This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
File:                     8M9JYzV925hV-brEx9mVrciaNyo.mft (raw, json)
Hash identifier:          DTd2eJnynDN3KvRxKElSSak0SkJm62pKdEGTgq3anDQ=
Subject key identifier:   46:F9:AC:96:EB:1F:7F:B4:50:11:B1:78:70:B4:16:4C:F7:F2:D4:3C
Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
Certificate issuer:       /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Certificate serial:       019B3F7F889C35F14325876F4FBC57B719A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
Manifest number:          168E
Signing time:             Sun 21 Dec 2025 06:01:21 +0000
Manifest this update:     Sun 21 Dec 2025 06:01:21 +0000
Manifest next update:     Mon 22 Dec 2025 06:01:21 +0000
Files and hashes:         1: 8M9JYzV925hV-brEx9mVrciaNyo.crl (hash: nPBUNaDbbr8iCjDYun8N0EGyMeXYVcdv/vlupVOu9lY=)
                          2: YuVFbu671lxJtgp8Dd5trr77imo.roa (hash: eoCcK7MisnOAgEVb/tn2NdbeYwDzl1a566p1bHV7AcM=)
                          3: n5Snke9qrVszV2r6iCOXAr8xpfU.roa (hash: OcodRKZ+v9kxH+amb1gjlja43PdbaBmuEGTA3TTwgu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3f:7f:88:9c:35:f1:43:25:87:6f:4f:bc:57:b7:19:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
        Validity
            Not Before: Dec 21 06:01:21 2025 GMT
            Not After : Dec 22 06:01:21 2025 GMT
        Subject: CN=46f9ac96eb1f7fb45011b17870b4164cf7f2d43c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2e:e9:0b:09:61:01:a5:f7:27:aa:d1:15:d1:
                    ea:7a:11:6e:8d:9e:38:6d:50:ec:98:32:8a:a9:a7:
                    1f:b3:45:a9:4f:fe:45:87:53:20:6e:ae:9a:f1:03:
                    9d:94:b9:8c:02:69:b2:53:07:b1:a9:23:bb:50:74:
                    e4:cf:35:bc:8f:1b:33:46:45:61:db:9f:80:1d:07:
                    a6:91:e8:70:51:4a:f0:73:bd:47:56:55:1c:77:18:
                    8f:e5:1b:85:78:8b:80:59:6d:b5:cc:f0:ae:b5:56:
                    77:bd:2b:0f:7a:c3:be:78:e3:48:dc:05:1a:6e:e6:
                    14:0c:c4:d3:85:73:dd:2f:33:57:86:9b:24:d5:cf:
                    f5:e3:3e:80:23:5a:b3:ab:8b:13:4f:b3:ce:fc:90:
                    cc:7f:1d:f7:f6:ba:40:99:a2:2a:4b:97:2a:83:ce:
                    01:ca:cb:4f:65:b2:2d:61:80:2f:7f:b1:e9:fb:51:
                    bc:9c:22:c3:ef:b6:d8:57:5b:39:eb:07:6a:95:56:
                    18:05:34:36:1f:03:01:a9:15:b1:ea:cd:e4:b3:94:
                    b4:64:a8:b8:15:f4:83:65:58:9a:ca:ef:ed:cc:9f:
                    ad:d2:10:f2:11:0b:af:89:92:5a:39:7b:ab:1e:fb:
                    0e:97:dd:e8:4d:a9:6f:04:ce:4b:4b:9c:ed:60:6a:
                    4a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F9:AC:96:EB:1F:7F:B4:50:11:B1:78:70:B4:16:4C:F7:F2:D4:3C
            X509v3 Authority Key Identifier:
                keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:68:f1:9f:b3:fa:1d:57:63:d7:50:77:4c:b4:80:1c:9b:db:
         ca:fe:ba:16:49:d4:29:48:71:76:2c:ea:38:5f:2e:81:ea:7f:
         6a:5d:4c:a7:48:57:40:0a:7b:4b:64:98:a9:0d:6e:cf:d9:91:
         a5:14:56:e5:0b:eb:6a:0b:50:32:f2:7a:9d:be:3d:37:da:93:
         f9:d0:fc:a1:30:09:41:6d:c3:45:82:ff:31:f7:9a:40:a7:1a:
         4e:a3:e2:6f:41:4c:14:c8:ae:ad:08:53:0c:aa:bd:86:42:1a:
         f1:4e:b3:82:51:ae:7a:5e:04:d7:be:d7:93:c9:33:2f:fd:94:
         23:a1:7f:fe:73:45:ad:a3:71:39:9a:f9:d9:69:87:de:09:df:
         6d:f7:0c:1b:57:2c:3a:10:23:20:e7:11:51:40:7b:95:89:d4:
         07:a1:98:18:25:f4:6f:02:b1:42:00:a6:b9:16:c7:af:5c:aa:
         e6:7e:76:8b:3e:70:94:ab:05:c5:7d:f6:df:cb:d2:22:b3:ee:
         f8:42:fe:de:19:e1:d9:14:92:3c:b8:af:2f:1f:d5:02:9f:34:
         19:cb:15:0b:3f:20:12:a5:08:0d:83:14:17:c6:48:a3:b6:dc:
         0b:0c:70:05:9b:79:66:ce:67:ab:f3:fb:1b:d5:0c:75:a1:b2:
         e8:42:29:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:36:58 2025 by rpki-client