This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
File:                     FSdFXqf84Xz9BDGYUljRPga_pzU.mft (raw, json)
Hash identifier:          LJ+hPkpUZsYJz7nR2kTa7ApKvupGPT63YQ8o58vVx7E=
Subject key identifier:   5F:3C:4D:05:44:A0:59:45:92:4D:93:86:E9:0D:C9:38:3C:F3:DE:18
Authority key identifier: 15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
Certificate issuer:       /CN=1527455ea7fce17cfd0431985258d13e06bfa735
Certificate serial:       019AF35203DF07BA44E7D3A35A5169430DB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
Manifest number:          1027
Signing time:             Sat 06 Dec 2025 11:00:29 +0000
Manifest this update:     Sat 06 Dec 2025 11:00:29 +0000
Manifest next update:     Sun 07 Dec 2025 11:00:29 +0000
Files and hashes:         1: FSdFXqf84Xz9BDGYUljRPga_pzU.crl (hash: 4WjM9DAVAnsQcJm0PJ1eVtcyJRVTPFAfiYgHixzLmqI=)
                          2: Iga5jVF2XbjPh1O_q93OfaOrlUw.roa (hash: fBv3VaWtz/fH5Sfra8JN+CYR+FXB74KZZK6MnISjtgU=)
                          3: RkTNkNwXGcwxNDKoWngjGCoOsDo.roa (hash: viD+EdaDQpdhn8ySGbMtrRw2kQFtzdWhY2WYnHuwvTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:03:df:07:ba:44:e7:d3:a3:5a:51:69:43:0d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1527455ea7fce17cfd0431985258d13e06bfa735
        Validity
            Not Before: Dec  6 11:00:29 2025 GMT
            Not After : Dec  7 11:00:29 2025 GMT
        Subject: CN=5f3c4d0544a05945924d9386e90dc9383cf3de18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ef:de:4f:ac:86:12:82:b3:4a:3d:43:2f:31:
                    a4:53:ca:f1:60:1b:40:27:5a:ac:be:d0:10:56:0b:
                    39:f8:77:84:04:b3:1a:98:97:ea:8c:e4:82:d7:f9:
                    e4:48:4f:fa:38:98:50:38:c2:e0:f9:3a:4d:7d:14:
                    0c:34:49:c0:35:25:7a:de:ad:9b:7f:f4:9c:ef:fc:
                    e2:19:25:5c:92:a0:a6:e7:6a:40:92:55:06:2e:15:
                    18:54:bb:aa:48:f5:0a:3e:2d:1b:d4:24:ba:87:ef:
                    d9:49:40:e1:b6:b4:86:14:34:ce:87:4f:67:27:af:
                    b7:ea:cf:7e:3d:5a:65:d2:e7:9b:e5:fc:25:01:37:
                    c7:e2:b9:66:eb:69:23:26:5a:c2:63:5e:16:ee:8d:
                    a8:c8:c8:1e:54:32:01:17:72:57:fa:c8:5c:bd:ba:
                    81:e0:6c:8c:52:b6:4a:df:0b:2e:5b:e4:12:0a:20:
                    7e:78:25:a9:3b:3e:68:1a:aa:26:f8:a4:72:4e:df:
                    60:87:b6:32:45:f0:39:79:dd:cd:cd:05:ec:7f:82:
                    d5:79:94:94:ab:55:a5:4b:f5:90:4e:6e:9e:f2:94:
                    89:7c:2f:b5:79:cf:75:6f:b2:ed:ec:e5:26:7f:0b:
                    a5:54:6c:02:e1:84:98:08:f7:6a:f6:04:52:52:eb:
                    06:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3C:4D:05:44:A0:59:45:92:4D:93:86:E9:0D:C9:38:3C:F3:DE:18
