This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
File:                     _FlUn23SuDFEuIDCPwb7o7JdOYY.mft (raw, json)
Hash identifier:          l1IIX6YOmCOlJC5qwYr3LWNmZ50I1noLgk0V5MsxJYg=
Subject key identifier:   C1:55:90:00:2E:B7:BD:CE:3B:80:19:CF:3B:3A:8A:73:1A:DD:CB:D7
Authority key identifier: FC:59:54:9F:6D:D2:B8:31:44:B8:80:C2:3F:06:FB:A3:B2:5D:39:86
Certificate issuer:       /CN=fc59549f6dd2b83144b880c23f06fba3b25d3986
Certificate serial:       019AF12D02BA44D5570FE83A5B501DE9D969
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
Manifest number:          115B
Signing time:             Sat 06 Dec 2025 01:00:50 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:50 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:50 +0000
Files and hashes:         1: Z6qviYCXQTeLJoJfMAOJcgB-9Qg.roa (hash: oDapm5Z+x3QJafhm3qUyzSGeINGec4KUVgNU/i7jaZI=)
                          2: _FlUn23SuDFEuIDCPwb7o7JdOYY.crl (hash: 2LK6EiAOeGLMcZ8aJy0vPpPWnWL4Sfdi0Gm7OOf+50Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:02:ba:44:d5:57:0f:e8:3a:5b:50:1d:e9:d9:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc59549f6dd2b83144b880c23f06fba3b25d3986
        Validity
            Not Before: Dec  6 01:00:50 2025 GMT
            Not After : Dec  7 01:00:50 2025 GMT
        Subject: CN=c15590002eb7bdce3b8019cf3b3a8a731addcbd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e6:b8:db:a9:f7:b0:a3:74:07:d8:35:32:4c:
                    5d:61:e1:4f:f2:17:d3:87:49:70:d7:73:44:e5:f1:
                    5e:6a:8e:be:6a:1d:ea:ab:18:a4:51:c6:ad:37:e3:
                    be:39:40:2f:1c:c1:32:8b:a6:e2:b5:29:92:9e:de:
                    27:47:47:ab:7f:dc:ac:7e:d7:89:33:83:3b:fe:6d:
                    3a:58:37:d3:45:2f:ad:ef:0b:c6:21:0a:de:f1:f0:
                    5f:6a:ce:d9:0f:67:e5:aa:6a:6f:df:74:a1:59:01:
                    17:83:4b:3b:64:b5:57:47:36:1e:de:7b:bd:68:6f:
                    44:ff:11:2f:09:b0:f0:43:b2:63:57:c6:f9:d9:9c:
                    6a:c6:8d:d9:db:e3:b0:86:c3:f8:96:64:68:48:19:
                    27:d3:bf:91:b9:ea:b0:44:a1:67:ee:0e:94:c2:84:
                    f4:56:c9:60:8f:52:08:fb:84:e0:8f:f7:70:5d:17:
                    43:09:c1:f8:7e:1a:7f:a0:17:ce:ad:62:60:98:09:
                    f5:7f:af:8a:73:75:38:48:cc:a6:1a:65:a9:18:ea:
                    a1:2d:bf:7b:52:c7:32:b2:2e:a7:c7:9a:10:84:f9:
                    0a:e6:ce:b1:e0:e4:39:06:e4:59:bf:a7:df:63:cf:
                    8b:f6:c8:f4:a3:a6:af:2e:51:68:6a:64:fc:cc:df:
                    bf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:55:90:00:2E:B7:BD:CE:3B:80:19:CF:3B:3A:8A:73:1A:DD:CB:D7
            X509v3 Authority Key Identifier:
