This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
File:                     FwSlHYT7ptD-IYrtypWolNzOHNc.mft (raw, json)
Hash identifier:          TQfGrrvA2W7XykBV3wCOQE2AruWBmX9qZKJfEvvOt6E=
Subject key identifier:   31:76:5D:B5:BA:5C:C8:50:24:91:68:B5:99:DC:90:31:B9:C1:73:ED
Authority key identifier: 17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
Certificate issuer:       /CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Certificate serial:       019AF19B0B409AA576FD4073DB3C0C640A34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
Manifest number:          1505
Signing time:             Sat 06 Dec 2025 03:01:01 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:01 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:01 +0000
Files and hashes:         1: FwSlHYT7ptD-IYrtypWolNzOHNc.crl (hash: u7YWq9tZFBxm+MvfybvFXxM3pDr3OU+h+D16o/JNZ1E=)
                          2: vzORurH_cWu4s93Hg1XT5ltdLe0.roa (hash: lCzy3hcZEBhDFnviizG4eyjDlw5OJ8Xly0F6Emk8/ps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:0b:40:9a:a5:76:fd:40:73:db:3c:0c:64:0a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
        Validity
            Not Before: Dec  6 03:01:01 2025 GMT
            Not After : Dec  7 03:01:01 2025 GMT
        Subject: CN=31765db5ba5cc850249168b599dc9031b9c173ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a4:6c:e4:85:5a:91:2c:e5:30:6e:4e:b5:12:
                    a7:01:87:f8:17:d6:bd:47:b2:23:01:79:55:e3:10:
                    8b:45:cf:67:ad:fa:30:e4:b5:a2:75:a8:c8:6e:21:
                    00:c1:3d:7d:8c:d5:d1:c5:fe:34:d7:ce:84:8b:10:
                    08:74:3d:74:c2:54:ab:a7:f2:ea:a1:b5:46:41:a2:
                    39:ee:4a:d2:99:4c:33:e4:58:a0:06:1d:48:75:f3:
                    45:ed:f7:cd:25:69:e1:42:8c:c7:8d:68:d3:d9:3a:
                    fd:77:42:61:38:ff:27:d4:a2:50:ba:5b:69:36:9a:
                    49:68:83:e0:13:19:6c:1a:13:c4:76:5e:81:23:a2:
                    5f:22:f3:13:30:d1:e9:68:b4:a0:83:48:37:ee:19:
                    de:f7:5f:0d:80:64:51:15:f1:02:15:98:4f:55:2c:
                    33:20:03:20:53:d7:76:3d:f1:cc:11:56:bb:6b:b4:
                    69:e1:f1:f0:a2:4e:5f:a3:aa:c0:e8:e9:82:01:35:
                    8b:3b:42:ce:64:86:0f:26:54:e8:84:a0:a8:77:db:
                    c2:31:78:5a:37:1a:4b:b5:56:db:c0:dd:5a:4a:de:
                    93:28:78:fa:9c:33:39:ff:0f:58:27:2e:8b:f7:2c:
                    2d:a1:15:3e:6e:8c:b7:c1:c4:8f:bf:78:2e:88:40:
                    7f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:76:5D:B5:BA:5C:C8:50:24:91:68:B5:99:DC:90:31:B9:C1:73:ED
            X509v3 Authority Key Identifier:
                keyid:17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ef:1e:ba:88:9f:14:34:ab:b0:03:79:3a:48:1f:65:b8:ea:
         48:0a:56:e8:80:58:1f:a8:f7:09:a5:50:4f:c2:df:74:c3:05:
         ef:c7:83:59:6c:83:44:5f:44:dd:83:e7:7b:a7:4f:dd:e9:74:
         01:51:f3:43:8b:2f:1d:9a:1f:f4:5c:ef:57:f6:4b:ee:4c:58:
         b1:1d:d6:09:d9:56:12:b5:15:9a:b8:ae:7a:f2:9a:23:63:ca:
         be:03:73:2d:9a:05:72:c4:ce:16:93:c4:2b:98:2a:f9:d4:a9:
         0b:f7:f1:10:c6:cf:81:84:6b:5c:30:8a:8b:ef:42:cf:d0:99:
         af:15:26:c2:0e:19:0d:7d:46:e7:ad:d1:bb:79:a3:a5:9d:b2:
         af:77:9b:cc:94:be:11:8c:03:23:6b:e0:50:2c:0b:e1:d4:bc:
         4b:75:d3:7d:69:dd:46:90:b0:e6:88:3c:48:df:f1:29:9c:0f:
         f9:85:05:52:38:1f:be:1e:07:d7:86:db:ae:66:e7:b7:a3:b6:
         04:b3:1b:47:33:f9:d7:30:42:db:83:a5:c1:05:2c:56:41:ba:
         ef:f1:8c:a8:ee:c2:95:6f:f3:a6:9a:15:9c:1a:f3:7e:d3:b2:
         3c:5b:74:c1:eb:0f:21:31:b4:9a:4c:5c:ac:5e:4d:a8:f6:40:
         01:95:43:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:24:27 2025 by rpki-client