This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
File:                     f8rYnfG_maNvKQzD7w8ee00CdTM.mft (raw, json)
Hash identifier:          ATggEPnzhzm8ZnPPpzyDZLLIMlHd5ii3P+DjoRfdcYg=
Subject key identifier:   33:56:1A:45:B1:12:E9:AD:56:C3:C9:04:63:B4:1C:71:1A:FC:F6:30
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Certificate issuer:       /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial:       019B717E50C8BAD6EBD1AE041E621C66F66E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
Manifest number:          177F
Signing time:             Tue 30 Dec 2025 23:01:02 +0000
Manifest this update:     Tue 30 Dec 2025 23:01:02 +0000
Manifest next update:     Wed 31 Dec 2025 23:01:02 +0000
Files and hashes:         1: 08MOvb96w4xsKgP9JS0zoI8sRTk.roa (hash: 8gdw/ohva2RMhv163mHOocjNP3BJgaz4YyRqUuNJ7fc=)
                          2: 2D749NTS5rsUM88WTokU4j35DFk.roa (hash: OdYrjeQoE7Y6O0peufvBGoL7G9BCb/mFSDo6H0HN/ds=)
                          3: 7tTd0Y2ZnKb8gxUeaW3ZD-Mb1Mc.roa (hash: Es9QZWARbJ6C98H+Xkn9OEO1buIXC30gN6Niopkz94k=)
                          4: M4W4uWryEo_HfddT_AlFpyx_-QU.roa (hash: ZQcu1jp7yrg3C7qwL3G3AXidULBmINV1yHbudKjEVWc=)
                          5: f8rYnfG_maNvKQzD7w8ee00CdTM.crl (hash: uio+0RxtCmO/hWV3uMSFHCWshSchk/aZCVvZidQbwCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 31 Dec 2025 15:21:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:71:7e:50:c8:ba:d6:eb:d1:ae:04:1e:62:1c:66:f6:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
        Validity
            Not Before: Dec 30 23:01:02 2025 GMT
            Not After : Dec 31 23:01:02 2025 GMT
        Subject: CN=33561a45b112e9ad56c3c90463b41c711afcf630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:57:88:a1:af:72:fd:a4:32:b4:02:53:d7:6e:
                    fb:30:10:d1:f3:e8:57:3e:69:f7:54:41:ac:50:f7:
                    09:0e:02:5e:d4:f6:48:21:3d:1b:ec:22:c0:43:71:
                    72:4d:70:47:3d:13:f3:4e:76:34:10:84:0a:15:78:
                    07:5a:7e:89:26:0c:96:e0:b0:4b:00:8f:fa:19:27:
                    bb:46:86:e7:a9:37:dc:0b:84:76:53:08:17:f4:2a:
                    29:06:27:89:9f:13:98:18:f7:33:f8:12:d6:60:83:
                    e9:7c:d7:b7:55:22:e1:37:7b:5f:16:a7:24:15:bd:
                    93:5b:d5:57:67:73:64:70:4c:cb:f0:cb:23:4f:f0:
                    90:08:72:75:12:e7:93:8c:f7:79:42:a0:9a:db:94:
                    01:84:68:fb:5b:b5:ed:18:55:4d:e3:66:2b:56:63:
                    f2:33:cc:f3:15:fd:59:c8:34:34:40:d5:33:31:b9:
                    8e:f3:a0:8d:0c:ae:5e:69:fc:2c:98:2d:a6:5c:9b:
                    9e:4c:b0:cc:63:6d:48:a4:5e:d3:ca:2a:78:bd:39:
                    32:96:1c:da:37:07:8f:c1:3f:6e:50:ce:77:a3:6f:
                    f6:70:a8:3c:08:54:04:19:52:8f:7d:da:7e:f9:2b:
                    f8:ec:ef:c2:71:93:04:ac:d2:4d:56:56:0d:dc:d8:
                    b1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:56:1A:45:B1:12:E9:AD:56:C3:C9:04:63:B4:1C:71:1A:FC:F6:30
            X509v3 Authority Key Identifier:
                keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:04:5c:d9:47:77:54:73:9f:8f:3a:80:e1:5c:50:20:c3:d7:
         ce:5a:30:f2:c2:9e:8d:4c:66:b9:7d:85:7d:3c:49:b6:5f:28:
         d7:b6:f4:a5:45:c4:82:af:0e:e1:e2:49:14:7b:d7:2e:01:bd:
         f5:66:43:c3:c3:5b:8a:5d:c6:03:68:dd:e0:45:b4:85:fe:bc:
         1d:9f:3e:4d:99:9c:de:63:35:2e:dc:d4:a4:80:0a:7c:fb:ab:
         45:94:fb:38:1e:b7:b6:58:4f:13:5c:6f:fa:90:41:b6:37:d3:
         32:6b:4f:35:6c:9b:ed:52:73:ce:2a:c5:42:0c:18:80:4b:8f:
         9c:90:eb:b7:79:da:e1:13:60:84:d9:d2:a7:e3:92:49:0c:95:
         6e:9f:9d:42:4b:05:a6:96:23:3a:da:e1:c2:bb:be:59:77:a4:
         da:a1:32:12:cc:16:f6:4f:9a:14:ce:b6:20:cd:da:4e:ba:6e:
         f0:18:dd:37:6d:71:ed:e2:03:92:ed:77:3b:8e:3d:8e:55:99:
         0a:d3:17:6c:82:ad:6e:4d:18:ea:1e:47:48:59:ee:d3:4a:80:
         f0:d8:76:d4:78:10:f5:26:64:7a:d3:64:e8:45:64:56:4f:a6:
         13:17:d1:ac:df:4f:07:32:26:71:9c:51:3d:a9:0b:18:b0:eb:
         23:9f:1b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 00:21:38 2025 by rpki-client