            X509v3 Authority Key Identifier:
                keyid:15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:bc:fe:d8:41:d8:03:cb:90:d7:b4:c8:63:1c:fe:de:14:d8:
         38:ec:70:bc:de:aa:19:11:e4:72:b2:88:40:bf:ac:3e:5f:56:
         4b:32:d2:1a:d9:ac:fc:2d:7a:8c:f8:4c:35:9a:c5:ec:18:c1:
         cf:59:5b:57:81:81:ae:94:82:a5:d3:ce:e6:17:10:90:dc:1d:
         81:d1:42:75:1a:9f:49:78:ce:63:4e:4f:ad:fd:03:62:f0:82:
         fc:28:4f:e4:e6:f3:89:83:98:60:43:d3:60:ea:b4:7a:9b:aa:
         4f:9d:80:de:26:2c:3b:b5:88:a6:70:ef:76:2b:47:c7:86:22:
         00:a9:f3:03:40:11:58:c1:fd:b9:a3:06:89:de:b5:7a:ff:bf:
         20:aa:b8:df:d8:6e:f9:57:1f:4d:87:6a:db:e0:65:fd:ef:41:
         f2:ee:87:ea:70:33:bb:5d:be:40:1b:c2:7f:af:05:48:81:95:
         84:17:23:81:9b:6b:5f:85:56:25:34:71:88:82:d7:35:c8:e8:
         5e:62:6f:47:60:a0:79:1f:01:94:61:90:65:b8:21:b0:e8:52:
         b7:3e:4f:aa:37:50:0e:25:40:57:97:56:b3:ae:5f:45:2c:7f:
         f3:4a:7d:71:44:48:9c:3a:77:8a:b9:21:6c:03:eb:5d:5a:6a:
         5c:a0:9b:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzUgPfB7pE59OjWlFpQw2wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Mjc0NTVlYTdmY2UxN2NmZDA0MzE5ODUyNThkMTNlMDZi
ZmE3MzUwHhcNMjUxMjA2MTEwMDI5WhcNMjUxMjA3MTEwMDI5WjAzMTEwLwYDVQQD
Eyg1ZjNjNGQwNTQ0YTA1OTQ1OTI0ZDkzODZlOTBkYzkzODNjZjNkZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO/eT6yGEoKzSj1DLzGkU8rxYBtA
J1qsvtAQVgs5+HeEBLMamJfqjOSC1/nkSE/6OJhQOMLg+TpNfRQMNEnANSV63q2b
f/Sc7/ziGSVckqCm52pAklUGLhUYVLuqSPUKPi0b1CS6h+/ZSUDhtrSGFDTOh09n
J6+36s9+PVpl0ueb5fwlATfH4rlm62kjJlrCY14W7o2oyMgeVDIBF3JX+shcvbqB
4GyMUrZK3wsuW+QSCiB+eCWpOz5oGqom+KRyTt9gh7YyRfA5ed3NzQXsf4LVeZSU
q1WlS/WQTm6e8pSJfC+1ec91b7Lt7OUmfwulVGwC4YSYCPdq9gRSUusGzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF88TQVEoFlFkk2ThukNyTg8894YMB8GA1UdIwQY
MBaAFBUnRV6n/OF8/QQxmFJY0T4Gv6c1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlNkRlhxZjg0WHo5QkRHWVVsalJQZ2FfcHpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8yNGM0ZjYtMjFlZS00YjZiLWE5NDUt
OThmOGNjZDVkYjhkLzEvRlNkRlhxZjg0WHo5QkRHWVVsalJQZ2FfcHpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8yNGM0ZjYtMjFlZS00YjZiLWE5NDUtOThmOGNjZDVkYjhk
LzEvRlNkRlhxZjg0WHo5QkRHWVVsalJQZ2FfcHpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAebz+2EHY
A8uQ17TIYxz+3hTYOOxwvN6qGRHkcrKIQL+sPl9WSzLSGtms/C16jPhMNZrF7BjB
z1lbV4GBrpSCpdPO5hcQkNwdgdFCdRqfSXjOY05Prf0DYvCC/ChP5ObziYOYYEPT
YOq0epuqT52A3iYsO7WIpnDvditHx4YiAKnzA0ARWMH9uaMGid61ev+/IKq439hu
+VcfTYdq2+Bl/e9B8u6H6nAzu12+QBvCf68FSIGVhBcjgZtrX4VWJTRxiILXNcjo
XmJvR2CgeR8BlGGQZbghsOhStz5PqjdQDiVAV5dWs65fRSx/80p9cURInDp3irkh
bAPrXVpqXKCbCQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:00:35 2025 by rpki-client