This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
File:                     g8ED1lpU1q8e-6asPmNyICivK7E.mft (raw, json)
Hash identifier:          +SteztMHgiJdw5aBSRjMoqeiJQVhVh4iaDJosNxBesM=
Subject key identifier:   2D:3D:CA:70:CB:B5:71:A7:4F:04:9E:A9:72:CD:6A:39:29:11:F3:E1
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Certificate issuer:       /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial:       019B39EAA660C1F3ACF20C9E0034AC8C31A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
Manifest number:          0ED6
Signing time:             Sat 20 Dec 2025 04:00:37 +0000
Manifest this update:     Sat 20 Dec 2025 04:00:37 +0000
Manifest next update:     Sun 21 Dec 2025 04:00:37 +0000
Files and hashes:         1: 1Di0Xz_MpkFSCrXwieDlABcYUOY.roa (hash: e9+8w6PzwdqZ5DMc28fcl3/6JCrUHirDY/ShA9oFLww=)
                          2: Fb4Aih2t-3x0svMSkoJF-OT975k.roa (hash: 4CpcD3G4jnvkJ9iB2UM4J3ZMTh++G55QBNDvUCamA1Y=)
                          3: NXwDVZABd3p4a0yMyLVaEUu993w.roa (hash: lhUXJxfjstspXt3/27XnZ9HzN1ZpRrwcEX2KjNAybVU=)
                          4: _zmyvqhTt2oFbDnddAPtCQEEyok.roa (hash: DAvzMAds1rhf279ET0ww79hQJtAHmid5htmCA8lZZdI=)
                          5: g8ED1lpU1q8e-6asPmNyICivK7E.crl (hash: luEyFwHWYidQdsEFrKoi5SkpfWqxRfBCVVf6HZlLnjo=)
                          6: m4nA49Lv7EMjkCcxgMafzldImD4.roa (hash: evH9NZtYuDtPls9Lqu7Vupfo95DdUFuCaTKXVG/rgrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 04:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:ea:a6:60:c1:f3:ac:f2:0c:9e:00:34:ac:8c:31:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
        Validity
            Not Before: Dec 20 04:00:37 2025 GMT
            Not After : Dec 21 04:00:37 2025 GMT
        Subject: CN=2d3dca70cbb571a74f049ea972cd6a392911f3e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e7:66:71:d2:d0:85:ae:f7:7e:71:e8:a8:f6:
                    78:5a:f9:8d:17:a5:44:05:4e:ab:6e:55:64:34:83:
                    5d:fc:00:ee:42:58:e2:c4:1d:46:7f:fa:c7:f3:03:
                    48:65:95:d0:8d:04:95:f8:bc:29:9c:02:0b:af:77:
                    a2:a2:e8:39:dc:c1:26:39:05:4e:ba:2b:eb:d8:bb:
                    89:74:2c:3c:9f:13:8c:5a:85:0f:be:bc:33:11:69:
                    97:38:e1:00:24:54:b8:fb:45:f6:24:5b:2d:49:4f:
                    49:72:cb:2f:57:01:48:d0:95:6b:46:09:e6:ce:dd:
                    a7:8e:d3:72:0e:20:45:ea:d8:16:75:97:cf:6c:f2:
                    18:22:7f:df:a9:0f:eb:a9:a4:68:ad:d9:16:1b:4c:
                    6a:47:09:35:78:87:47:30:ef:e7:76:70:1d:13:a8:
                    71:72:a2:29:f3:bc:e7:31:cc:2f:22:0d:59:34:03:
                    c2:9c:e5:f2:14:58:85:e3:76:f5:c5:fd:56:bc:da:
                    03:43:93:d2:4d:cf:75:95:21:6a:f8:00:c1:cf:38:
                    73:1d:d1:73:d6:09:b3:e6:99:dd:46:74:ca:69:07:
                    0f:8d:bb:c6:4d:91:ec:1b:68:eb:59:03:6f:52:7b:
                    ea:b0:98:9f:9d:f9:17:26:8f:0f:63:01:82:88:bc:
                    6d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3D:CA:70:CB:B5:71:A7:4F:04:9E:A9:72:CD:6A:39:29:11:F3:E1
            X509v3 Authority Key Identifier:
                keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:cf:89:7d:2f:5f:82:a7:53:52:72:fa:2f:ff:1d:98:2f:d2:
         31:b5:94:12:20:af:e3:91:ed:b8:85:fb:77:30:64:57:9e:0e:
         14:a1:13:88:5c:c3:24:67:f3:37:e2:17:3d:39:9b:92:dc:83:
         9a:1b:4f:fd:f6:2b:8f:3d:e0:b6:e6:a1:b3:2e:a6:36:a9:ff:
         eb:b2:22:d5:c4:2e:23:a2:88:86:5b:93:0f:cc:35:6c:9d:72:
         43:14:91:e9:c0:47:cb:46:aa:20:70:8c:01:97:3f:e5:8d:d5:
         c1:d7:ee:d3:23:b6:29:f0:47:cb:de:bf:96:f5:ae:0a:92:12:
         33:44:58:60:cb:ee:42:b4:dc:4f:02:af:bd:1c:23:2a:4e:e7:
         80:ea:eb:9f:4c:12:f3:0b:b2:ef:bf:88:4a:50:0a:ce:2c:89:
         15:9d:74:75:11:6d:ac:78:79:4d:51:40:71:f6:ee:b5:ef:c7:
         e8:f8:98:85:34:72:1f:94:af:07:a3:34:52:d7:1b:cb:83:35:
         51:49:86:f9:89:9e:75:a5:87:2c:92:d7:fa:e7:04:2c:2f:0c:
         9e:7d:40:af:27:c9:74:9c:00:f4:58:ec:65:b7:7c:a3:8a:19:
         dc:b1:85:d7:a6:92:58:07:4a:6e:15:f2:03:fc:fe:cf:4e:ae:
         d1:5e:81:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:36:35 2025 by rpki-client