This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft
File:                     H65TutIFt6PYV3Frsky_DVW_D2w.mft (raw, json)
Hash identifier:          DUk8Y4HEwSIPn7dp4cfNCNn4vIiUaGZ008WiUafrJ90=
Subject key identifier:   B8:AB:39:BD:5A:09:95:3A:A8:4E:EF:03:00:4D:E4:87:4A:49:B7:DF
Authority key identifier: 1F:AE:53:BA:D2:05:B7:A3:D8:57:71:6B:B2:4C:BF:0D:55:BF:0F:6C
Certificate issuer:       /CN=1fae53bad205b7a3d857716bb24cbf0d55bf0f6c
Certificate serial:       019AF31D6BE43F04FD43942EBDC9AEBDF6C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H65TutIFt6PYV3Frsky_DVW_D2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft
Manifest number:          0B17
Signing time:             Sat 06 Dec 2025 10:03:02 +0000
Manifest this update:     Sat 06 Dec 2025 10:03:02 +0000
Manifest next update:     Sun 07 Dec 2025 10:03:02 +0000
Files and hashes:         1: H65TutIFt6PYV3Frsky_DVW_D2w.crl (hash: hVm3g0ej7EAQDa6Ukj4t9kQh20qANLyU1SCozHzr26c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H65TutIFt6PYV3Frsky_DVW_D2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1d:6b:e4:3f:04:fd:43:94:2e:bd:c9:ae:bd:f6:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fae53bad205b7a3d857716bb24cbf0d55bf0f6c
        Validity
            Not Before: Dec  6 10:03:02 2025 GMT
            Not After : Dec  7 10:03:02 2025 GMT
        Subject: CN=b8ab39bd5a09953aa84eef03004de4874a49b7df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:56:56:5c:d1:8b:13:d4:4e:fb:2e:3e:05:d9:
                    68:26:27:18:f3:d1:5a:5a:8a:5e:d7:cf:22:33:16:
                    3a:43:80:1d:2f:98:cc:cf:43:3e:b5:d5:15:fb:e8:
                    f8:bf:88:dd:47:a6:14:cd:64:4a:0d:c0:46:91:f2:
                    11:07:95:6b:33:9b:cf:95:58:2c:f8:da:96:b3:2b:
                    78:62:9f:51:77:46:0b:e0:a7:2e:b6:ff:e3:bc:3c:
                    d6:29:88:e4:21:c4:39:c0:48:79:5c:2b:84:cb:39:
                    3a:b8:e6:4d:7b:a8:aa:a8:a6:40:04:b1:4d:ea:5f:
                    d8:03:ec:e3:9a:d5:8b:42:4f:37:26:75:d4:d4:b3:
                    1f:16:2b:32:f1:a9:8d:2b:92:c8:75:c0:38:e9:a3:
                    8d:4f:5d:70:8c:75:43:5f:ff:fa:10:a9:b5:dd:c5:
                    f8:34:84:a3:c7:41:c0:7e:da:3c:cc:d2:52:8f:ed:
                    c2:34:24:d3:9d:81:2a:5f:fd:bc:bf:18:f6:68:c9:
                    e8:69:23:56:7c:7c:29:7d:68:99:01:3d:f9:94:6d:
                    cf:1a:5b:68:07:b3:2a:b1:2a:03:4a:65:24:9a:1a:
                    d9:ca:8e:2d:6c:19:17:f4:86:1b:71:e8:36:5f:07:
                    49:e8:f6:20:78:f9:38:2e:c8:30:0c:a0:b7:00:07:
                    37:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AB:39:BD:5A:09:95:3A:A8:4E:EF:03:00:4D:E4:87:4A:49:B7:DF
            X509v3 Authority Key Identifier:
                keyid:1F:AE:53:BA:D2:05:B7:A3:D8:57:71:6B:B2:4C:BF:0D:55:BF:0F:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H65TutIFt6PYV3Frsky_DVW_D2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c2:5b:59:45:0e:cb:ca:0b:69:4e:56:8d:c4:82:3f:89:6a:
         19:0d:20:32:0f:9f:a9:f0:28:55:23:6d:7e:d5:1a:4a:68:11:
         b4:5e:a1:83:6e:f0:a4:f1:76:ec:52:52:bf:d6:e3:64:a2:17:
         75:14:67:14:36:c0:29:74:c5:ce:56:f6:8e:ed:e3:c4:08:2d:
         b4:96:d6:f4:a6:cd:3f:4d:fa:61:0d:f4:40:37:2f:e5:57:83:
         9a:8c:7c:f2:6e:36:ec:81:f0:3f:91:53:1a:18:5c:15:21:77:
         76:c7:9f:bb:44:76:bf:e2:11:92:10:0e:4e:1b:9f:63:e3:b1:
         dc:a0:1f:e5:6f:d4:75:35:67:47:de:8c:88:f9:2d:70:d9:4f:
         f7:14:10:86:48:de:bd:e4:02:c6:a9:bf:85:15:7e:00:ab:0d:
         0b:db:c7:9c:31:10:bc:86:78:28:4f:50:45:10:cb:1f:b3:cc:
         6a:0a:62:18:cd:c1:70:3a:be:4f:6a:5d:18:d3:ed:77:39:13:
         8d:29:6e:99:1d:43:22:03:ad:7b:31:0e:2c:0e:ce:f0:17:d9:
         43:f0:5b:57:77:49:18:f8:55:68:dc:c3:c4:90:c8:01:12:b9:
         93:0e:15:53:eb:90:6c:a4:7e:d6:30:7b:d6:e1:eb:dc:73:1e:
         78:f9:61:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:48:22 2025 by rpki-client