This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
File:                     fQL6LFuiiSBF581Qpa39VNbbuMI.mft (raw, json)
Hash identifier:          E7zuU8tovb4zyeKSc0qimWTpunCyFgmPGfZ5336ZdU4=
Subject key identifier:   73:73:68:B7:7F:BC:E7:88:19:BE:F2:43:69:97:44:19:8D:2D:9D:BC
Authority key identifier: 7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
Certificate issuer:       /CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Certificate serial:       019AF2092D0310DD359A63CE22ADD1C98FE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
Manifest number:          163F
Signing time:             Sat 06 Dec 2025 05:01:18 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:18 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:18 +0000
Files and hashes:         1: D0FtQbvZQzXxktB27DUgaEKlwyA.roa (hash: TJTUE8/n7jdIuoCoqw/ggE/DDwa5ne0vVYVe1eoGnag=)
                          2: RNOXkvXJ_ycI8OmwcuHSmaLAtH4.roa (hash: LUqOAenIf0vYCqR2aBBDyfZ5SWi7hY4GyrNgtlhdeZw=)
                          3: fQL6LFuiiSBF581Qpa39VNbbuMI.crl (hash: a9oyd82toUcGzmKmOnbtiQ6teU4vBZldZ88Lzl7j2Aw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:2d:03:10:dd:35:9a:63:ce:22:ad:d1:c9:8f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
        Validity
            Not Before: Dec  6 05:01:18 2025 GMT
            Not After : Dec  7 05:01:18 2025 GMT
        Subject: CN=737368b77fbce78819bef243699744198d2d9dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:29:2f:03:86:c2:62:a3:5e:70:70:7e:0b:5e:
                    d7:11:00:60:c9:03:cd:c8:a7:4a:ff:39:a8:b3:3d:
                    2d:f9:30:58:b7:86:2c:37:d0:32:b4:b0:58:c3:c2:
                    4e:44:09:36:27:c3:18:52:b3:7d:cf:c9:f9:71:ad:
                    87:4b:44:87:33:7c:64:bb:65:6b:1e:ef:f2:d9:b2:
                    ad:d7:e4:8b:db:78:ce:18:a4:7f:74:18:90:08:3b:
                    90:c5:6f:77:ab:3e:6a:e4:3b:de:55:34:34:62:0c:
                    10:94:f1:88:06:37:dc:22:58:dd:e7:2c:5a:d1:21:
                    ef:1c:54:82:3e:be:77:98:5e:e2:d3:a9:28:7a:d5:
                    fd:d9:c1:91:cc:ad:bf:08:a4:a3:0c:90:69:28:b3:
                    ff:54:96:da:9a:b0:9c:bb:6f:04:08:bc:37:dc:6b:
                    da:7f:54:a6:2c:75:20:65:a7:7d:a4:03:45:c5:ee:
                    cc:b7:ee:02:23:04:35:b9:85:0f:be:46:29:de:28:
                    1d:04:12:df:fd:8b:38:b6:0c:3e:46:76:39:6d:ca:
                    23:ba:32:36:cf:fb:d1:c1:c5:8f:60:c2:ac:b8:18:
                    76:9b:79:62:d6:b8:1d:d1:bf:8a:96:04:c2:09:71:
                    2e:b7:23:7a:41:b0:05:8d:d0:13:b1:94:49:5e:f5:
                    7e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:73:68:B7:7F:BC:E7:88:19:BE:F2:43:69:97:44:19:8D:2D:9D:BC
            X509v3 Authority Key Identifier:
                keyid:7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:de:5b:70:7c:32:e6:87:f8:f5:a9:08:6c:73:86:dc:91:ee:
         d9:bf:15:3a:2b:ad:e6:99:04:b5:ba:c0:67:50:97:4b:9a:93:
         61:e7:36:1f:a3:b5:88:c3:e4:07:db:ae:59:76:07:73:63:cc:
         3f:94:2b:d9:50:1c:50:0b:1c:e0:1a:55:76:6c:cf:98:e5:06:
         18:0c:08:45:d6:d7:55:1d:e4:ef:d2:83:91:f0:1a:45:f9:19:
         bc:a0:ee:0f:61:42:25:50:fa:90:15:56:dc:2c:1f:36:af:0e:
         65:96:ae:ec:7a:5c:b8:01:1d:be:28:77:c5:e2:49:56:00:7d:
         9c:97:5b:1e:ce:67:4c:a6:e5:7f:31:31:d1:72:73:07:ac:6c:
         bc:85:ca:e1:e6:d4:f2:45:00:4b:69:27:d7:a5:e4:76:7b:ac:
         61:96:08:93:e1:1b:fe:8e:7f:74:41:a9:86:08:f5:52:8c:d7:
         99:83:14:ec:0c:6d:d7:32:8a:2b:bc:a8:bf:8a:71:07:5a:bd:
         58:e2:38:d6:1d:1e:cb:06:e3:e3:9b:fe:8a:07:20:b6:ba:1e:
         32:61:68:9b:18:6f:d1:5f:4c:1f:d5:ca:a2:7b:cb:dc:ff:5c:
         5d:5b:37:8e:e9:62:22:50:67:89:94:49:65:c1:89:08:aa:a9:
         0f:bb:16:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:06:47 2025 by rpki-client