                keyid:FC:59:54:9F:6D:D2:B8:31:44:B8:80:C2:3F:06:FB:A3:B2:5D:39:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ab:9f:7a:f1:0e:7f:15:5b:bd:bd:34:7e:e0:f3:21:aa:bb:
         cf:19:b8:e3:0e:19:cb:e9:2d:9e:5b:5f:0b:eb:45:de:95:83:
         1c:64:af:34:00:25:0d:d3:3c:08:2a:b2:cf:35:26:93:04:71:
         9e:08:a0:86:bc:dc:c0:01:f8:73:b7:ed:ca:3b:2e:1d:1f:6d:
         aa:49:2d:41:a5:2f:74:16:a0:1f:18:e9:65:4b:2b:0c:e8:63:
         2a:05:f8:5e:8b:28:bf:e0:e8:62:5c:b9:3f:c5:2b:fb:88:e1:
         e6:f7:fb:0b:c2:b2:29:67:a0:0c:5d:59:6a:41:86:f3:a5:13:
         e9:6b:58:eb:59:57:f6:1a:79:fa:e2:69:da:37:4b:86:93:f3:
         d9:c0:ca:15:75:70:35:aa:7c:5c:f4:4c:7a:97:17:e3:1a:17:
         a0:d7:3a:c1:6f:ab:f1:fd:f5:e0:43:d3:77:60:67:6a:aa:d5:
         ca:d4:23:22:4c:e0:ca:b2:9c:de:57:9b:38:9d:75:37:a3:d8:
         a6:8a:90:b6:90:57:f3:3c:fb:19:14:6c:8c:fe:8c:a2:b6:27:
         4e:ee:e0:93:f7:39:4f:58:bb:0d:f8:a4:84:58:8b:73:83:4d:
         d1:ae:aa:8b:b2:34:50:5b:3b:8c:49:ff:6c:02:ec:44:7d:db:
         d8:c8:36:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLQK6RNVXD+g6W1Ad6dlpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNTk1NDlmNmRkMmI4MzE0NGI4ODBjMjNmMDZmYmEzYjI1
ZDM5ODYwHhcNMjUxMjA2MDEwMDUwWhcNMjUxMjA3MDEwMDUwWjAzMTEwLwYDVQQD
EyhjMTU1OTAwMDJlYjdiZGNlM2I4MDE5Y2YzYjNhOGE3MzFhZGRjYmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOa426n3sKN0B9g1MkxdYeFP8hfT
h0lw13NE5fFeao6+ah3qqxikUcatN+O+OUAvHMEyi6bitSmSnt4nR0erf9ysfteJ
M4M7/m06WDfTRS+t7wvGIQre8fBfas7ZD2flqmpv33ShWQEXg0s7ZLVXRzYe3nu9
aG9E/xEvCbDwQ7JjV8b52Zxqxo3Z2+OwhsP4lmRoSBkn07+RueqwRKFn7g6UwoT0
Vslgj1II+4Tgj/dwXRdDCcH4fhp/oBfOrWJgmAn1f6+Kc3U4SMymGmWpGOqhLb97
Uscysi6nx5oQhPkK5s6x4OQ5BuRZv6ffY8+L9sj0o6avLlFoamT8zN+/vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFVkAAut73OO4AZzzs6inMa3cvXMB8GA1UdIwQY
MBaAFPxZVJ9t0rgxRLiAwj8G+6OyXTmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0ZsVW4yM1N1REZFdUlEQ1B3YjdvN0pkT1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy85NjQwMzUtMzgxYS00MWIwLTlmZGQt
ZjY1ZDMzYTk5MjZiLzEvX0ZsVW4yM1N1REZFdUlEQ1B3YjdvN0pkT1lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy85NjQwMzUtMzgxYS00MWIwLTlmZGQtZjY1ZDMzYTk5MjZi
LzEvX0ZsVW4yM1N1REZFdUlEQ1B3YjdvN0pkT1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAaufevEO
fxVbvb00fuDzIaq7zxm44w4Zy+ktnltfC+tF3pWDHGSvNAAlDdM8CCqyzzUmkwRx
ngighrzcwAH4c7ftyjsuHR9tqkktQaUvdBagHxjpZUsrDOhjKgX4Xosov+DoYly5
P8Ur+4jh5vf7C8KyKWegDF1ZakGG86UT6WtY61lX9hp5+uJp2jdLhpPz2cDKFXVw
Nap8XPRMepcX4xoXoNc6wW+r8f314EPTd2BnaqrVytQjIkzgyrKc3lebOJ11N6PY
poqQtpBX8zz7GRRsjP6MorYnTu7gk/c5T1i7DfikhFiLc4NN0a6qi7I0UFs7jEn/
bALsRH3b2Mg2Mw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:21:53 2025 by rpki-client