This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
File:                     FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft (raw, json)
Hash identifier:          UH3T3FyFiJ1AISpw9hEgCwUw5bvvYJVgGEIZ8x8OW1A=
Subject key identifier:   17:7D:D1:0E:59:D2:6D:83:74:DD:75:A7:F6:FF:BE:7F:73:8C:D6:0E
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Certificate issuer:       /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial:       019AF31C457D971A2A0DE3EE09AA4C473305
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
Manifest number:          1771
Signing time:             Sat 06 Dec 2025 10:01:47 +0000
Manifest this update:     Sat 06 Dec 2025 10:01:47 +0000
Manifest next update:     Sun 07 Dec 2025 10:01:47 +0000
Files and hashes:         1: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl (hash: +UFHgnqO7i85LSsoeqK7x1Cqx4R41J4IshQMHW6QK5I=)
                          2: n5YvfZ8ZMXvjamIBGQSH9xKjyIY.roa (hash: Lo/GWPSy2YW284HgZMglNnHmZZWcBF3OIdIQ/0+zNxk=)
                          3: r4X2HvAwh5ygol1cL2nGNDVz3U4.roa (hash: 7aCXdpb3SzbFP3HJ9KQNb5y78LcqzI5vEIV6FBttc2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:45:7d:97:1a:2a:0d:e3:ee:09:aa:4c:47:33:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
        Validity
            Not Before: Dec  6 10:01:47 2025 GMT
            Not After : Dec  7 10:01:47 2025 GMT
        Subject: CN=177dd10e59d26d8374dd75a7f6ffbe7f738cd60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b5:db:5f:20:cb:48:a6:04:43:76:6e:8c:38:
                    aa:e4:06:c9:65:ff:ef:6a:a4:24:ea:4c:56:de:75:
                    7e:79:cd:1a:8c:88:ab:a4:6f:d9:8b:f2:cd:64:c7:
                    4b:80:6b:f9:1b:e7:5b:1d:5e:18:0d:f6:49:4a:88:
                    dd:7a:69:4d:cf:a0:18:63:e4:08:7c:ee:95:ac:b8:
                    1b:c9:eb:56:02:4d:30:68:8c:26:69:74:3b:78:f0:
                    9d:61:4c:fe:b9:f2:d9:53:68:f6:4e:cc:5c:6e:f5:
                    84:12:d1:a8:6e:4b:89:92:25:43:7e:b5:fb:28:f8:
                    ba:bc:3d:a6:fc:fc:91:37:77:a8:0e:41:ae:37:49:
                    fd:35:13:f9:2c:15:d0:24:1e:c0:9e:40:08:42:73:
                    31:ae:c8:b4:45:c0:5b:37:7c:5b:93:a7:48:52:90:
                    f1:49:cd:8e:cb:67:5a:21:a5:5d:89:dd:d1:a9:3d:
                    e2:ca:55:e8:ab:21:3c:7b:24:7e:11:64:cb:3a:40:
                    5c:a9:28:48:46:bc:c7:43:db:e8:83:da:8e:af:ed:
                    0b:97:cb:4c:49:e7:15:e2:9d:10:33:57:f8:b9:87:
                    fe:c0:03:fc:df:3e:b3:c4:e0:fd:dc:19:f2:54:a8:
                    ed:23:42:b4:7a:c3:08:08:82:a1:7f:7d:80:f1:18:
                    4b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7D:D1:0E:59:D2:6D:83:74:DD:75:A7:F6:FF:BE:7F:73:8C:D6:0E
            X509v3 Authority Key Identifier:
                keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:c0:72:5b:f8:72:63:41:7f:27:01:b9:12:83:2e:75:68:e6:
         d9:6c:1b:51:93:f0:cb:48:2f:e4:ac:43:4a:ca:21:ef:70:fe:
         b4:3f:51:8e:9d:64:97:31:dc:b7:b4:05:c7:33:ce:1d:c1:49:
         c4:d9:7b:6b:1e:2b:80:33:d6:7b:d1:e3:9d:dd:b7:a3:18:80:
         73:19:88:91:4f:b4:71:d3:dd:fb:8b:c6:6d:98:c6:ce:27:9d:
         f3:21:25:05:03:93:a8:24:e7:fd:bf:21:c0:69:30:9a:e2:4b:
         5b:fa:a7:a7:63:69:00:3e:4f:71:e0:8e:47:56:49:ad:cf:37:
         6e:5d:f7:05:22:ca:82:69:e2:07:47:ad:3d:b8:ec:ea:35:60:
         14:68:b6:40:1b:51:aa:24:eb:21:3d:fd:5f:02:5e:c8:f6:ad:
         df:19:91:67:d2:df:3c:f9:c4:de:40:91:58:8a:5c:f8:a6:15:
         44:97:60:fe:ce:4a:88:f0:61:11:fd:b9:be:85:62:2b:dc:88:
         37:c7:2a:f4:0d:3a:8f:85:7f:b0:d7:f8:fd:ac:38:47:f2:63:
         f8:50:bc:12:c5:70:7e:06:be:8a:b1:26:e5:3b:5e:3b:03:ad:
         50:5a:c0:e0:96:ea:b4:a5:e6:e9:d1:1a:11:66:eb:91:59:8c:
         38:e7:f6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:43:09 2025 by rpki-client