This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
File:                     fU--VZRwf9z5QCXqFVcaaMJNqas.mft (raw, json)
Hash identifier:          cAkugvGLNaKGwslZzbh0/1B+HRDJANVF4aQyXQIevvc=
Subject key identifier:   56:D0:CE:B7:6C:B8:DD:01:39:C6:7E:3F:5B:24:E0:43:FA:20:D3:89
Authority key identifier: 7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB
Certificate issuer:       /CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
Certificate serial:       019AF31B5B033732B1520EB6B1A1609D03E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
Manifest number:          092F
Signing time:             Sat 06 Dec 2025 10:00:47 +0000
Manifest this update:     Sat 06 Dec 2025 10:00:47 +0000
Manifest next update:     Sun 07 Dec 2025 10:00:47 +0000
Files and hashes:         1: fU--VZRwf9z5QCXqFVcaaMJNqas.crl (hash: fu0eOMF/KjSfomu8QfzHBrSpP6ZQi4kxxVXs/31q8nI=)
                          2: uJcxOoPayTtpIImr51o6Grvnwh4.roa (hash: HgfbCb24sxq0O5vUUAY2XVFtTmqaW+l9dpOtt2vq4Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:5b:03:37:32:b1:52:0e:b6:b1:a1:60:9d:03:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
        Validity
            Not Before: Dec  6 10:00:47 2025 GMT
            Not After : Dec  7 10:00:47 2025 GMT
        Subject: CN=56d0ceb76cb8dd0139c67e3f5b24e043fa20d389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e1:c0:00:60:aa:b2:aa:fb:95:d8:b4:99:ee:
                    72:cb:d2:31:0c:89:e7:fb:49:25:0e:64:04:d5:1b:
                    a0:7a:f7:f4:25:88:db:cb:be:92:34:98:bd:53:b4:
                    af:ca:35:d0:9e:e6:9e:ea:15:2a:28:1c:4b:e2:53:
                    df:fe:38:c3:4e:1f:68:f2:73:01:46:ed:9f:ca:7d:
                    29:27:0a:1c:7d:c3:5c:0f:50:d3:84:45:fc:5f:19:
                    20:57:88:03:86:c6:dd:c6:77:e5:ef:2a:e9:1f:14:
                    5c:72:83:dc:a8:b6:8c:ee:84:7c:cf:90:60:53:63:
                    53:8b:8f:67:2d:9c:8f:5b:0e:5a:cb:7d:6c:e1:f5:
                    da:11:90:6e:43:10:55:32:d8:19:55:22:cd:54:16:
                    c0:da:6e:a3:c4:d5:7e:ed:1d:c1:2d:1a:96:4d:09:
                    a3:e3:eb:84:57:5e:af:e7:3b:df:35:14:2a:00:f9:
                    e9:3b:22:0c:b9:92:d4:37:5b:08:59:8d:c8:79:02:
                    32:b3:47:4b:1c:47:b0:71:4d:90:a8:fe:dd:7e:f0:
                    e4:12:2b:cc:b8:d2:09:7e:67:94:83:a0:77:70:fb:
                    77:42:91:1c:fc:00:7e:54:5c:2d:e7:0b:4a:ff:4b:
                    77:fa:1d:8d:42:fa:2f:fe:ec:ed:6f:e6:78:f2:99:
                    7e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D0:CE:B7:6C:B8:DD:01:39:C6:7E:3F:5B:24:E0:43:FA:20:D3:89
            X509v3 Authority Key Identifier:
                keyid:7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:79:43:1e:3b:c0:1b:3a:ab:f7:36:d2:36:de:32:26:93:a3:
         22:6c:34:6c:cd:ef:ba:11:b3:1e:f4:f7:4b:7d:e9:25:c4:22:
         76:f1:be:3a:0e:33:80:98:46:77:b7:b2:b4:1e:c4:f3:cd:c2:
         9c:65:a8:cc:03:0c:ae:ce:7f:29:7e:9a:fd:21:2d:60:79:2d:
         b8:59:a9:e3:aa:aa:bb:c5:5b:b5:a4:d3:cb:d0:f3:6d:e5:4f:
         7d:ca:09:b6:a8:02:73:58:fe:32:07:b7:09:35:83:1d:6f:dd:
         0a:9f:ae:a5:39:35:ed:56:fd:86:06:76:0f:d1:22:8d:0d:07:
         70:c5:1f:57:63:fd:71:ef:f3:35:a3:c4:c8:55:1d:d0:0b:95:
         ee:d5:b0:0e:0b:1d:11:89:e2:00:b0:af:8d:aa:74:2b:f4:dc:
         f8:ba:39:12:64:ff:66:fa:ae:2f:2f:d4:58:6e:34:d3:10:b4:
         ba:31:50:46:64:27:47:d0:75:6b:7b:5e:78:12:c0:8c:6c:fe:
         7c:6b:68:a2:77:64:94:02:af:93:ed:32:39:e4:22:60:32:82:
         06:7d:ff:24:7f:d8:42:f9:a5:4b:05:1e:a0:2e:3b:69:76:26:
         d9:4d:f2:26:e3:35:5d:a9:c0:72:c1:c6:2e:66:06:76:cd:c2:
         c1:23:4e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:50:31 2025 by rpki-client