This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
File:                     FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json)
Hash identifier:          XYubupQveu/2n43nGKLROR3YJwceu/KFQOte5qLYiVQ=
Subject key identifier:   CC:16:67:5A:30:DD:B5:44:87:70:E3:D9:C9:FB:81:7F:1F:AA:B3:12
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Certificate issuer:       /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial:       019AF2ADC57EEF83D5629611AC22A83020CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
Manifest number:          1776
Signing time:             Sat 06 Dec 2025 08:01:05 +0000
Manifest this update:     Sat 06 Dec 2025 08:01:05 +0000
Manifest next update:     Sun 07 Dec 2025 08:01:05 +0000
Files and hashes:         1: 08gO2xhzYB9MrOPyUgzVPTFsEks.roa (hash: uuTu5Ilmhz+ZTWX0lT3lDAgUnguN/hhWVP6RiQFWbO0=)
                          2: 2WvVwy-PRL5GLrJD80GhjHcE31U.roa (hash: V+gab5/KP1zLki+Ce4a8elUju3qZMThRlJep3bHdmjU=)
                          3: DlttiF7sTnpZBCWr79VnOWAb-Cw.roa (hash: 1I+LBYXesIZu1L3F5YYgW1sIY18eU3XqF+UKWnyiXM4=)
                          4: E_7lfxRnXL43BaxS0BR35ae28-8.roa (hash: bsdbl8+gmpOB2GMwRa9PUSXIwKLCbxh9y6aoGWsrfmA=)
                          5: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: dssJ1vyABNipXgX46FDVIjNVAiFSRLbuYTuYEsn80r8=)
                          6: FYYHYUGoGvN1v8iZEsvIMUiBDuc.roa (hash: 5TNc2AIFURoGMvX0XYbEM3UC8FEruKwZsC3SRf2KaGU=)
                          7: G-5B6YeJ2OAL5vWCYn9oGob6FBk.roa (hash: wzpNaRep9vHFkuM4ho/JF0i7it8caDtKDv8qyIaqtG8=)
                          8: LVCOq86MWXkEBLGlXajn0ZENzKo.roa (hash: za/dFUKCElp0tRhTQ1rRsumZkCaRLeXmcSoTGiaBfbk=)
                          9: MRT2LF_aEOeFlu0z18oRZu0OKoQ.roa (hash: RWWOAldqVltxk1TROg2IYHHxbCDwXOV9TETvXzcXc50=)
                          10: RS51aQgOg2IG7Kd3gYmS2BKt-mo.roa (hash: 04jNZ5D66dkBNT8VoJCjjfzY2tYl+DQ4VUJcAaUENu8=)
                          11: UkVGZcePqwW-KxvbBYt50liz4UM.roa (hash: HUtG9jf1oU5Vm0ZUnGnbYEpFmR4EvSJFZLnuUG/MWnk=)
                          12: bKyX5SG6DyCqJiQSkFdqFjg1o-E.roa (hash: yT9Yzf+uBBeDkqte+YCfH3PUHF4dkiH/zoa5XVP6GqA=)
                          13: kVpC8L3NVBoBD0uRMCZwUe0L0hI.roa (hash: ZhoOhvNlGipJNbOy/H0tyIYa78nFkIWP7NHbAfT2b3I=)
                          14: uqIp0R_dvDEsqpriRwcj3sItHGw.roa (hash: 0M8ijVLRqjXM3pBRfR1epwx7A0hp1U4azXVWoA9LspU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 08:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:c5:7e:ef:83:d5:62:96:11:ac:22:a8:30:20:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
        Validity
            Not Before: Dec  6 08:01:05 2025 GMT
            Not After : Dec  7 08:01:05 2025 GMT
        Subject: CN=cc16675a30ddb5448770e3d9c9fb817f1faab312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0d:aa:73:19:28:3e:33:cf:37:60:58:d9:f6:
                    cc:b7:56:f4:b8:79:7d:67:b1:8f:86:85:22:2d:1e:
                    f5:b4:ba:4d:6e:95:46:75:8e:26:ba:3d:4e:5c:fe:
                    5d:36:60:ed:ac:ab:74:27:65:b0:58:5f:36:6b:55:
                    93:fa:c1:fd:9f:a2:4f:8c:a2:e8:84:d8:7f:10:61:
                    d0:5c:55:2e:4d:51:05:f5:84:8a:4c:12:89:ff:40:
                    8b:3c:47:86:83:1f:e2:b3:4f:c6:56:c4:83:23:dc:
                    a5:b3:c2:cf:57:f7:df:53:ad:97:26:13:73:10:8e:
                    0e:37:ee:84:17:02:de:ea:73:b2:32:f6:d1:f7:4a:
                    6d:b3:c9:99:cc:5b:40:8b:5a:98:45:56:25:ed:c1:
                    c6:4f:a8:a9:42:a7:6f:3d:e3:d2:46:8b:38:38:bc:
                    1c:26:1c:5c:41:f8:a6:4f:55:6e:ec:b9:18:20:3b:
                    3d:b0:6e:42:f3:6e:cd:09:bc:12:c7:67:40:ba:ec:
                    7a:9a:14:f7:11:a1:f0:bf:18:dc:96:c1:dc:a4:32:
                    a0:e1:ca:e3:52:7d:8b:d4:01:3a:e1:2d:14:18:88:
                    62:4b:91:e6:73:ea:81:6f:b4:92:5c:f3:e4:70:39:
                    18:59:8f:d0:2a:fd:71:53:87:4c:08:ce:eb:0d:d6:
                    f5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:16:67:5A:30:DD:B5:44:87:70:E3:D9:C9:FB:81:7F:1F:AA:B3:12
            X509v3 Authority Key Identifier:
                keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:83:e9:9c:90:51:73:98:1c:b0:36:78:91:02:86:da:30:a5:
         c2:82:70:a9:52:6f:a0:f5:6f:cf:5d:7a:52:b3:ee:f6:c8:b1:
         cb:27:19:63:99:68:0e:8d:df:01:37:eb:1d:42:af:6b:d9:70:
         b0:93:8a:26:b3:de:c6:c1:2f:87:41:ce:5d:72:4e:61:1c:ff:
         60:14:ae:66:0b:4c:08:1f:35:ba:dd:10:53:c5:a0:d2:98:9d:
         81:fe:0c:86:38:42:0c:73:c9:30:50:b6:8d:e4:c2:77:9b:e3:
         d6:d4:11:e5:25:f8:87:00:ed:26:38:97:f2:b1:97:5a:00:63:
         03:1f:9a:02:77:04:05:0a:ce:16:51:c5:a6:61:1e:f7:a7:84:
         81:b4:4e:f4:19:67:54:c5:cd:71:02:82:96:6a:cf:b3:04:a3:
         55:ce:3c:1f:fd:7d:44:fe:79:40:15:4e:a2:7b:be:6c:de:02:
         a2:e9:b9:b7:8f:31:58:46:da:62:1b:be:9d:cb:28:de:bf:d8:
         36:5c:c0:d7:e7:cb:1c:df:53:e7:00:51:14:74:73:d6:29:8d:
         8d:a4:4a:0b:dd:d5:b1:90:04:9d:5b:cf:10:36:91:67:12:4f:
         26:8f:3d:fc:d3:0d:58:7a:ed:94:d8:c6:1f:cc:80:be:e9:2b:
         18:4b:b6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:40:06 2025 by rpki-client