This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.mft
File:                     FVCvriuu-2uI-XUbsyGOs5uUtXY.mft (raw, json)
Hash identifier:          7RuPhKZOZVGYjtHHXQbfNcdM/FC4kl5G3cOi7mix3tw=
Subject key identifier:   3A:48:CD:4E:96:0D:A1:0A:84:BC:A9:B9:E4:A8:38:29:C9:AB:9D:FD
Authority key identifier: 15:50:AF:AE:2B:AE:FB:6B:88:F9:75:1B:B3:21:8E:B3:9B:94:B5:76
Certificate issuer:       /CN=1550afae2baefb6b88f9751bb3218eb39b94b576
Certificate serial:       019B2C2F97ABD6026938411030188625AFE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FVCvriuu-2uI-XUbsyGOs5uUtXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.mft
Manifest number:          1781
Signing time:             Wed 17 Dec 2025 12:01:14 +0000
Manifest this update:     Wed 17 Dec 2025 12:01:14 +0000
Manifest next update:     Thu 18 Dec 2025 12:01:14 +0000
Files and hashes:         1: FVCvriuu-2uI-XUbsyGOs5uUtXY.crl (hash: RuWn8SOLtIbJa9HSPd/J7r7VcyWqfwuVHY61hXgUeQE=)
                          2: t9fTM1TKvJ-oUXQJ9lDM9WsVyDc.roa (hash: bT5E6LtHCC1AluQgd2lvyOIQ+/FsjKMjc8eOVOWcAoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FVCvriuu-2uI-XUbsyGOs5uUtXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2c:2f:97:ab:d6:02:69:38:41:10:30:18:86:25:af:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1550afae2baefb6b88f9751bb3218eb39b94b576
        Validity
            Not Before: Dec 17 12:01:14 2025 GMT
            Not After : Dec 18 12:01:14 2025 GMT
        Subject: CN=3a48cd4e960da10a84bca9b9e4a83829c9ab9dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1b:d7:90:72:3a:f4:58:be:7a:90:90:69:91:
                    ec:64:12:3f:20:50:3e:79:52:33:97:67:a7:de:42:
                    58:78:f5:4d:6f:3a:d6:3b:c0:b4:65:d4:53:a7:d2:
                    18:60:3c:38:20:0a:80:bc:a6:ee:68:d1:66:31:a0:
                    7f:27:fe:d4:e8:46:92:ff:5a:f7:be:1e:4a:c9:d4:
                    68:3e:ba:93:7b:ed:a0:68:1a:e5:ba:17:c1:05:b7:
                    50:e6:1f:5e:bb:8f:cf:97:92:57:b0:8f:e3:e0:da:
                    57:3a:2c:c4:6e:2a:e5:9e:d4:7e:40:54:10:99:10:
                    eb:de:12:bc:f5:b7:fe:97:f5:ff:41:f4:fc:59:04:
                    9b:99:45:5d:41:8c:e7:e2:b9:90:47:5b:14:62:d8:
                    18:a0:4d:f6:43:8e:1b:5c:f8:f9:e0:fc:82:7d:2a:
                    fd:3b:1c:c0:d3:23:1c:47:c0:d3:33:ba:62:3a:52:
                    a4:95:cc:a9:a1:3c:78:81:e5:eb:ff:d0:41:91:e2:
                    29:fa:c7:83:eb:66:7a:1e:fa:15:ef:35:19:e5:29:
                    4a:f7:31:0e:4c:b9:b0:ec:4b:11:44:c4:b6:dd:2c:
                    ee:d2:5f:b3:8a:60:2d:03:62:50:7c:c1:cd:98:98:
                    26:ad:18:d7:dd:cb:39:63:36:32:51:c1:f6:10:45:
                    c7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:48:CD:4E:96:0D:A1:0A:84:BC:A9:B9:E4:A8:38:29:C9:AB:9D:FD
