This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
File:                     fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft (raw, json)
Hash identifier:          0JG32L4Tydk9Uz4R2P4/wXWp9JO+L/Nj4ZkyUYscwIY=
Subject key identifier:   F1:5C:66:C5:88:51:1D:69:F9:A6:A1:50:B4:AE:F0:03:26:17:79:C4
Authority key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
Certificate issuer:       /CN=7cab39c6e0412235efc7877a9f737899313ed15e
Certificate serial:       019AF61CEB3CDFBD86730AC3B27E625D09DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
Manifest number:          027D
Signing time:             Sun 07 Dec 2025 00:01:21 +0000
Manifest this update:     Sun 07 Dec 2025 00:01:21 +0000
Manifest next update:     Mon 08 Dec 2025 00:01:21 +0000
Files and hashes:         1: S-8iAviLA5Jol3aOuoC8YtshVjI.roa (hash: nPTWtD2pyVs+rkGfz9T+B81uYYTcqsLuoc9G5yhStYs=)
                          2: TceaNjn9IF5oTmJkTl9-AAXNV44.roa (hash: qomOIj4ZRrJ4B8QNZahwO894PoNKgI7449eoXim1hno=)
                          3: fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl (hash: 5vNXGx9Y09BUhv9mTuBreE4oY8PSHMCY5gxTZxqq6tA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:1c:eb:3c:df:bd:86:73:0a:c3:b2:7e:62:5d:09:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cab39c6e0412235efc7877a9f737899313ed15e
        Validity
            Not Before: Dec  7 00:01:21 2025 GMT
            Not After : Dec  8 00:01:21 2025 GMT
        Subject: CN=f15c66c588511d69f9a6a150b4aef003261779c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ce:84:01:4d:7d:78:74:b2:2e:df:cb:bc:55:
                    17:59:f7:21:6b:2a:ca:1f:1f:d8:68:96:b2:25:83:
                    41:8b:dc:9b:ba:b1:16:ba:28:e1:fb:67:b1:32:99:
                    e7:29:bb:2b:90:78:cd:16:ae:8d:00:1c:71:78:a2:
                    1e:43:11:5a:d5:47:a5:61:c4:53:52:59:fc:48:66:
                    df:58:59:c3:07:f3:ac:e0:ad:30:ba:70:43:ad:c1:
                    0f:68:e6:79:c9:43:2b:d4:6b:94:8b:38:db:3e:75:
                    71:87:b5:61:51:0f:cd:36:4e:19:fd:44:65:72:e3:
                    81:9d:36:33:b6:d5:83:2f:b2:5e:fb:1f:94:8f:74:
                    5f:fa:54:c9:06:fd:2f:a0:18:b2:e4:98:17:fd:c7:
                    53:15:2e:f5:cf:69:30:7e:0a:f8:c1:32:a8:8e:e7:
                    69:65:37:9d:e8:f4:c6:63:e5:bd:87:18:ca:5b:0a:
                    63:c0:c7:07:35:bd:da:af:f6:84:9f:cd:5e:d4:b2:
                    0a:90:01:bc:83:72:b3:dd:71:e5:27:d1:b1:10:75:
                    68:00:81:e0:32:e3:40:ac:52:17:e6:e9:33:66:bd:
                    f1:aa:be:fc:0e:df:72:70:85:a1:55:61:63:64:fe:
                    01:26:4f:db:6d:72:d1:ea:56:c1:22:a4:cc:64:e3:
                    fd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5C:66:C5:88:51:1D:69:F9:A6:A1:50:B4:AE:F0:03:26:17:79:C4
            X509v3 Authority Key Identifier:
                keyid:7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:de:19:9d:ab:e8:d5:22:fd:26:c5:4d:6a:2d:34:48:8d:b2:
         4b:ce:ef:b1:44:9c:a0:0c:4b:b5:c2:67:e7:af:dd:00:92:1e:
         53:9e:35:0d:60:c7:a2:df:b6:4f:21:03:47:19:77:2e:8f:d1:
         90:e5:39:81:82:f2:5f:c3:2e:67:56:86:80:64:4f:56:05:2c:
         b5:b8:61:12:ed:3f:ed:10:6c:73:46:16:07:66:c8:b1:77:2a:
         87:5a:9b:21:99:ba:63:e0:da:73:af:2d:03:2c:40:d3:95:07:
         9d:ef:bd:62:8e:f8:8d:5b:4f:d8:8b:c5:ef:49:65:1f:cd:94:
         ea:dc:84:70:50:e6:51:c4:47:a5:13:32:14:22:2e:2e:de:73:
         c8:82:9f:ad:17:9c:c0:aa:df:7a:17:b7:44:01:22:b3:3c:b0:
         32:7b:6d:80:0e:10:f0:b4:66:0b:87:12:6a:38:ba:b4:73:e9:
         cc:9f:fb:78:af:2f:3e:de:64:ed:05:e3:06:19:62:ad:b4:e7:
         ee:3d:bf:33:45:a3:09:33:78:1c:e1:f7:62:99:3c:d8:5c:94:
         09:92:68:4b:15:74:34:34:33:67:64:60:64:09:17:df:df:e7:
         32:90:60:55:5f:57:90:60:6c:69:21:db:2c:f9:ef:59:08:1c:
         db:8c:65:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:35:48 2025 by rpki-client