This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.mft
File:                     FShvAiXBQdlYV_50ZGlJ513Zbyg.mft (raw, json)
Hash identifier:          eyFRpbnbBcTO50gmSfkN7jEhOLMjuOWRDL5ilHhtWNI=
Subject key identifier:   C0:AA:A2:24:F2:DF:6B:B4:D0:E4:D3:5C:57:8D:CC:BE:70:12:61:2A
Authority key identifier: 15:28:6F:02:25:C1:41:D9:58:57:FE:74:64:69:49:E7:5D:D9:6F:28
Certificate issuer:       /CN=15286f0225c141d95857fe74646949e75dd96f28
Certificate serial:       019AF3F736AD4D4AD73BC97AF640B4903913
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FShvAiXBQdlYV_50ZGlJ513Zbyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.mft
Manifest number:          1760
Signing time:             Sat 06 Dec 2025 14:00:56 +0000
Manifest this update:     Sat 06 Dec 2025 14:00:56 +0000
Manifest next update:     Sun 07 Dec 2025 14:00:56 +0000
Files and hashes:         1: BmXBWLA9_6SuRnMhbs95EZUkezI.roa (hash: 1Lg3r/teD74lzp5Bd3F8aEAT8tvLCJF4h8NvTRLICRE=)
                          2: DqL2Iz-nfiZFz9O_JLFZ1u0upXo.roa (hash: IluKRrKBF5sjHfDOuWCJtjWy7NTUF/LiNuEDUpQYIec=)
                          3: FShvAiXBQdlYV_50ZGlJ513Zbyg.crl (hash: 9D5IihUA3JwJMm2JN7ZUxaAm3I2Q2GZDcOR9yvxEbK4=)
                          4: Mr0yh9Idod-bEGR9cL8Ist_Jj4A.roa (hash: 5Ujre3KMVIzM/Fx6KHgseWX+SO9fZ/nChf3q7rvn980=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FShvAiXBQdlYV_50ZGlJ513Zbyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f7:36:ad:4d:4a:d7:3b:c9:7a:f6:40:b4:90:39:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15286f0225c141d95857fe74646949e75dd96f28
        Validity
            Not Before: Dec  6 14:00:56 2025 GMT
            Not After : Dec  7 14:00:56 2025 GMT
        Subject: CN=c0aaa224f2df6bb4d0e4d35c578dccbe7012612a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:82:e7:dc:bf:6d:66:90:f6:f9:7f:f8:ba:5a:
                    b1:a5:37:82:07:22:b2:5f:22:40:f1:bf:77:fd:b3:
                    95:00:f8:64:70:1b:43:3f:9d:04:c0:57:27:4a:ab:
                    7f:35:09:b6:7c:b0:64:bb:b7:9d:0a:05:29:6a:09:
                    70:94:75:d0:34:5e:8e:37:51:44:5c:82:55:55:fb:
                    9e:32:ff:dc:05:69:40:76:b1:8d:6b:25:13:a9:bf:
                    0c:ab:1d:64:0f:48:13:b9:28:a4:84:f8:92:0a:6d:
                    57:5a:67:1b:ea:8d:5c:75:57:ca:72:93:d2:54:15:
                    20:1b:43:5b:77:e5:ea:5c:94:5e:0e:78:8e:8d:3b:
                    fd:ea:f4:a5:03:3d:2c:85:54:1d:f8:e8:fd:7f:db:
                    3d:3b:0c:b4:ca:d2:8e:1f:84:08:2e:17:f0:b8:9d:
                    b1:bc:64:42:f7:b7:b5:5e:dd:c0:85:4a:73:47:bc:
                    62:26:fd:03:82:58:8a:1e:58:42:36:40:db:b6:bd:
                    e6:a4:63:77:00:b4:b7:99:f3:df:a6:07:9f:ea:c8:
                    b8:60:76:6f:0d:9f:4b:30:84:de:7c:a2:8e:50:27:
                    a8:35:fe:27:94:d6:4d:05:06:81:b9:f6:5b:f3:fb:
                    f3:6c:ff:82:a7:51:e7:59:68:45:4f:88:e7:d6:a5:
                    01:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AA:A2:24:F2:DF:6B:B4:D0:E4:D3:5C:57:8D:CC:BE:70:12:61:2A
            X509v3 Authority Key Identifier:
                keyid:15:28:6F:02:25:C1:41:D9:58:57:FE:74:64:69:49:E7:5D:D9:6F:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FShvAiXBQdlYV_50ZGlJ513Zbyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:43:4e:e5:cf:c9:f6:f6:54:23:2a:af:f3:17:0c:6c:10:37:
         bd:fd:cd:a2:cd:41:ae:05:81:5a:c8:13:5f:d2:63:74:52:99:
         b7:5f:f9:dd:58:e4:6c:e6:b8:21:d0:42:fe:c2:0c:34:c2:fd:
         29:bf:ac:48:d8:56:15:9f:15:be:ef:c3:b5:d2:48:19:87:5c:
         11:db:52:36:8a:12:24:db:6d:65:2c:ed:1b:9a:c5:62:e3:41:
         df:b0:67:8a:d0:7b:c5:b3:54:21:e9:56:14:ae:b4:88:1b:fb:
         a4:3f:ca:66:19:79:43:b2:e9:cd:f3:c4:35:08:8d:d3:9e:f1:
         bd:ac:2d:41:6c:43:eb:37:d4:81:92:eb:0b:93:c6:f4:9f:02:
         2d:f0:a5:e4:98:f6:21:ae:4d:86:21:ad:9d:1b:5b:dd:58:70:
         22:b8:c1:69:fb:6e:da:06:3c:d5:b2:ec:7d:52:d8:f1:1f:47:
         62:90:4d:f0:ea:8d:ed:35:b9:21:16:a3:9c:52:f6:af:99:b9:
         a6:d3:09:61:d0:11:5e:67:45:47:52:85:0b:fb:de:87:9d:56:
         96:21:7e:7d:ca:52:12:fc:d1:07:0d:f6:ec:e9:4b:d4:96:82:
         8a:e2:4a:08:b7:2f:7d:79:e0:28:75:1a:ac:06:5e:1b:b7:12:
         6a:e5:17:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:28:06 2025 by rpki-client