpvl1cl092pQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:a2:ac:0d:76:8b:c6:67:99:02:3d:c5:f7:2d:85:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f050147ee9f62f970423cbd8b6d52ea5f4a0eda5
        Validity
            Not Before: Dec 20 12:01:15 2025 GMT
            Not After : Dec 21 12:01:15 2025 GMT
        Subject: CN=d2fc309dea589ef19a9c92defb949170ec66bf05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b8:b9:88:ad:77:d1:97:5e:6b:a2:20:83:38:
                    6f:7b:66:3e:b4:68:7e:f2:97:1a:21:5e:47:94:c2:
                    b6:b3:df:59:25:3e:37:a2:fb:da:cd:80:0f:de:1c:
                    82:54:e3:68:c3:84:75:43:ff:e1:ca:d7:cc:3e:3b:
                    aa:de:28:46:12:12:c1:41:aa:b4:30:62:d1:cd:d5:
                    50:32:c4:b4:2e:d9:ea:52:a7:9e:87:83:d5:10:79:
                    3f:04:f7:0e:d0:8d:a6:5c:bc:b8:ab:e7:ba:18:9a:
                    60:b1:f4:74:7a:17:e4:bb:06:46:af:ff:05:5b:ed:
                    1f:59:c9:dd:e5:8a:f2:1a:7c:bd:0f:cd:94:86:de:
                    b7:f3:b8:f4:d2:05:6c:92:ff:4b:88:97:c0:fb:70:
                    8b:88:0b:7a:7c:46:31:d5:5d:3f:56:49:e1:03:d7:
                    30:8a:57:10:b7:9e:0d:3a:b0:ec:6d:2e:4c:c0:5b:
                    a6:a8:1f:15:43:9b:81:ce:3a:7f:6b:f3:e0:56:43:
                    ac:dc:9d:15:44:37:14:5e:cf:02:bf:4a:e4:86:cd:
                    94:fe:8e:2d:b9:01:7b:c2:77:95:59:bf:6f:34:5e:
                    7c:5e:eb:b0:6c:65:47:56:46:c8:e7:1b:a9:95:8f:
                    47:a5:50:58:63:79:3d:86:27:45:dd:d9:15:a7:5e:
                    fe:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FC:30:9D:EA:58:9E:F1:9A:9C:92:DE:FB:94:91:70:EC:66:BF:05
            X509v3 Authority Key Identifier:
                keyid:F0:50:14:7E:E9:F6:2F:97:04:23:CB:D8:B6:D5:2E:A5:F4:A0:ED:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:81:67:a4:ee:5c:be:c8:5d:91:3f:cc:fb:e5:7f:48:e8:1f:
         3c:98:b6:0f:fb:a8:57:c1:58:82:b6:b1:aa:47:61:d3:61:bd:
         d8:2e:19:51:db:ad:2d:c9:87:05:4f:e6:63:e5:f7:72:4a:e9:
         a5:13:a1:b2:54:8b:a9:87:5e:37:d5:e6:c3:25:0d:00:78:b7:
         76:33:61:30:4c:a5:b5:f2:5a:0c:a4:0e:bf:9e:46:8e:27:a9:
         03:2b:d8:f1:4f:ae:0a:30:ff:c2:cb:2e:de:35:04:99:c0:f7:
         95:79:6c:93:3a:16:b5:de:6b:07:60:17:35:ea:d1:99:f6:69:
         75:bf:99:6b:fd:5d:12:77:79:3c:b1:f0:bc:3e:d2:4a:ba:44:
         fe:57:a9:33:3b:84:df:1f:c9:cf:e0:fe:95:1f:c7:e4:dd:18:
         41:ea:3b:4e:c2:bf:46:30:6d:5a:3a:dd:35:9c:46:fd:dd:d1:
         b9:91:6b:b1:08:04:71:24:f1:58:b9:96:d4:3a:93:83:d2:34:
         b8:4d:ec:86:9f:9b:09:07:4a:07:61:2e:8a:a8:ed:1e:3a:98:
         6d:b9:0d:c3:2e:b9:13:e1:d1:a9:ee:c2:45:b0:eb:1c:60:1f:
         c8:e9:b3:dd:9c:80:8d:44:f6:b2:1d:cb:e0:f9:f7:0b:32:76:
         0c:d9:22:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:15:31 2025 by rpki-client