This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
File:                     FpfEbq-hDsXZB7sF43EjtpKrSUw.mft (raw, json)
Hash identifier:          Gb+LR0l//qsZmYlTvdXXsceldetI/i3wm8O7yLidCRQ=
Subject key identifier:   D5:09:4C:7C:CF:05:81:48:2C:DF:68:8D:76:8A:3A:0B:BA:69:E1:D4
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Certificate issuer:       /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial:       019AF3F780ABDAB6F7474F568B5F89F161B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
Manifest number:          1710
Signing time:             Sat 06 Dec 2025 14:01:14 +0000
Manifest this update:     Sat 06 Dec 2025 14:01:14 +0000
Manifest next update:     Sun 07 Dec 2025 14:01:14 +0000
Files and hashes:         1: FpfEbq-hDsXZB7sF43EjtpKrSUw.crl (hash: imkZI9PI13zoG+cbtUvesVYQ21WWT3jpQMQWtOXQPWs=)
                          2: XWiker2v7GIlhkuZZtR48lVm108.roa (hash: NhUbFkPuOTxAHiVlHIvGiCnLEnSRvJwEzL+UojBb8qg=)
                          3: zJ5MYEMzWfucEDGxLfmRzsaSeEg.roa (hash: 13et8HkfUmrO0+ptVe41OzMBwG62Ru5G13R9afNJkP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f7:80:ab:da:b6:f7:47:4f:56:8b:5f:89:f1:61:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
        Validity
            Not Before: Dec  6 14:01:14 2025 GMT
            Not After : Dec  7 14:01:14 2025 GMT
        Subject: CN=d5094c7ccf0581482cdf688d768a3a0bba69e1d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6b:92:20:cc:39:1b:bb:c5:e9:6d:86:26:54:
                    1a:d3:29:f9:1c:66:2b:c5:07:e0:2e:86:a6:4f:b4:
                    07:c5:6f:04:ae:1d:52:3c:ec:ee:82:6b:07:52:ce:
                    ed:5a:ff:31:7c:04:65:c9:fe:0a:42:d5:14:5a:72:
                    69:73:90:0e:9c:ba:8c:81:73:4e:b3:eb:e8:1b:a6:
                    a1:c2:ca:a7:18:29:5c:02:52:d5:2b:68:7a:01:38:
                    e7:ea:26:b9:e1:89:9d:e7:89:1f:cb:91:f0:6c:41:
                    04:73:42:c5:7b:23:0a:35:7d:de:22:8d:ba:65:25:
                    da:c6:a1:4c:2f:89:a9:3a:05:a9:e0:ae:b4:2b:d0:
                    8f:d0:6a:4b:21:f8:fc:59:d0:48:ef:1d:88:c9:4e:
                    cf:94:2d:91:63:94:7e:44:ba:7d:2d:1b:01:9d:fc:
                    84:85:5c:ec:93:3b:93:6d:fd:da:6e:9d:59:67:ad:
                    10:01:8d:11:c1:e4:e9:d1:d6:32:5d:99:03:0e:d0:
                    fe:d4:33:88:82:f0:8c:bf:d6:98:e1:90:72:66:5b:
                    32:aa:46:00:0a:f0:f8:25:50:01:e1:1a:fe:ab:fd:
                    88:61:0b:06:95:06:f1:30:c7:9b:5f:eb:6c:9f:4e:
                    ff:c2:7b:29:03:ee:11:bc:31:b3:30:7e:ff:e0:5f:
                    bd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:09:4C:7C:CF:05:81:48:2C:DF:68:8D:76:8A:3A:0B:BA:69:E1:D4