            X509v3 Authority Key Identifier:
                keyid:15:50:AF:AE:2B:AE:FB:6B:88:F9:75:1B:B3:21:8E:B3:9B:94:B5:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVCvriuu-2uI-XUbsyGOs5uUtXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:93:9e:a7:c9:53:54:46:4a:bc:c2:de:4a:ed:ee:14:24:dc:
         a0:67:da:3e:0f:9d:c5:f7:44:09:7c:df:9d:a7:da:34:75:72:
         ae:93:3a:30:2c:a5:be:63:36:0e:03:b5:6e:e4:c2:dc:ae:fa:
         25:72:5e:98:3d:7e:a5:16:99:e9:46:84:fc:d2:8b:a6:e7:78:
         cc:62:12:35:04:f2:e0:b6:b7:b2:09:37:ea:f4:e0:8d:32:07:
         51:a0:b6:33:b2:66:09:9f:2a:a3:59:81:49:a6:74:de:77:56:
         f9:ae:21:9d:fe:bd:1d:a4:f7:2d:84:71:09:ff:5c:db:f0:ff:
         66:dd:f7:59:e6:b0:15:3d:04:9b:32:41:ea:80:98:87:7d:c5:
         5c:49:c1:87:9b:85:92:9c:54:49:d3:3d:30:6e:1f:79:9d:c7:
         50:7c:d0:4d:63:7d:ba:22:33:a6:2c:a0:7b:6e:7d:43:c8:95:
         cf:d6:20:86:b9:e1:be:06:55:1e:f4:48:7c:d5:e6:26:91:68:
         a4:79:16:b2:20:83:f2:ac:a1:f0:02:0c:3e:0c:c5:cf:e9:23:
         12:91:34:7d:6e:e3:b5:95:9a:fc:55:8c:70:b5:f4:27:b5:12:
         b5:70:c5:91:8e:50:a9:a0:67:1c:00:3e:7f:e8:e0:74:d3:b0:
         b5:96:38:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZssL5er1gJpOEEQMBiGJa/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NTBhZmFlMmJhZWZiNmI4OGY5NzUxYmIzMjE4ZWIzOWI5
NGI1NzYwHhcNMjUxMjE3MTIwMTE0WhcNMjUxMjE4MTIwMTE0WjAzMTEwLwYDVQQD
EygzYTQ4Y2Q0ZTk2MGRhMTBhODRiY2E5YjllNGE4MzgyOWM5YWI5ZGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BvXkHI69Fi+epCQaZHsZBI/IFA+
eVIzl2en3kJYePVNbzrWO8C0ZdRTp9IYYDw4IAqAvKbuaNFmMaB/J/7U6EaS/1r3
vh5KydRoPrqTe+2gaBrluhfBBbdQ5h9eu4/Pl5JXsI/j4NpXOizEbirlntR+QFQQ
mRDr3hK89bf+l/X/QfT8WQSbmUVdQYzn4rmQR1sUYtgYoE32Q44bXPj54PyCfSr9
OxzA0yMcR8DTM7piOlKklcypoTx4geXr/9BBkeIp+seD62Z6HvoV7zUZ5SlK9zEO
TLmw7EsRRMS23Szu0l+zimAtA2JQfMHNmJgmrRjX3cs5YzYyUcH2EEXHwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpIzU6WDaEKhLypueSoOCnJq539MB8GA1UdIwQY
MBaAFBVQr64rrvtriPl1G7MhjrOblLV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlZDdnJpdXUtMnVJLVhVYnN5R09zNXVVdFhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82Mjc4YzYtYzIwMS00NzQwLWE1ZjEt
NjZkNjcxZjg0MmIzLzEvRlZDdnJpdXUtMnVJLVhVYnN5R09zNXVVdFhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS82Mjc4YzYtYzIwMS00NzQwLWE1ZjEtNjZkNjcxZjg0MmIz
LzEvRlZDdnJpdXUtMnVJLVhVYnN5R09zNXVVdFhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpOep8lT
VEZKvMLeSu3uFCTcoGfaPg+dxfdECXzfnafaNHVyrpM6MCylvmM2DgO1buTC3K76
JXJemD1+pRaZ6UaE/NKLpud4zGISNQTy4La3sgk36vTgjTIHUaC2M7JmCZ8qo1mB
SaZ03ndW+a4hnf69HaT3LYRxCf9c2/D/Zt33WeawFT0EmzJB6oCYh33FXEnBh5uF
kpxUSdM9MG4feZ3HUHzQTWN9uiIzpiyge259Q8iVz9YghrnhvgZVHvRIfNXmJpFo
pHkWsiCD8qyh8AIMPgzFz+kjEpE0fW7jtZWa/FWMcLX0J7UStXDFkY5QqaBnHAA+
f+jgdNOwtZY4sg==
-----END CERTIFICATE-----
Generated at Wed Dec 17 19:33:55 2025 by rpki-client