This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
File:                     fusK7GOUn0ElxzqmF36gtyHVJ7s.mft (raw, json)
Hash identifier:          f5327sjRaUf+LtU/aJU1pOEQZZMO235/l8zp4efOplc=
Subject key identifier:   D9:F9:FF:5B:F2:C8:1C:54:C5:37:99:7D:86:35:87:1E:FD:B3:A9:78
Authority key identifier: 7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
Certificate issuer:       /CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Certificate serial:       019AF38A154FA04F1BDC2DD61773AE4D018F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
Manifest number:          0EC1
Signing time:             Sat 06 Dec 2025 12:01:44 +0000
Manifest this update:     Sat 06 Dec 2025 12:01:44 +0000
Manifest next update:     Sun 07 Dec 2025 12:01:44 +0000
Files and hashes:         1: cB6_dqDkGm0horqNuxQyDYUnIqU.roa (hash: q3CLYq9eWKAdWNRwww5i4XqHOK10EWh8bmYx4jG625g=)
                          2: dvkQi7LJcacPEnavAtPM4pCT8P4.roa (hash: yFRSaO/fFZoaoBkddBRpfu8JA7wvlMaSX8s3o33YjCY=)
                          3: fusK7GOUn0ElxzqmF36gtyHVJ7s.crl (hash: XSiDEejnBwyXJjUDgEQScaGx9YCGdYTHflIrpLNB2wk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:8a:15:4f:a0:4f:1b:dc:2d:d6:17:73:ae:4d:01:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
        Validity
            Not Before: Dec  6 12:01:44 2025 GMT
            Not After : Dec  7 12:01:44 2025 GMT
        Subject: CN=d9f9ff5bf2c81c54c537997d8635871efdb3a978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:01:7b:fc:ca:33:b7:14:50:78:62:2e:90:45:
                    d4:0d:4c:13:a8:6e:20:05:a9:17:9f:29:05:65:b3:
                    b9:83:02:93:bb:49:ff:65:61:a6:81:ef:51:4f:7e:
                    5b:b7:b2:08:39:52:11:35:7d:fd:5a:f8:4c:4d:6d:
                    c8:a9:d4:0c:9f:6d:4b:ba:14:e0:3e:51:b2:89:d8:
                    10:f5:d9:38:63:fc:e0:57:46:21:9f:8a:c3:9a:c2:
                    e3:21:5d:ca:dc:c1:cd:d7:1e:66:bd:39:97:ae:50:
                    f2:db:a0:af:43:0f:af:7d:a9:e3:eb:33:e1:20:34:
                    54:a6:81:06:d4:39:1a:11:19:8c:a0:ae:15:5d:4e:
                    88:8a:cb:aa:f5:62:87:ad:64:1c:53:93:62:85:7b:
                    7b:ac:07:67:e9:8f:78:9f:63:08:eb:a2:cd:a9:4b:
                    bc:0e:50:52:69:7b:af:d9:86:ae:18:ff:f3:89:9f:
                    f8:a1:1b:3a:14:10:cd:25:36:53:9c:f5:e0:fc:0d:
                    ee:db:9a:a3:e3:c5:7e:35:d0:22:85:a1:16:c7:c8:
                    88:34:87:e6:15:85:62:26:2a:6f:0b:d0:e2:e0:0d:
                    5b:3f:56:3a:c2:b7:26:c8:b4:89:07:6a:c7:8f:07:
                    1c:52:a1:80:9c:33:7c:df:62:ff:9c:c1:1c:8c:71:
                    82:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F9:FF:5B:F2:C8:1C:54:C5:37:99:7D:86:35:87:1E:FD:B3:A9:78
            X509v3 Authority Key Identifier:
                keyid:7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:60:d6:ab:50:a2:5e:b3:11:ce:14:2f:62:46:6b:88:c6:a4:
         32:99:9e:1f:14:45:d8:92:68:73:8c:40:23:5a:dd:30:69:b6:
         cc:7d:e4:5f:0b:78:a0:5a:83:e7:c7:21:e6:e2:79:17:34:1b:
         e2:ba:99:fd:b4:e0:b4:87:1c:46:3b:e8:40:e9:6a:a1:b8:ee:
         4e:9e:2b:d1:d0:e5:b4:5a:ce:21:58:6f:48:55:5b:d4:05:8a:
         2f:50:8d:a6:5b:6e:f9:db:69:5e:ea:49:f2:92:a3:30:71:f8:
         44:7f:8e:41:c2:53:25:3c:a0:23:15:2f:7d:cf:68:af:b8:68:
         9e:f3:a3:07:3b:bc:27:d4:88:7d:54:f7:c0:14:30:22:35:bf:
         63:d3:1a:c6:be:8d:34:94:7b:7c:45:4a:9f:51:85:2e:40:b3:
         41:09:49:ed:49:60:a8:a0:60:f0:1e:3c:cf:a8:b9:55:f9:bf:
         85:3a:91:94:1c:0c:ce:96:a1:c7:ef:04:08:ec:13:5b:ac:cc:
         61:27:b3:12:6d:4a:77:0e:7c:ec:21:37:6c:81:41:12:1c:c5:
         ef:30:29:f5:a2:62:37:ad:47:ed:c0:e0:f1:e8:50:08:05:d7:
         1c:68:30:6d:51:e9:28:ac:fc:3e:d6:68:b6:92:86:99:84:04:
         77:53:fd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:45:59 2025 by rpki-client