            X509v3 Authority Key Identifier:
                keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:da:8e:15:4b:1d:54:8b:3b:dd:2a:b1:4d:34:93:38:6a:e6:
         e5:99:3f:0c:57:0e:08:76:3a:19:48:e6:83:3f:8b:97:a7:7d:
         cf:64:d0:d0:43:75:db:fc:02:17:e4:9d:d0:78:66:85:ef:0b:
         ea:ac:f6:51:ee:59:1b:b8:07:d2:39:37:f9:f3:1b:98:ec:11:
         84:b4:ad:8b:62:34:f8:39:50:24:65:39:b8:b9:f6:90:67:c8:
         b5:e1:1e:48:19:74:41:30:94:c4:23:5e:73:99:71:02:61:cd:
         8b:a1:6f:68:ea:61:76:f6:f2:3c:b5:80:84:79:98:43:cb:8a:
         c5:99:25:56:74:4f:5c:7d:bf:98:5c:c4:ee:e7:a4:bb:a1:72:
         f0:17:7f:74:cb:55:ee:43:d4:cc:77:26:84:83:3b:ba:83:09:
         3c:e5:46:9c:0d:d2:0f:34:7a:23:f7:df:bc:4b:5f:b6:7e:94:
         82:c7:57:d8:77:46:78:33:16:3e:93:11:b0:13:1f:2d:d5:f0:
         ff:3e:3b:e9:29:f7:14:20:f6:0b:61:fd:cb:38:56:45:42:ab:
         95:d2:f3:e2:7f:fe:ba:1e:19:d8:37:10:71:07:cc:8c:a7:4d:
         01:5b:18:39:4b:6a:5f:61:89:e8:8b:8b:77:80:69:30:ed:da:
         5f:4d:d5:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrz94Cr2rb3R09Wi1+J8WG2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OTdjNDZlYWZhMTBlYzVkOTA3YmIwNWUzNzEyM2I2OTJh
YjQ5NGMwHhcNMjUxMjA2MTQwMTE0WhcNMjUxMjA3MTQwMTE0WjAzMTEwLwYDVQQD
EyhkNTA5NGM3Y2NmMDU4MTQ4MmNkZjY4OGQ3NjhhM2EwYmJhNjllMWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGuSIMw5G7vF6W2GJlQa0yn5HGYr
xQfgLoamT7QHxW8Erh1SPOzugmsHUs7tWv8xfARlyf4KQtUUWnJpc5AOnLqMgXNO
s+voG6ahwsqnGClcAlLVK2h6ATjn6ia54Ymd54kfy5HwbEEEc0LFeyMKNX3eIo26
ZSXaxqFML4mpOgWp4K60K9CP0GpLIfj8WdBI7x2IyU7PlC2RY5R+RLp9LRsBnfyE
hVzskzuTbf3abp1ZZ60QAY0RweTp0dYyXZkDDtD+1DOIgvCMv9aY4ZByZlsyqkYA
CvD4JVAB4Rr+q/2IYQsGlQbxMMebX+tsn07/wnspA+4RvDGzMH7/4F+93wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUJTHzPBYFILN9ojXaKOgu6aeHUMB8GA1UdIwQY
MBaAFBaXxG6voQ7F2Qe7BeNxI7aSq0lMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBmRWJxLWhEc1haQjdzRjQzRWp0cEtyU1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kMDk5MmQtOTNmYS00ODQ2LWE0OTUt
NzY1MjJjMjA3YzU1LzEvRnBmRWJxLWhEc1haQjdzRjQzRWp0cEtyU1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kMDk5MmQtOTNmYS00ODQ2LWE0OTUtNzY1MjJjMjA3YzU1
LzEvRnBmRWJxLWhEc1haQjdzRjQzRWp0cEtyU1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdqOFUsd
VIs73SqxTTSTOGrm5Zk/DFcOCHY6GUjmgz+Ll6d9z2TQ0EN12/wCF+Sd0Hhmhe8L
6qz2Ue5ZG7gH0jk3+fMbmOwRhLSti2I0+DlQJGU5uLn2kGfIteEeSBl0QTCUxCNe
c5lxAmHNi6FvaOphdvbyPLWAhHmYQ8uKxZklVnRPXH2/mFzE7ueku6Fy8Bd/dMtV
7kPUzHcmhIM7uoMJPOVGnA3SDzR6I/ffvEtftn6UgsdX2HdGeDMWPpMRsBMfLdXw
/z476Sn3FCD2C2H9yzhWRUKrldLz4n/+uh4Z2DcQcQfMjKdNAVsYOUtqX2GJ6IuL
d4BpMO3aX03VUA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:45:57 2025 by rpki-client