This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
File:                     FjvL2byThJp__fcpTC3p37Hq8oM.mft (raw, json)
Hash identifier:          wE3MTTnq43modPhu9qDsLA5AFjR49+S+aeYnb0UWQo8=
Subject key identifier:   7D:D3:1A:1F:41:B2:24:49:A5:BC:9B:7D:8A:1A:83:58:92:44:87:D2
Authority key identifier: 16:3B:CB:D9:BC:93:84:9A:7F:FD:F7:29:4C:2D:E9:DF:B1:EA:F2:83
Certificate issuer:       /CN=163bcbd9bc93849a7ffdf7294c2de9dfb1eaf283
Certificate serial:       019B2DE6DA925539E4B11BF7DC69CF06F339
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
Manifest number:          094E
Signing time:             Wed 17 Dec 2025 20:01:02 +0000
Manifest this update:     Wed 17 Dec 2025 20:01:02 +0000
Manifest next update:     Thu 18 Dec 2025 20:01:02 +0000
Files and hashes:         1: 3UNyKDhAIctkIaiCHfw-i8AjC60.roa (hash: RbaiVZW2VnfBiQ5GEAYbSY+TEp7BHi5lhZORNmt7Iwo=)
                          2: FjvL2byThJp__fcpTC3p37Hq8oM.crl (hash: idst8JVCEesjCYLLO4rknuW8iEx9C4RhDqveFzoe+D4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 19:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2d:e6:da:92:55:39:e4:b1:1b:f7:dc:69:cf:06:f3:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=163bcbd9bc93849a7ffdf7294c2de9dfb1eaf283
        Validity
            Not Before: Dec 17 20:01:02 2025 GMT
            Not After : Dec 18 20:01:02 2025 GMT
        Subject: CN=7dd31a1f41b22449a5bc9b7d8a1a8358924487d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:47:01:08:0a:c9:89:62:6e:46:88:9b:8e:a4:
                    9d:0b:52:37:c2:c9:15:06:87:49:64:ff:10:3e:1e:
                    1a:e6:1c:5e:0c:3e:4f:7c:f2:cd:34:83:c8:40:a3:
                    1e:0d:13:46:38:4d:ec:28:c4:7c:34:28:e0:25:9f:
                    9c:4e:29:85:75:33:55:56:35:eb:98:51:11:fc:dc:
                    d3:17:b3:38:fc:b4:c8:9d:69:d2:b6:af:bd:9f:4d:
                    88:dd:3b:6f:52:3e:b3:7b:d9:44:66:73:38:a3:73:
                    03:61:0f:96:1d:9f:dd:f4:65:1a:7b:16:4a:f6:89:
                    4a:0f:bd:97:01:1a:ff:f4:db:9f:62:91:a9:80:bc:
                    1c:45:8a:e2:b7:cf:84:fc:79:22:82:43:49:16:29:
                    2e:c1:50:9b:09:85:6a:7a:e4:ef:9c:63:d7:00:10:
                    1c:ae:10:e6:86:ec:8a:0a:1b:ef:cb:7b:99:54:34:
                    05:c8:71:2e:4e:93:2f:29:96:08:41:15:d1:a9:57:
                    c2:c7:6d:b1:7e:f4:2c:13:ba:24:82:b1:96:75:c5:
                    0c:e6:41:f2:46:60:b7:21:39:67:39:38:5a:5c:3c:
                    08:f9:15:11:8e:56:b1:50:ff:95:8d:ac:26:89:77:
                    fe:99:d5:9b:01:cd:04:e4:a9:98:83:31:07:b1:42:
                    8d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D3:1A:1F:41:B2:24:49:A5:BC:9B:7D:8A:1A:83:58:92:44:87:D2
            X509v3 Authority Key Identifier:
