This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
File:                     F-ad3CmgWyxF7jzFojQLLkxtrV0.mft (raw, json)
Hash identifier:          fCW05c/VSM873kZR6G83E6KzvcBWuGV3DbeeFYfzDyw=
Subject key identifier:   D5:6A:48:32:E1:CF:44:D8:FC:C0:1D:5A:AB:F9:CA:D9:08:BB:AE:47
Authority key identifier: 17:E6:9D:DC:29:A0:5B:2C:45:EE:3C:C5:A2:34:0B:2E:4C:6D:AD:5D
Certificate issuer:       /CN=17e69ddc29a05b2c45ee3cc5a2340b2e4c6dad5d
Certificate serial:       019AF1647C6CB86D8CF60ACF5F73B0D0CBD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
Manifest number:          0A19
Signing time:             Sat 06 Dec 2025 02:01:25 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:25 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:25 +0000
Files and hashes:         1: A8Ej05bPXSyJSutko6zMXi_LdTs.roa (hash: l1Np2vyuCibE5G3ZNC4CZuxMVOv5Q0qw24MUV/m5PcU=)
                          2: F-ad3CmgWyxF7jzFojQLLkxtrV0.crl (hash: tGH9rRmR4MeKyhoubZdRRXnOV0UHGYgihd6Kht4Zn8M=)
                          3: LrktV_MNLgMuzH072PMIh7VuEn4.roa (hash: shYF8grlz0KlYGSJ/aVE66ppgDECTuvjQ5MpA1IvAJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:7c:6c:b8:6d:8c:f6:0a:cf:5f:73:b0:d0:cb:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e69ddc29a05b2c45ee3cc5a2340b2e4c6dad5d
        Validity
            Not Before: Dec  6 02:01:25 2025 GMT
            Not After : Dec  7 02:01:25 2025 GMT
        Subject: CN=d56a4832e1cf44d8fcc01d5aabf9cad908bbae47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:90:70:7b:9e:53:52:94:d2:2e:70:95:1f:7d:
                    0c:74:26:1d:16:72:ee:50:eb:4c:05:94:c1:ee:23:
                    98:52:24:57:85:e7:a2:f1:a9:81:ea:8d:a6:f4:ad:
                    69:28:97:38:4f:00:98:84:f1:63:e2:c1:36:58:f6:
                    c2:73:f3:8a:8c:86:62:33:86:71:05:ec:e0:79:1c:
                    12:b0:ef:5c:87:55:47:e6:71:fe:bf:87:41:d6:01:
                    4c:2b:aa:01:7b:47:22:c4:99:51:ef:00:42:b7:ad:
                    48:71:2d:bc:c2:e5:2d:04:cb:b4:6e:9b:6f:d5:e7:
                    ea:ae:86:6a:c8:26:bf:9e:81:b5:17:f8:2b:ff:bb:
                    52:fc:53:9c:67:5b:e1:98:4c:90:28:dd:ae:2a:c9:
                    6a:11:34:fa:a4:c1:1a:27:30:6c:ac:15:48:c7:d7:
                    e9:26:51:32:dd:39:ca:64:1a:de:a1:9c:af:3f:67:
                    bc:ac:dd:5a:27:00:7b:5e:8c:6b:a1:98:61:8e:ba:
                    2c:53:dc:70:e5:28:2a:16:17:51:8f:df:51:05:1e:
                    e7:d9:09:b9:c5:74:7a:bd:2f:2c:36:ab:05:7b:da:
                    e8:a7:5b:06:0d:31:9a:5c:1b:62:f3:c8:21:88:8e:
                    27:95:82:24:5a:de:28:70:8c:ef:09:e0:ce:04:08:
                    af:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6A:48:32:E1:CF:44:D8:FC:C0:1D:5A:AB:F9:CA:D9:08:BB:AE:47
