This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
File:                     1-FVaeIP5K5-bpCKpa045e_X7j8c.mft (raw, json)
Hash identifier:          uIR9Myn0+wYxoahfjiM7+RI0ae4apdeGupVBhe/uC3I=
Subject key identifier:   F4:19:39:73:BE:D8:BA:88:8A:59:26:2E:53:EE:42:D7:9D:5D:6A:CC
Authority key identifier: F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
Certificate issuer:       /CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Certificate serial:       019AF164263E30E51993EE4D855D8E231DF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
Manifest number:          1075
Signing time:             Sat 06 Dec 2025 02:01:03 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:03 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:03 +0000
Files and hashes:         1: 1-FVaeIP5K5-bpCKpa045e_X7j8c.crl (hash: 0+Zj8k2Ho4WiMiz0qBCFwmGdxaztSiiQmLB7UDlIkcA=)
                          2: 5h1ttuT1xe8MQqiFLClQXEEG4xI.roa (hash: K15KK7htu+WW4WVVGCjjbJDrrjHd40ite1VZJn9QCX0=)
                          3: dL6QyTMH147RYvNbATR7wK8mAf8.roa (hash: lSk9mx0oL0nyVdSJ+hGB8xudUQAwa8IcLy2XJ8XP0tY=)
                          4: q1cKMx3v15DpBk7XfHsCbT0Hr0M.roa (hash: kJPl8z55kb+AOqX1mvjlXQAxwXPA4H1QahAgTk9/aUg=)
                          5: rm06Swzk55gS84j69N9wUHADa3g.roa (hash: EamVaUPfEGjAAZCep2zHyRQqfCPogilef0zQIPWb7CQ=)
                          6: zMv4vXM8dPStyIaP6YAH3FrSdFM.roa (hash: VWJ6HSGgCLyVghdMpKY1d9rx6m4eAxvybOUx+qVtZ3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:26:3e:30:e5:19:93:ee:4d:85:5d:8e:23:1d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
        Validity
            Not Before: Dec  6 02:01:03 2025 GMT
            Not After : Dec  7 02:01:03 2025 GMT
        Subject: CN=f4193973bed8ba888a59262e53ee42d79d5d6acc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0b:11:01:86:bf:7d:69:c9:0d:64:9a:3d:e1:
                    b5:2b:57:9d:16:2a:15:93:e9:8f:eb:e9:c4:15:48:
                    62:a9:5b:5c:e4:1e:30:b0:79:15:d1:b9:4e:31:7f:
                    dd:62:a6:1a:d3:35:21:a8:77:f5:16:52:4f:49:97:
                    d4:b3:f3:8b:09:5c:e0:8c:c2:f4:83:0f:a0:6b:db:
                    70:fd:82:ea:25:ef:8c:49:6b:88:8b:99:e9:ac:c6:
                    fa:1a:36:c3:76:bc:8f:7b:b6:70:c2:fd:91:32:e7:
                    f8:a8:db:4b:73:cf:e9:84:60:5d:42:88:3e:96:b5:
                    72:d3:20:ca:2e:8b:fd:86:9c:92:b4:2e:a8:7d:7a:
                    7b:19:6c:26:91:a0:1a:14:b4:e9:c1:ce:e4:04:d0:
                    00:9e:8e:fc:94:7a:fd:11:d0:5e:8b:92:bf:43:ee:
                    ea:a6:56:a1:b5:e0:77:bc:03:73:6a:0b:92:3b:b3:
                    95:b7:f6:3b:07:9e:fe:87:0f:3a:0b:16:f6:15:0d:
                    d7:30:72:df:1f:03:bb:68:cc:6e:13:3f:a9:27:a6:
                    fb:93:c7:0d:26:bc:01:ee:d8:75:8f:2a:09:4d:96:
                    9a:c8:f9:f4:bc:e7:5e:d6:28:27:e3:bb:8b:a0:66:
                    71:ef:ca:e9:a6:50:44:58:52:25:fd:24:24:3d:d1:
                    79:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:19:39:73:BE:D8:BA:88:8A:59:26:2E:53:EE:42:D7:9D:5D:6A:CC
            X509v3 Authority Key Identifier:
                keyid:F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:46:bf:e4:2c:ca:4a:0e:11:10:d1:f8:61:41:e3:e7:86:9e:
         55:7c:ba:cc:3b:24:b4:c6:49:09:c1:31:49:24:fe:37:c4:8c:
         03:00:ca:5e:7e:26:cc:84:1e:f1:8b:7b:cf:60:65:08:4f:d7:
         5c:16:71:d8:52:3e:c0:4d:9f:67:5c:bb:51:83:23:6c:35:76:
         a4:1d:7a:d3:86:83:2f:ff:b8:ed:20:8f:db:32:cf:84:19:d1:
         68:9c:94:a4:d7:03:25:c1:45:2f:52:a7:ae:24:50:56:23:a2:
         d3:e1:93:3d:dd:67:c2:cc:26:bc:27:25:49:61:e6:68:56:6d:
         fa:a3:c6:11:b0:8b:97:ac:cc:21:26:aa:0c:0a:6b:e9:49:bf:
         5c:93:84:0b:85:0f:b1:73:a5:62:45:de:59:8b:7b:1a:53:73:
         2b:fe:fd:b0:c5:27:61:72:1c:0c:b5:72:d1:a2:6d:b8:ca:af:
         b4:3e:49:b3:3a:52:27:fe:57:d2:0d:bf:4f:7a:f2:b7:1d:39:
         65:ee:df:61:e6:a9:52:d5:3a:ff:6f:ce:74:19:6b:0c:67:15:
         3c:25:26:6e:bc:05:4f:91:dc:91:e1:08:dc:3f:20:6a:5c:f3:
         fe:a2:49:fa:a9:c8:7a:28:e1:cb:dd:06:61:c1:69:32:39:5b:
         4b:41:48:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:45:05 2025 by rpki-client