This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.mft
File:                     8ve5y7uJUqw_GW580Lik26XeEcM.mft (raw, json)
Hash identifier:          7eJAEbkCOwP1hpw5loCLFe3foRmghYAHQYoO0EKJJq4=
Subject key identifier:   ED:69:3D:BF:EA:4A:01:C6:99:F4:A8:97:7C:A8:CD:93:33:0E:90:63
Authority key identifier: F2:F7:B9:CB:BB:89:52:AC:3F:19:6E:7C:D0:B8:A4:DB:A5:DE:11:C3
Certificate issuer:       /CN=f2f7b9cbbb8952ac3f196e7cd0b8a4dba5de11c3
Certificate serial:       019B34FB9C0A62F7EC0EB7DB96CAE44B0022
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ve5y7uJUqw_GW580Lik26XeEcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.mft
Manifest number:          67
Signing time:             Fri 19 Dec 2025 05:01:03 +0000
Manifest this update:     Fri 19 Dec 2025 05:01:03 +0000
Manifest next update:     Sat 20 Dec 2025 05:01:03 +0000
Files and hashes:         1: 8ve5y7uJUqw_GW580Lik26XeEcM.crl (hash: B20WG2S31rS8DgV/m9yZbLt3Uv5IGFFoDLJJ26A44is=)
                          2: FEoCb1uLso1eMcNnqeUGMSiYYmk.roa (hash: 26Octt5FPf1NS0dc+QAphRfbrN5vSMqq/tDr6dMsThk=)
                          3: L-e-zboOd0EExBXLvbSt2An9q3Q.roa (hash: 0pabBp9L9dI7nk3zp1L+efYrvlvpBkJqxMVrUl1c6Tk=)
                          4: baYIpR8Fy3HGS97tT3TkbmdSPzY.roa (hash: 7opRxausXis4QYNC4y2ER1LVJpyQDudccsf+oeNI93c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ve5y7uJUqw_GW580Lik26XeEcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:34:fb:9c:0a:62:f7:ec:0e:b7:db:96:ca:e4:4b:00:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f7b9cbbb8952ac3f196e7cd0b8a4dba5de11c3
        Validity
            Not Before: Dec 19 05:01:03 2025 GMT
            Not After : Dec 20 05:01:03 2025 GMT
        Subject: CN=ed693dbfea4a01c699f4a8977ca8cd93330e9063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:09:ff:50:6a:7d:39:72:35:06:b3:cd:0d:
                    dc:dc:44:3b:3c:3f:08:09:e0:79:ad:c4:f6:11:46:
                    a4:7c:ce:93:0f:64:f4:9d:8e:61:e1:d9:37:94:ba:
                    97:9d:35:87:7d:11:7b:03:16:a2:fc:c6:d6:3b:7a:
                    c3:cc:b3:71:dc:84:a2:47:6f:de:96:48:25:9f:c7:
                    97:6d:7b:38:90:48:63:5b:43:95:b4:15:d3:4f:94:
                    d5:c8:73:11:28:4c:27:13:56:42:ee:6f:0c:fb:3f:
                    85:5c:7d:e9:14:81:7d:77:93:0f:68:84:af:1c:a5:
                    50:b8:18:ef:96:29:2e:b2:b0:e9:d7:eb:3d:a5:41:
                    d9:2c:64:ce:7f:13:35:f7:6e:72:19:22:b8:12:f6:
                    51:bf:5f:45:8c:f5:1a:af:ed:72:9c:fb:cf:21:9c:
                    59:66:47:e9:9a:5d:f8:47:cd:c6:78:0e:a9:bc:bf:
                    6b:01:fd:c9:78:f6:ab:da:01:9f:86:ae:44:4e:f0:
                    75:31:9b:e9:34:a0:41:ab:13:b9:4b:09:be:06:ba:
                    78:86:e8:c4:d2:a2:7f:47:d2:65:4b:03:bf:6b:45:
                    ce:1e:01:ca:f0:0d:44:21:9f:44:bd:6d:dd:41:02:
                    cf:25:33:af:cc:fa:3b:22:69:67:19:ad:32:e7:9d:
                    18:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:69:3D:BF:EA:4A:01:C6:99:F4:A8:97:7C:A8:CD:93:33:0E:90:63
            X509v3 Authority Key Identifier:
                keyid:F2:F7:B9:CB:BB:89:52:AC:3F:19:6E:7C:D0:B8:A4:DB:A5:DE:11:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ve5y7uJUqw_GW580Lik26XeEcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:bb:e9:36:59:78:ac:ef:21:5d:d2:b7:cd:5f:05:23:a2:65:
         7a:8c:3e:86:bc:dd:3a:a9:0c:30:ed:9e:c2:dc:ce:a5:16:5e:
         78:1f:1b:73:a0:ae:d3:a5:8c:b1:9f:08:84:9e:0c:4d:d0:2a:
         73:73:a0:53:8b:d6:92:7d:69:42:ef:cd:79:1f:2f:07:05:1e:
         6b:d5:12:f2:85:77:44:3a:5f:71:d2:6b:ee:b9:f0:12:49:f8:
         5e:b4:18:d1:46:a3:59:6a:28:cc:67:ec:38:6d:a2:bd:91:d4:
         4f:de:1c:8c:62:db:44:fe:71:dc:6a:5a:c3:13:75:48:1e:78:
         74:fd:3d:83:79:a2:9c:9b:77:fa:0e:cd:22:bf:87:17:3d:1e:
         46:93:0e:cf:16:d3:90:f1:12:d9:af:11:94:27:5d:af:88:91:
         7c:4f:0e:78:8e:5c:a9:ad:b4:81:0a:0b:11:c5:d1:ad:aa:88:
         2e:23:a8:59:82:43:42:6d:10:4b:fe:d3:b0:5d:df:bd:63:82:
         25:6a:91:c7:73:ad:bf:18:ae:9f:38:32:3a:f3:96:94:3d:36:
         a8:10:1f:62:e9:e1:44:fd:03:1e:69:d7:ec:12:59:7d:2b:11:
         f8:ef:cf:8b:bf:5f:38:a4:46:64:82:88:76:6f:67:09:b9:75:
         59:df:3e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 07:42:56 2025 by rpki-client