            X509v3 Authority Key Identifier:
                keyid:17:E6:9D:DC:29:A0:5B:2C:45:EE:3C:C5:A2:34:0B:2E:4C:6D:AD:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:4f:13:47:25:e3:8d:c0:73:6f:4c:9b:78:19:69:89:f7:ac:
         f7:bf:8c:5e:2c:cb:e6:dc:ba:0a:16:da:ad:f6:aa:93:35:a1:
         13:c3:07:24:7c:c3:bc:82:24:96:0f:0b:53:aa:07:0e:80:e8:
         16:b3:44:34:86:ac:b6:57:e2:b9:83:a7:1d:5f:c1:a2:c0:97:
         99:de:21:6b:c1:0d:01:d0:7a:8f:5e:be:31:5e:ae:53:e7:90:
         56:3a:fd:5c:c4:7d:e4:1d:0b:90:c2:79:a8:48:d2:33:a6:57:
         f8:29:fe:2c:78:78:44:46:b9:38:1b:61:c3:29:75:eb:62:03:
         0e:1e:cf:c1:1b:03:96:42:99:ee:3b:f7:1c:f4:8e:b6:65:b6:
         51:0c:73:d7:66:a4:93:34:eb:91:ea:d8:84:b4:d6:c0:0e:13:
         a4:3d:52:37:85:28:22:24:4b:8d:3d:dc:85:e2:d5:55:8c:ed:
         42:b8:41:05:b6:02:41:3c:c2:b3:dd:00:52:ff:a8:19:bd:e1:
         9b:98:6a:03:74:e0:ed:e8:54:6c:b0:0a:e4:fd:21:d4:ea:ff:
         51:ac:18:c4:61:91:fe:c5:3d:05:c6:c7:49:ef:a1:e8:fd:0b:
         46:ca:73:ca:55:e3:82:8d:0f:9a:49:03:82:a4:42:32:60:fc:
         bf:55:55:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxZHxsuG2M9grPX3Ow0MvRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZTY5ZGRjMjlhMDViMmM0NWVlM2NjNWEyMzQwYjJlNGM2
ZGFkNWQwHhcNMjUxMjA2MDIwMTI1WhcNMjUxMjA3MDIwMTI1WjAzMTEwLwYDVQQD
EyhkNTZhNDgzMmUxY2Y0NGQ4ZmNjMDFkNWFhYmY5Y2FkOTA4YmJhZTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5Bwe55TUpTSLnCVH30MdCYdFnLu
UOtMBZTB7iOYUiRXheei8amB6o2m9K1pKJc4TwCYhPFj4sE2WPbCc/OKjIZiM4Zx
BezgeRwSsO9ch1VH5nH+v4dB1gFMK6oBe0cixJlR7wBCt61IcS28wuUtBMu0bptv
1efqroZqyCa/noG1F/gr/7tS/FOcZ1vhmEyQKN2uKslqETT6pMEaJzBsrBVIx9fp
JlEy3TnKZBreoZyvP2e8rN1aJwB7XoxroZhhjrosU9xw5SgqFhdRj99RBR7n2Qm5
xXR6vS8sNqsFe9rop1sGDTGaXBti88ghiI4nlYIkWt4ocIzvCeDOBAivGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVqSDLhz0TY/MAdWqv5ytkIu65HMB8GA1UdIwQY
MBaAFBfmndwpoFssRe48xaI0Cy5Mba1dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRi1hZDNDbWdXeXhGN2p6Rm9qUUxMa3h0clYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jOGNjNjMtNTMwNS00NjM2LWIzMzYt
ZTcxNzY3ODZmNzRhLzEvRi1hZDNDbWdXeXhGN2p6Rm9qUUxMa3h0clYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9jOGNjNjMtNTMwNS00NjM2LWIzMzYtZTcxNzY3ODZmNzRh
LzEvRi1hZDNDbWdXeXhGN2p6Rm9qUUxMa3h0clYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATU8TRyXj
jcBzb0ybeBlpifes97+MXizL5ty6ChbarfaqkzWhE8MHJHzDvIIklg8LU6oHDoDo
FrNENIastlfiuYOnHV/BosCXmd4ha8ENAdB6j16+MV6uU+eQVjr9XMR95B0LkMJ5
qEjSM6ZX+Cn+LHh4REa5OBthwyl162IDDh7PwRsDlkKZ7jv3HPSOtmW2UQxz12ak
kzTrkerYhLTWwA4TpD1SN4UoIiRLjT3cheLVVYztQrhBBbYCQTzCs90AUv+oGb3h
m5hqA3Tg7ehUbLAK5P0h1Or/UawYxGGR/sU9BcbHSe+h6P0LRspzylXjgo0PmkkD
gqRCMmD8v1VVPg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:47:00 2025 by rpki-client