This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
File:                     F6yAsO71cIxkOQVF0acTkCRLbRs.mft (raw, json)
Hash identifier:          rjlJ0hTwQ4C03hs04XqXdz+MN3THv/GAcKAW5nJE+vA=
Subject key identifier:   42:0F:AA:EB:73:E8:27:08:5C:71:A7:3B:D0:20:09:DA:E2:3B:3C:87
Authority key identifier: 17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
Certificate issuer:       /CN=17ac80b0eef5708c64390545d1a71390244b6d1b
Certificate serial:       019AF2766943263B3D31B96C61C2F7297701
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
Manifest number:          148A
Signing time:             Sat 06 Dec 2025 07:00:37 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:37 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:37 +0000
Files and hashes:         1: F6yAsO71cIxkOQVF0acTkCRLbRs.crl (hash: ZXB6kRyhlrdT5rHbCSZ52ee90Pvw3Kg267pht/FdKzY=)
                          2: zSUjlVA_3mzAMpyrhKZAaPLaNJs.roa (hash: 72zL3nwgCvbu+myGvWOjXCnDMo56NxzjVOkIDgx8eQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:69:43:26:3b:3d:31:b9:6c:61:c2:f7:29:77:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ac80b0eef5708c64390545d1a71390244b6d1b
        Validity
            Not Before: Dec  6 07:00:37 2025 GMT
            Not After : Dec  7 07:00:37 2025 GMT
        Subject: CN=420faaeb73e827085c71a73bd02009dae23b3c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5d:d4:9b:a3:5d:52:fe:ef:03:d3:2c:0c:95:
                    a1:bb:c1:1c:4a:55:cf:0a:f7:fc:a9:3b:0f:64:a6:
                    41:f2:81:a8:05:48:19:5c:85:18:a4:9d:98:32:bf:
                    53:b9:c5:13:02:33:6a:0b:a4:88:e0:19:49:95:12:
                    05:61:c6:4f:44:a8:b1:f9:b0:bf:8a:ce:35:90:76:
                    9c:fd:86:01:9d:6c:b8:88:a4:f7:1c:61:52:09:93:
                    62:2f:73:0e:9d:65:e9:46:16:58:56:59:2f:82:84:
                    51:04:9f:cd:2f:2d:53:0b:0e:38:2d:8d:ac:4c:94:
                    af:c1:d0:24:d8:fa:ae:38:33:db:4c:c8:62:af:8b:
                    42:15:24:27:3a:fd:d2:5e:e0:e5:86:59:67:53:64:
                    92:c7:02:fe:24:4d:e2:cc:2d:3c:2a:fe:b8:53:55:
                    48:d9:3e:47:69:4e:37:34:de:5f:ee:1f:7c:52:4b:
                    e9:ce:58:58:a6:b9:a3:d1:cd:3a:5f:88:96:f8:5b:
                    c8:2c:f9:4f:c3:a1:6f:d5:fb:31:05:52:21:ca:e6:
                    a9:73:98:05:e9:64:93:16:dc:8c:fc:13:c9:58:fe:
                    a0:2e:ad:88:07:36:91:bc:c1:15:0d:51:4e:fe:e4:
                    ef:f4:32:55:1e:82:9f:1c:39:b5:67:0d:fb:4d:04:
                    12:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0F:AA:EB:73:E8:27:08:5C:71:A7:3B:D0:20:09:DA:E2:3B:3C:87
            X509v3 Authority Key Identifier:
                keyid:17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:a6:ba:48:9d:de:c0:9a:6f:50:e8:da:94:56:c3:8c:f4:7d:
         3a:ff:2c:ac:a0:58:e7:aa:51:da:a9:bf:7d:cf:52:96:0a:ca:
         c7:97:97:95:43:cd:0f:6d:6c:12:e3:50:a0:ab:51:6c:2b:69:
         b7:35:88:4e:d2:2f:ef:85:7a:66:f2:aa:21:3f:0f:cd:9a:1d:
         50:ef:67:b0:8b:e6:e7:67:7c:9b:cf:41:9a:76:cf:35:c4:2d:
         a9:91:7d:86:5f:a4:49:16:96:4c:92:5b:99:5f:29:d1:5f:ca:
         67:4a:31:c0:df:ba:06:46:c5:97:d9:5a:95:56:20:3a:96:00:
         f5:df:08:3c:67:43:aa:70:a7:21:6d:a5:e4:2d:17:0b:f8:63:
         8c:b2:ac:d1:79:eb:99:b0:d1:d7:94:79:8c:9b:c2:ad:34:45:
         fc:59:5f:09:c0:ef:2f:52:b8:ad:1f:8a:0a:b7:d3:ae:dc:6d:
         ff:6a:bc:4c:d9:de:cc:b7:62:db:d4:bc:0e:c4:39:ab:3c:9e:
         57:48:cb:35:2c:89:57:20:57:16:0c:f9:71:cf:da:77:3c:7b:
         73:3c:17:f2:57:be:17:30:2b:81:f8:c9:b8:f5:3b:67:50:ac:
         78:a6:84:95:1b:83:03:12:87:ee:9e:28:61:3a:99:6a:63:1c:
         b0:d7:7b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:43:52 2025 by rpki-client