This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
File:                     fm4uaWbgarJcoOHaZuHj1kJIs6E.mft (raw, json)
Hash identifier:          gMLR7UZWDdumIwRhIxAxyx/84J99+AJq8uP1gQ8KyNw=
Subject key identifier:   00:0C:9E:3C:62:41:D3:D1:87:03:85:65:D6:B4:AE:12:E7:59:98:21
Authority key identifier: 7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
Certificate issuer:       /CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Certificate serial:       019AF23FAEFC9886B134A571B54857E8E54A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
Manifest number:          02F2
Signing time:             Sat 06 Dec 2025 06:00:51 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:51 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:51 +0000
Files and hashes:         1: BJ7sjp5ibHEtMZwGH8QOSgEVeks.roa (hash: vdUAgWFb0/ninRNnqapYY+qZwNPE4UbocwPx101zVCg=)
                          2: JyAstjJnRnfKpE7boFngTUQKsSI.roa (hash: QeCPc7sTPqsvq1vdnmx1h5/hFMLBuSHfMUEgszAKgAc=)
                          3: fm4uaWbgarJcoOHaZuHj1kJIs6E.crl (hash: Mhc8niw+ypk3KDVermryMGdKpstSnjbGFmx5xLJ3CUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:ae:fc:98:86:b1:34:a5:71:b5:48:57:e8:e5:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
        Validity
            Not Before: Dec  6 06:00:51 2025 GMT
            Not After : Dec  7 06:00:51 2025 GMT
        Subject: CN=000c9e3c6241d3d187038565d6b4ae12e7599821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f3:2b:7c:8c:74:f5:23:da:9f:a7:ba:1a:c6:
                    ce:32:78:08:ed:d9:20:b3:a0:64:05:11:fa:3d:de:
                    80:5e:08:ac:c0:b1:c6:a3:2f:c1:51:cc:be:d7:5e:
                    5f:f2:58:80:ff:79:ce:e2:70:9c:03:a6:ee:76:5a:
                    e2:05:da:f7:68:75:a3:57:d8:9a:7b:d1:af:37:0b:
                    3b:d8:12:91:f2:46:57:01:b5:21:8c:ce:4e:e0:6b:
                    be:d1:53:80:87:d3:92:2d:b9:0d:67:f0:a2:50:19:
                    3d:4d:b4:5a:37:41:3b:41:ee:11:ea:f3:b2:b0:1a:
                    7d:25:91:00:e6:9c:fa:91:77:fd:a1:84:3b:98:c5:
                    21:15:91:fc:f5:4d:b9:64:79:0a:06:56:c7:46:5a:
                    84:ba:c8:62:9c:53:01:8b:5e:d9:3d:ea:84:5a:2c:
                    36:b9:0e:3b:a4:c4:1e:7e:1b:27:cb:b2:84:f0:27:
                    5c:92:b6:74:9b:04:da:81:86:09:72:48:f1:47:a0:
                    06:12:f2:b0:cd:79:d7:bc:62:08:b5:db:8e:fd:48:
                    9e:c5:65:73:0a:14:d1:9b:41:10:4f:ea:64:87:fe:
                    03:2b:1a:d7:ea:a0:a1:10:04:52:d6:fd:87:18:2a:
                    63:28:12:8e:41:6e:0f:b8:55:a4:dc:84:58:17:81:
                    92:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0C:9E:3C:62:41:D3:D1:87:03:85:65:D6:B4:AE:12:E7:59:98:21
            X509v3 Authority Key Identifier:
                keyid:7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a1:5a:d0:ba:b4:ff:5f:f6:12:e4:e1:4d:a9:6e:56:3a:ce:
         98:f9:bb:74:9f:03:ef:a1:47:0c:0c:26:3f:4c:29:22:2f:9e:
         c6:13:68:77:65:6d:4e:95:72:b7:ce:3a:89:64:5e:83:a4:01:
         f7:60:fc:35:54:89:bb:12:e2:e5:44:ce:8e:66:15:c0:76:39:
         b0:47:5a:92:71:e0:2e:75:57:29:d7:11:0e:ac:ac:6f:89:d4:
         93:14:f7:78:1b:73:1e:e2:f2:63:af:5b:1c:92:36:4e:4b:26:
         17:63:a1:83:78:2b:18:ff:87:11:44:95:07:91:20:7f:66:8e:
         f9:d3:6a:95:9c:99:c2:30:83:06:a0:ec:ea:2c:24:1f:f7:37:
         64:aa:90:9a:d1:29:e1:da:8e:a3:3d:ba:56:00:39:a7:93:8e:
         a7:6e:eb:6d:a1:c2:d6:cb:67:5a:d9:35:61:40:2a:56:3e:8b:
         66:dd:c6:11:05:2f:19:25:ec:0c:29:0b:ac:e2:0d:d1:f0:c3:
         b9:59:4d:f7:32:b0:f1:ff:da:e9:9a:5e:33:bd:3d:15:69:de:
         a6:c2:9d:ae:43:93:d0:00:3b:ee:1b:2e:5c:f4:da:54:5a:dd:
         fe:d9:8b:46:16:36:01:18:a9:d8:df:44:f6:fb:b0:6d:e7:70:
         0f:1f:cf:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:59:54 2025 by rpki-client