This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
File:                     fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json)
Hash identifier:          2osZSmv7oXhp8Nx9Sd3DaOTCMVkE5aqsQxUCDkHEWFI=
Subject key identifier:   CF:85:6E:84:4D:3A:F8:B1:7C:7E:FE:3C:8A:FD:8B:D8:A7:87:CC:CA
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Certificate issuer:       /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial:       019AF4D28CD843B6C2FCB26B3F86BAAFC287
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
Manifest number:          1768
Signing time:             Sat 06 Dec 2025 18:00:30 +0000
Manifest this update:     Sat 06 Dec 2025 18:00:30 +0000
Manifest next update:     Sun 07 Dec 2025 18:00:30 +0000
Files and hashes:         1: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: ponH1b9268dhHHg7hjgWsaY3O73IFzdaMTAvIQ7HQ2o=)
                          2: jtLIKZheIJbw9TwyWl-fpzVLvnE.roa (hash: IhEUym2kurgLTl3Vw4ZlxqTomcA/YLaDzPHSwrVgpmI=)
                          3: pIC-whUriXBZUStrVpAYvl470Dw.roa (hash: P8U8HyziEmzl2lHRrN+KrJgIgKMcwZzkigHQuPfUZ+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:d2:8c:d8:43:b6:c2:fc:b2:6b:3f:86:ba:af:c2:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
        Validity
            Not Before: Dec  6 18:00:30 2025 GMT
            Not After : Dec  7 18:00:30 2025 GMT
        Subject: CN=cf856e844d3af8b17c7efe3c8afd8bd8a787ccca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7c:e4:f3:ba:60:0d:9f:12:46:08:d7:0f:6d:
                    62:46:b7:16:7b:6b:af:96:a8:5c:7c:5b:c5:8c:33:
                    f0:90:6a:d0:57:c0:25:39:b4:06:a7:23:48:bd:2b:
                    4b:5e:54:dd:cb:e2:ad:0c:16:38:18:4e:0c:ce:05:
                    ad:6a:e7:b2:e7:0c:cc:18:9c:64:a3:68:f6:ee:8b:
                    8f:2d:fd:33:c5:f5:30:5f:a8:92:94:c1:ca:79:90:
                    b3:dc:50:84:32:a9:0a:c4:3c:6b:5e:63:fb:15:29:
                    e4:fe:ab:5a:4c:a5:f2:9a:cd:23:d8:9b:7c:d5:a0:
                    ca:ce:8f:6d:69:86:3a:cd:01:08:4c:5e:e4:70:ee:
                    4e:7a:b0:b8:d7:30:e3:8d:84:63:5f:d4:46:c1:36:
                    c5:1e:c8:b0:ab:2a:74:1b:c4:a5:28:39:56:e4:1a:
                    65:3c:54:d9:f5:49:8b:ad:3b:5b:72:da:5e:81:4b:
                    d1:50:5f:d3:58:1d:e7:fe:96:18:97:c6:65:36:18:
                    01:89:b9:10:d8:48:8c:50:a9:66:c3:d2:8c:e7:21:
                    71:58:4c:d2:fd:79:e8:70:6e:63:65:f4:ad:02:c3:
                    fa:72:f7:e8:03:19:c4:ee:f9:7d:54:2b:93:d0:e6:
                    e3:47:35:75:f1:42:a4:40:3c:e8:5e:f7:9c:bc:e3:
                    39:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:85:6E:84:4D:3A:F8:B1:7C:7E:FE:3C:8A:FD:8B:D8:A7:87:CC:CA
