This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
File:                     FcyIDwoSx7lPcdmy5bAopw0fo0o.mft (raw, json)
Hash identifier:          PRWU+He9L7vziw+W2WeJ29T0qVMDBLQ761dU6F/Ruc0=
Subject key identifier:   0D:84:8A:37:EF:0E:EE:B3:B2:67:A9:D7:FD:8D:0D:6F:ED:97:3B:CD
Authority key identifier: 15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
Certificate issuer:       /CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Certificate serial:       019AF42E050CBE589CAF5CD155D4242959B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
Manifest number:          1769
Signing time:             Sat 06 Dec 2025 15:00:47 +0000
Manifest this update:     Sat 06 Dec 2025 15:00:47 +0000
Manifest next update:     Sun 07 Dec 2025 15:00:47 +0000
Files and hashes:         1: FcyIDwoSx7lPcdmy5bAopw0fo0o.crl (hash: hfvRgb9miUeO7CuYlo/C/6ACz92MesJZZEMK3stqoZw=)
                          2: kc-ZCrpFtG9x51LpF4W3iw7kDzs.roa (hash: aN11v2IUXg+LXUfyuCNuVklkgeIw5ckCn/DmdMCJWXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:2e:05:0c:be:58:9c:af:5c:d1:55:d4:24:29:59:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
        Validity
            Not Before: Dec  6 15:00:47 2025 GMT
            Not After : Dec  7 15:00:47 2025 GMT
        Subject: CN=0d848a37ef0eeeb3b267a9d7fd8d0d6fed973bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bb:1d:9c:35:53:b5:44:56:58:91:da:c5:a8:
                    05:29:d3:66:0a:07:de:47:e7:89:a8:54:1c:76:c6:
                    d1:55:7e:54:50:02:70:d7:a8:bc:b3:77:96:3f:40:
                    3d:0e:ef:49:44:38:ad:ae:df:a0:4b:f6:d3:b0:40:
                    12:2b:0d:c1:2e:e2:d0:a3:da:06:90:b3:47:07:bb:
                    b9:19:f6:f0:22:00:69:c0:7a:b7:34:e4:91:81:4d:
                    82:2c:5e:ec:38:1b:d6:c7:a7:35:f7:c2:53:1e:78:
                    49:c6:d3:cb:ac:e2:e5:cc:4f:a5:4d:24:02:d6:e2:
                    f7:16:82:9f:a6:0c:3e:f9:de:22:77:5c:2d:c0:13:
                    c3:d1:c6:83:8d:c0:d8:05:f4:23:0b:5d:56:61:87:
                    90:7f:2d:50:ae:bb:4a:45:f6:2f:fb:b0:64:a0:24:
                    a8:1b:f7:90:bc:01:35:64:12:77:0b:43:cf:a8:c7:
                    d7:6f:23:df:1f:a6:09:28:33:6e:09:75:b6:1c:2a:
                    ab:25:33:84:b4:23:6c:cc:82:09:be:f5:23:62:83:
                    e2:17:4f:a9:a0:f3:10:9c:49:55:fe:41:86:6c:e9:
                    bd:37:22:d3:2e:82:37:55:75:ac:0b:1c:95:00:0b:
                    ad:2c:7a:0a:14:5a:e6:20:94:d5:1a:0e:e2:d1:41:
                    de:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:84:8A:37:EF:0E:EE:B3:B2:67:A9:D7:FD:8D:0D:6F:ED:97:3B:CD
            X509v3 Authority Key Identifier:
                keyid:15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:fd:12:f8:77:60:e0:0a:e5:b6:03:b0:d3:da:e6:05:55:88:
         47:cb:53:bc:c1:45:82:6f:38:09:eb:d4:ed:f8:b7:42:ae:10:
         11:b1:59:a5:77:0b:79:0b:78:3b:1c:57:dc:72:50:eb:d4:7b:
         bb:a4:ab:f4:9f:f4:cc:1f:ae:2f:32:fc:96:f5:4d:c5:76:41:
         b3:4d:64:ee:52:60:0f:29:b0:59:3e:3e:39:58:a5:a1:5c:46:
         24:e5:df:dd:d9:30:f5:4c:01:56:7b:2f:e2:c7:69:9c:c0:83:
         d5:db:66:5e:0f:a1:90:5b:c1:2e:54:a8:ff:89:87:fa:c9:54:
         71:f2:07:7f:b2:72:0a:e0:88:69:28:28:2e:7b:9c:46:f8:30:
         dc:56:fd:67:d5:96:57:7d:99:fc:ad:ac:33:2c:ef:a0:eb:3b:
         87:00:cb:72:9a:71:46:c1:b0:c1:e7:46:68:65:a7:46:ee:29:
         3f:f5:e5:c4:27:cd:6c:51:ae:56:cd:df:9d:af:b6:25:11:ad:
         8e:cc:0a:5e:b5:1e:5b:b9:15:b3:71:aa:66:52:6f:cc:63:1a:
         08:8c:0b:c7:51:56:e8:a9:e5:48:e5:e7:2c:78:f4:5f:6b:c7:
         c2:39:41:e6:92:33:90:fd:b5:46:a3:e2:68:0f:f5:41:7a:4a:
         80:f7:ab:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:10:53 2025 by rpki-client