                keyid:16:3B:CB:D9:BC:93:84:9A:7F:FD:F7:29:4C:2D:E9:DF:B1:EA:F2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:b6:53:5b:6f:b6:fa:00:b9:97:28:41:79:08:2c:92:7e:d3:
         13:ec:9c:ac:22:83:9d:04:1e:c9:3a:c2:e1:3f:0b:a1:6a:43:
         5f:1e:2b:54:ba:43:b9:57:7f:93:fe:ac:51:eb:be:8b:bd:dc:
         68:47:a0:cf:10:14:09:70:43:23:90:10:33:ed:9d:ad:a0:50:
         ed:9b:44:56:0f:15:9a:d4:b1:1e:a1:9c:aa:05:78:5d:61:5d:
         2e:f8:70:03:85:b9:53:10:d9:50:86:a6:e8:c1:aa:89:d0:50:
         66:06:f2:d2:db:02:7c:54:4a:d3:d1:23:f6:61:18:cf:9b:30:
         64:58:d5:30:a7:4e:b3:89:b2:42:12:5c:42:bf:05:36:9f:b4:
         fa:8c:d5:b2:05:de:29:b6:12:c0:f3:24:fe:67:52:5d:10:90:
         ee:42:01:64:4e:35:81:63:9f:3f:8c:4b:f8:67:18:99:24:fc:
         27:19:89:f6:71:a8:3a:55:0c:ba:54:d7:e0:4f:44:cc:4b:1c:
         43:05:50:d9:99:a4:34:59:2f:45:8b:8c:0e:70:d1:78:a0:53:
         20:35:03:2f:d1:cd:14:91:2f:9e:8d:a1:30:80:d7:27:29:6e:
         a4:20:72:06:c3:d7:b3:f8:37:13:c8:56:90:57:ad:9e:c8:87:
         d1:c7:57:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZst5tqSVTnksRv33GnPBvM5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2M2JjYmQ5YmM5Mzg0OWE3ZmZkZjcyOTRjMmRlOWRmYjFl
YWYyODMwHhcNMjUxMjE3MjAwMTAyWhcNMjUxMjE4MjAwMTAyWjAzMTEwLwYDVQQD
Eyg3ZGQzMWExZjQxYjIyNDQ5YTViYzliN2Q4YTFhODM1ODkyNDQ4N2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20cBCArJiWJuRoibjqSdC1I3wskV
BodJZP8QPh4a5hxeDD5PfPLNNIPIQKMeDRNGOE3sKMR8NCjgJZ+cTimFdTNVVjXr
mFER/NzTF7M4/LTInWnStq+9n02I3TtvUj6ze9lEZnM4o3MDYQ+WHZ/d9GUaexZK
9olKD72XARr/9NufYpGpgLwcRYrit8+E/HkigkNJFikuwVCbCYVqeuTvnGPXABAc
rhDmhuyKChvvy3uZVDQFyHEuTpMvKZYIQRXRqVfCx22xfvQsE7okgrGWdcUM5kHy
RmC3ITlnOThaXDwI+RURjlaxUP+VjawmiXf+mdWbAc0E5KmYgzEHsUKNywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3TGh9BsiRJpbybfYoag1iSRIfSMB8GA1UdIwQY
MBaAFBY7y9m8k4Saf/33KUwt6d+x6vKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmp2TDJieVRoSnBfX2ZjcFRDM3AzN0hxOG9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC81NmM3ODItNmU5ZS00ZmM4LWJiOTkt
ZjY0MGFkM2I4Y2Y0LzEvRmp2TDJieVRoSnBfX2ZjcFRDM3AzN0hxOG9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC81NmM3ODItNmU5ZS00ZmM4LWJiOTktZjY0MGFkM2I4Y2Y0
LzEvRmp2TDJieVRoSnBfX2ZjcFRDM3AzN0hxOG9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwrZTW2+2
+gC5lyhBeQgskn7TE+ycrCKDnQQeyTrC4T8LoWpDXx4rVLpDuVd/k/6sUeu+i73c
aEegzxAUCXBDI5AQM+2draBQ7ZtEVg8VmtSxHqGcqgV4XWFdLvhwA4W5UxDZUIam
6MGqidBQZgby0tsCfFRK09Ej9mEYz5swZFjVMKdOs4myQhJcQr8FNp+0+ozVsgXe
KbYSwPMk/mdSXRCQ7kIBZE41gWOfP4xL+GcYmST8JxmJ9nGoOlUMulTX4E9EzEsc
QwVQ2ZmkNFkvRYuMDnDReKBTIDUDL9HNFJEvno2hMIDXJylupCByBsPXs/g3E8hW
kFetnsiH0cdXUg==
-----END CERTIFICATE-----
Generated at Thu Dec 18 05:44:31 2025 by rpki-client