This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
File:                     8YCPGr745rWc1DWaa0SB_HyWMdE.mft (raw, json)
Hash identifier:          7gTFVEn6iYpOKin3T70xasVwwWhhZR6JVNlGYAvkS5E=
Subject key identifier:   88:77:DE:98:12:5C:AD:8E:69:10:DD:84:7D:D1:EB:16:61:70:6B:74
Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
Certificate issuer:       /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Certificate serial:       019B413679932A804F35834A23892AA8077E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
Manifest number:          178C
Signing time:             Sun 21 Dec 2025 14:00:47 +0000
Manifest this update:     Sun 21 Dec 2025 14:00:47 +0000
Manifest next update:     Mon 22 Dec 2025 14:00:47 +0000
Files and hashes:         1: 1-pC8r9w9eHPboI6UQ9SPxm6C-JI.roa (hash: 4/hN4BZtPakrI9kWgmVlEfI4CA36mWdfywhv2fUv0zc=)
                          2: 8YCPGr745rWc1DWaa0SB_HyWMdE.crl (hash: wJ/ZB7X20o5w1Du4dBQa1mH3Qq9HtNgDguSjT5iYJJ4=)
                          3: ewa-i1ZX3x5sx5ypquiCHGcdBZY.roa (hash: oyaoG9o+HMw8UbuIoU2MjdUmgeJrqz7dNC1WMoDWkeM=)
                          4: f3N3ZaRV0bOdlX13-KIGTXiHS-c.roa (hash: G7D6BUoaKLhAlCeuz2Rq/Eb+8hPzua6dwGFSHRCAqy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:41:36:79:93:2a:80:4f:35:83:4a:23:89:2a:a8:07:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
        Validity
            Not Before: Dec 21 14:00:47 2025 GMT
            Not After : Dec 22 14:00:47 2025 GMT
        Subject: CN=8877de98125cad8e6910dd847dd1eb1661706b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b4:13:23:f5:60:9e:82:42:ef:6f:eb:9d:84:
                    47:21:c7:1e:15:79:41:04:c6:27:1a:05:6f:ae:ae:
                    ea:c2:26:31:46:cf:e8:40:f1:ac:01:e4:49:d2:ac:
                    fc:fe:52:5a:f2:fa:7f:58:d3:e4:4a:81:7c:f3:5e:
                    49:aa:5a:8c:a5:17:03:dd:59:ea:92:85:bc:7a:b0:
                    ca:d8:db:8c:2e:f7:8c:c6:fe:16:40:59:2d:83:ca:
                    11:6b:7c:00:c1:63:f0:d3:83:e4:e4:4e:a4:e8:38:
                    1b:c8:dc:c2:71:45:fa:48:cf:49:1b:92:e9:31:61:
                    aa:84:d2:e2:e1:ec:c8:f3:b1:1a:0e:bc:45:70:f7:
                    20:17:f5:42:cf:f9:ef:c9:d2:08:98:8f:75:14:40:
                    05:d5:7a:3d:1f:d6:13:0c:4f:a3:6c:1e:af:73:6e:
                    bf:d9:5f:91:6e:83:2c:75:c5:82:a6:b8:96:5a:76:
                    85:ff:5c:14:09:da:cb:0f:0e:da:b2:cd:c8:7a:52:
                    8c:b7:10:16:29:d8:e5:25:29:ff:42:a7:91:01:4b:
                    e7:bf:a8:f9:1f:b0:38:dc:06:cc:d9:e3:98:04:a1:
                    4c:8e:49:9c:b7:b1:56:2a:52:49:3a:f3:1b:6c:10:
                    73:70:24:7c:1f:17:14:10:fd:13:3a:49:79:09:ee:
                    9f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:77:DE:98:12:5C:AD:8E:69:10:DD:84:7D:D1:EB:16:61:70:6B:74
            X509v3 Authority Key Identifier:
                keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:94:c1:76:c0:a2:90:1b:4d:09:69:ac:c8:d7:32:ef:d3:30:
         82:a5:9c:1d:c7:03:e8:d5:3c:e7:97:6e:7e:f8:25:21:ff:c0:
         80:ae:34:b7:05:33:da:b0:62:50:69:f4:7b:eb:f6:2b:a3:89:
         63:84:10:39:ff:18:21:ac:6f:a1:bb:3b:f0:e8:dc:88:95:7e:
         6d:30:52:f1:97:27:05:9c:f9:de:49:01:a2:78:cb:89:69:32:
         e1:11:e2:5f:af:a3:3a:ab:cb:7a:a6:7c:11:86:e8:7c:ab:ba:
         82:8b:b3:d2:ee:cf:20:19:1d:24:a5:a0:cd:ca:51:8b:c9:37:
         4f:5f:58:24:58:48:f5:6b:b6:de:fd:54:c7:40:fe:3e:d9:93:
         22:81:ee:84:51:21:e4:0f:02:11:44:54:93:90:04:3b:e1:67:
         cc:29:58:a6:b7:c8:be:c1:95:a9:d3:a2:77:9b:8f:40:ac:6b:
         fc:54:ff:e3:78:bd:6a:e9:6d:3b:81:df:d7:c7:11:b7:fa:96:
         b4:5c:7c:52:3a:de:39:89:d1:1b:cf:a1:12:0f:6c:fe:11:c6:
         8e:79:23:a4:e6:b3:26:d9:64:9d:bd:db:b1:1a:88:51:0d:b6:
         cb:a2:c1:60:19:bc:e4:19:ce:80:9c:91:3d:aa:94:a8:c7:b6:
         d8:0a:87:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:15:28 2025 by rpki-client