            X509v3 Authority Key Identifier:
                keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f2:87:53:d6:80:1e:cf:0f:bb:a5:55:8c:e6:7c:71:de:39:
         00:31:3c:f8:8a:b4:0e:93:2d:b8:a1:3d:5b:f4:4e:26:9b:6d:
         29:ed:81:f4:ec:2d:d2:d6:27:e8:f3:6b:cd:6a:e3:d9:71:3b:
         ac:49:38:1c:2e:c1:f0:d2:31:33:d3:6f:12:d8:c0:18:03:98:
         05:da:cc:4e:fd:36:af:5a:f3:8a:23:fc:8a:64:37:56:b6:7e:
         13:2a:90:24:33:86:3f:c5:5e:f7:cd:7a:87:6e:64:c2:ce:f5:
         cd:97:e7:bb:80:87:1b:ae:79:04:19:ed:0c:79:ad:81:6a:d7:
         d8:a2:bb:bb:30:cf:06:05:1a:e9:d1:bc:53:1e:23:d7:36:f4:
         c7:e4:09:16:53:23:26:53:47:4d:da:93:fa:24:9e:4d:1e:f0:
         3d:99:f7:ad:2a:5c:e0:b9:86:05:71:9f:5c:e8:fa:04:99:6f:
         a4:3d:1a:50:cc:af:36:5f:8f:d9:64:77:79:d4:ca:1e:bb:6b:
         5a:96:21:39:43:9c:4e:10:b4:53:b8:3c:ad:b2:d4:aa:db:41:
         5b:10:fe:7d:b1:74:2a:59:b8:92:88:56:d9:54:74:4d:21:05:
         ae:6c:1c:ba:49:07:52:af:ee:de:9f:32:a6:b7:de:41:07:79:
         50:30:b0:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr00ozYQ7bC/LJrP4a6r8KHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTAyZTJkMjRiMWYyMTY5MTMwODgyMDdhMjY4ZTY2MjZi
MGNlMzkwHhcNMjUxMjA2MTgwMDMwWhcNMjUxMjA3MTgwMDMwWjAzMTEwLwYDVQQD
EyhjZjg1NmU4NDRkM2FmOGIxN2M3ZWZlM2M4YWZkOGJkOGE3ODdjY2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXzk87pgDZ8SRgjXD21iRrcWe2uv
lqhcfFvFjDPwkGrQV8AlObQGpyNIvStLXlTdy+KtDBY4GE4MzgWtauey5wzMGJxk
o2j27ouPLf0zxfUwX6iSlMHKeZCz3FCEMqkKxDxrXmP7FSnk/qtaTKXyms0j2Jt8
1aDKzo9taYY6zQEITF7kcO5OerC41zDjjYRjX9RGwTbFHsiwqyp0G8SlKDlW5Bpl
PFTZ9UmLrTtbctpegUvRUF/TWB3n/pYYl8ZlNhgBibkQ2EiMUKlmw9KM5yFxWEzS
/XnocG5jZfStAsP6cvfoAxnE7vl9VCuT0ObjRzV18UKkQDzoXvecvOM5TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+FboRNOvixfH7+PIr9i9inh8zKMB8GA1UdIwQY
MBaAFH1QLi0ksfIWkTCIIHomjmYmsM45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZBdUxTU3g4aGFSTUlnZ2VpYU9aaWF3emprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9hYTUzY2YtZjk4OC00MGViLTgwODMt
NTFkNzU1NjhhOWUzLzEvZlZBdUxTU3g4aGFSTUlnZ2VpYU9aaWF3emprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9hYTUzY2YtZjk4OC00MGViLTgwODMtNTFkNzU1NjhhOWUz
LzEvZlZBdUxTU3g4aGFSTUlnZ2VpYU9aaWF3emprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPKHU9aA
Hs8Pu6VVjOZ8cd45ADE8+Iq0DpMtuKE9W/ROJpttKe2B9Owt0tYn6PNrzWrj2XE7
rEk4HC7B8NIxM9NvEtjAGAOYBdrMTv02r1rziiP8imQ3VrZ+EyqQJDOGP8Ve9816
h25kws71zZfnu4CHG655BBntDHmtgWrX2KK7uzDPBgUa6dG8Ux4j1zb0x+QJFlMj
JlNHTdqT+iSeTR7wPZn3rSpc4LmGBXGfXOj6BJlvpD0aUMyvNl+P2WR3edTKHrtr
WpYhOUOcThC0U7g8rbLUqttBWxD+fbF0Klm4kohW2VR0TSEFrmwcukkHUq/u3p8y
prfeQQd5UDCwXQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:41:29 2025 by rpki-client