This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
File:                     H6eVFn0tn7QglB8XKHvfPF7tjfk.mft (raw, json)
Hash identifier:          G39+bxmK1IrqIm7Pa/oyCHndXSMX4/5z4QYDIbGfX1s=
Subject key identifier:   F2:51:FA:74:65:CB:96:95:EF:55:12:78:F1:1B:04:D2:25:F2:44:48
Authority key identifier: 1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
Certificate issuer:       /CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Certificate serial:       019B3BD9A48B8AD6BA9B490528CEFF12782F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
Manifest number:          08A1
Signing time:             Sat 20 Dec 2025 13:01:17 +0000
Manifest this update:     Sat 20 Dec 2025 13:01:17 +0000
Manifest next update:     Sun 21 Dec 2025 13:01:17 +0000
Files and hashes:         1: 34L0qge2tNB4WEjnnevARD_mNUU.roa (hash: ry58BGExakUgGHZ3z3Fi8XcJ02SF1yHnFqs3N6sRqHc=)
                          2: 43gEJXLRZhBLeSI-aOiwsJo8t18.roa (hash: hJ2/LJzxG3xhi0jErGx6Rimn7Tgu+B52/B5v7PqA0Q4=)
                          3: FySTZF5XmiRgffP_0Q1bU_jIQpg.roa (hash: GbwThYD6w19HqYzAx38shdLTpkIXF4U5UQypl5TKy7s=)
                          4: H6eVFn0tn7QglB8XKHvfPF7tjfk.crl (hash: PXNcfQOpfbM5QIK979+obDHh6QVKpDpn1paGKp66phg=)
                          5: aSAbXtaRyXcPhRakK1aghIwRn3g.roa (hash: up2cOGYfGLooX0y47JfJVek/1Cnxd7U8E51loywLrVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:d9:a4:8b:8a:d6:ba:9b:49:05:28:ce:ff:12:78:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
        Validity
            Not Before: Dec 20 13:01:17 2025 GMT
            Not After : Dec 21 13:01:17 2025 GMT
        Subject: CN=f251fa7465cb9695ef551278f11b04d225f24448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1f:ed:d1:74:dd:66:0b:3d:4c:4d:cc:c0:16:
                    b7:62:23:f3:33:98:02:6a:ab:92:62:0b:82:4c:a5:
                    11:f2:74:bd:d8:f7:6f:3c:4b:58:df:72:f8:5f:a1:
                    7d:93:77:54:d5:cf:96:cf:fb:9a:42:de:65:a1:e9:
                    b3:62:d8:f5:63:ee:c7:f2:1f:37:03:7f:ff:18:29:
                    b5:a7:71:7f:14:8b:4d:59:90:2e:e1:fd:83:d4:0c:
                    fc:79:8c:b4:f5:43:f7:2d:de:52:0b:3e:e9:40:6a:
                    8d:d9:36:f4:ee:97:6b:3c:9a:90:a3:87:bc:10:9c:
                    a3:77:e7:6e:46:0b:26:eb:29:9c:7e:b2:02:3a:94:
                    29:24:df:02:3c:57:44:47:ea:88:90:6c:9f:fa:01:
                    93:91:82:7b:74:ea:7a:13:25:96:b6:82:14:1b:e7:
                    e2:a3:7f:1f:69:10:92:48:5a:c7:61:17:76:91:e6:
                    15:1e:28:d8:70:a6:45:22:99:16:be:b3:76:5e:1e:
                    dc:e6:9a:99:86:b7:2a:15:42:27:28:87:2e:dc:57:
                    f3:17:36:8a:98:bd:38:ab:74:56:1c:24:f4:b7:1e:
                    d3:7f:1d:d7:66:6a:4c:07:eb:69:df:7b:97:b4:18:
                    6d:2e:bf:02:e2:4a:23:14:da:09:18:2d:61:76:d0:
                    45:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:51:FA:74:65:CB:96:95:EF:55:12:78:F1:1B:04:D2:25:F2:44:48
            X509v3 Authority Key Identifier:
                keyid:1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:57:5e:a7:78:d5:82:d7:d4:b6:a4:86:8b:5e:4f:db:30:76:
         ec:11:ed:17:8c:de:75:00:ff:54:97:ac:84:11:32:a3:9e:52:
         ad:05:a2:3d:a6:80:84:71:fb:38:de:c3:9c:31:2d:6f:63:e8:
         c5:bd:a8:83:16:4b:6c:b4:07:83:91:ba:95:ab:1b:65:8d:bf:
         60:3d:f8:5e:22:d5:17:63:8a:94:b2:ff:50:39:6f:27:35:35:
         00:fb:16:3a:5e:be:6e:62:b7:2b:26:eb:f2:41:f7:0b:fb:af:
         d3:41:bd:be:d6:f6:0b:0d:a6:98:f3:ab:20:80:f2:df:5f:6a:
         3f:7d:a0:6c:a1:38:e3:83:76:23:e1:10:9a:bc:a6:00:4f:70:
         f8:6c:57:65:fe:16:6a:bb:d6:5a:16:b8:de:21:33:87:32:fa:
         5e:af:1b:25:5e:60:b5:61:6f:8e:d1:d6:0d:9d:8d:20:84:a2:
         05:75:c4:c9:54:02:7c:64:c2:80:ff:50:09:11:64:67:4a:59:
         20:b8:85:e0:2f:0a:49:35:83:d2:0f:ac:56:49:29:a2:f7:bf:
         23:ea:f8:a2:1a:71:16:41:eb:b7:a1:d5:d6:48:a6:bf:5c:e5:
         86:8d:10:87:e7:ce:c2:03:ef:0f:18:27:1d:20:7a:f8:f1:c7:
         84:e0:0d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:51:04 2025 by rpki-client