This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
File:                     femPSOmIeQ0OB5NTeUG0E9LmAwY.mft (raw, json)
Hash identifier:          4WKmQrkhFEAQwXh/bIiHja3ehMHOWAekhTS5GhrgrMw=
Subject key identifier:   1F:21:62:2A:D7:C7:37:2F:61:3B:E5:36:96:C6:62:AC:A7:97:94:9A
Authority key identifier: 7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
Certificate issuer:       /CN=7de98f48e988790d0e0793537941b413d2e60306
Certificate serial:       019AF276B264CB645B11AC5785BF1B442144
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
Manifest number:          1767
Signing time:             Sat 06 Dec 2025 07:00:56 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:56 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:56 +0000
Files and hashes:         1: L1sOGUpC5vf81IjAWo9yjqNWdoc.roa (hash: qAhDSU9NhG7HL0VsMDn5fszVhTOJb2FN5MRmMe3Ne7s=)
                          2: VGUAWcdE_uWGBzoEXuUWxSaeofE.roa (hash: ldYqKdQLO9amLNP7UTQrP4DX3OqZoopvjfltJwygHwg=)
                          3: akdoIFbGGphPsOua6vOPfJFx_n8.roa (hash: r5YdXtt32oyVRXJKLiujx5qPKEB9WTaTcVsGTt7qfvg=)
                          4: femPSOmIeQ0OB5NTeUG0E9LmAwY.crl (hash: zeF/YFfyFOAO2od7x2UWfQ/z788UZa5K+oaxp54oAvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:b2:64:cb:64:5b:11:ac:57:85:bf:1b:44:21:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7de98f48e988790d0e0793537941b413d2e60306
        Validity
            Not Before: Dec  6 07:00:56 2025 GMT
            Not After : Dec  7 07:00:56 2025 GMT
        Subject: CN=1f21622ad7c7372f613be53696c662aca797949a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cf:e5:68:05:8a:0d:c0:be:24:36:74:8b:a0:
                    28:46:98:80:e5:d7:34:e5:67:73:78:35:c5:50:14:
                    56:2a:b2:80:02:00:aa:98:41:94:d1:70:70:da:94:
                    2c:55:98:f3:9a:dd:5b:fc:50:9d:86:6a:97:0b:80:
                    c5:8d:59:82:9c:9a:58:3c:d1:85:fc:ee:4f:77:6f:
                    23:6a:89:eb:a6:57:63:1d:12:65:52:69:ff:46:18:
                    87:36:e1:55:ea:5a:8f:a2:fd:a6:34:4a:93:8a:c7:
                    30:28:17:69:ac:48:71:df:f8:d4:9a:08:d0:6d:0f:
                    55:da:fd:1d:a0:87:a5:50:06:7e:c0:40:96:8a:8e:
                    f6:ac:35:c5:b9:57:4e:23:a1:c2:2a:58:81:dc:bf:
                    b6:95:3e:8b:5c:5f:ee:1b:0f:04:b7:6a:58:0e:ab:
                    5b:91:d0:1d:bd:17:77:a8:e3:d8:1b:b0:54:05:f0:
                    62:a3:d4:b8:68:7c:92:0d:a9:aa:87:e3:1e:8d:14:
                    47:82:a8:86:78:89:64:8b:31:f5:48:2a:11:40:ea:
                    35:2b:d1:44:09:12:de:9e:2d:a6:ff:ce:0d:b6:6a:
                    51:4d:95:06:2e:9a:60:c3:99:04:82:ec:0c:d1:20:
                    0d:60:ee:d7:fe:01:a8:1b:6f:e6:71:7d:e3:00:31:
                    bc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:21:62:2A:D7:C7:37:2F:61:3B:E5:36:96:C6:62:AC:A7:97:94:9A
            X509v3 Authority Key Identifier:
                keyid:7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:4e:17:5c:18:16:b2:37:71:00:68:fe:f1:69:60:f8:a2:90:
         6b:c7:e2:7f:a9:d0:21:10:ed:c7:87:02:1e:51:4b:f4:3e:e0:
         10:24:24:2f:5b:3a:bc:a0:09:c8:e8:14:32:36:2e:7d:20:fd:
         a2:ad:cb:dc:88:4c:e0:3d:d0:2a:dd:99:c0:0d:72:06:d5:86:
         9d:d8:b5:54:0e:14:f4:b4:38:5e:d7:85:31:de:1a:c9:61:0a:
         c9:d3:f1:bf:af:4e:3a:09:02:d6:78:d6:8c:ee:89:4b:46:a5:
         dd:37:4b:a5:e2:a0:ca:e3:db:c2:fb:a1:da:86:c5:26:4e:c9:
         38:d3:79:31:b9:ff:15:e0:86:40:a6:c6:49:b0:a5:0f:c9:42:
         a6:4a:9d:d9:a1:bc:b2:ae:1b:d1:68:4c:94:6a:b0:79:99:5b:
         29:c8:c3:d3:d9:50:aa:71:e8:0a:0e:8e:db:e0:e1:43:2d:ec:
         19:3d:94:d1:d5:80:9c:99:1a:f5:2c:a9:33:9e:85:7b:98:a5:
         05:85:91:55:da:91:dc:4b:b0:85:ea:dd:a3:05:a4:47:91:e2:
         6e:62:10:eb:57:e6:22:c7:52:ec:d5:57:eb:7d:2c:f7:a7:04:
         55:3d:3f:31:66:08:0f:30:ee:b4:ed:c7:b7:e1:a3:e4:52:e1:
         92:df:22:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrydrJky2RbEaxXhb8bRCFEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZTk4ZjQ4ZTk4ODc5MGQwZTA3OTM1Mzc5NDFiNDEzZDJl
NjAzMDYwHhcNMjUxMjA2MDcwMDU2WhcNMjUxMjA3MDcwMDU2WjAzMTEwLwYDVQQD
EygxZjIxNjIyYWQ3YzczNzJmNjEzYmU1MzY5NmM2NjJhY2E3OTc5NDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM/laAWKDcC+JDZ0i6AoRpiA5dc0
5WdzeDXFUBRWKrKAAgCqmEGU0XBw2pQsVZjzmt1b/FCdhmqXC4DFjVmCnJpYPNGF
/O5Pd28jaonrpldjHRJlUmn/RhiHNuFV6lqPov2mNEqTiscwKBdprEhx3/jUmgjQ
bQ9V2v0doIelUAZ+wECWio72rDXFuVdOI6HCKliB3L+2lT6LXF/uGw8Et2pYDqtb
kdAdvRd3qOPYG7BUBfBio9S4aHySDamqh+MejRRHgqiGeIlkizH1SCoRQOo1K9FE
CRLeni2m/84NtmpRTZUGLppgw5kEguwM0SANYO7X/gGoG2/mcX3jADG87QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8hYirXxzcvYTvlNpbGYqynl5SaMB8GA1UdIwQY
MBaAFH3pj0jpiHkNDgeTU3lBtBPS5gMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmVtUFNPbUllUTBPQjVOVGVVRzBFOUxtQXdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jMGZjMGEtMTVkNC00NmNjLWE4Yjkt
NDc2MzJjYjViODU0LzEvZmVtUFNPbUllUTBPQjVOVGVVRzBFOUxtQXdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jMGZjMGEtMTVkNC00NmNjLWE4YjktNDc2MzJjYjViODU0
LzEvZmVtUFNPbUllUTBPQjVOVGVVRzBFOUxtQXdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbU4XXBgW
sjdxAGj+8Wlg+KKQa8fif6nQIRDtx4cCHlFL9D7gECQkL1s6vKAJyOgUMjYufSD9
oq3L3IhM4D3QKt2ZwA1yBtWGndi1VA4U9LQ4XteFMd4ayWEKydPxv69OOgkC1njW
jO6JS0al3TdLpeKgyuPbwvuh2obFJk7JONN5Mbn/FeCGQKbGSbClD8lCpkqd2aG8
sq4b0WhMlGqweZlbKcjD09lQqnHoCg6O2+DhQy3sGT2U0dWAnJka9SypM56Fe5il
BYWRVdqR3EuwherdowWkR5HibmIQ61fmIsdS7NVX630s96cEVT0/MWYIDzDutO3H
t+Gj5FLhkt8igw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:11:29 2025 by rpki-client