This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
File:                     fsXxiW6aRDV8nXis831I9HgFINk.mft (raw, json)
Hash identifier:          +c1ynSZ0TmXR98FBZBg5gtLEVhi2JY/5MuppTcsW8yo=
Subject key identifier:   75:37:7E:A7:6C:C6:3B:2F:F8:F4:3E:1F:00:D8:20:34:1A:6C:B2:B9
Authority key identifier: 7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
Certificate issuer:       /CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Certificate serial:       019B2EFAF77A7BF3FB05D702976ACEAAA5B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
Manifest number:          1781
Signing time:             Thu 18 Dec 2025 01:02:37 +0000
Manifest this update:     Thu 18 Dec 2025 01:02:37 +0000
Manifest next update:     Fri 19 Dec 2025 01:02:37 +0000
Files and hashes:         1: fsXxiW6aRDV8nXis831I9HgFINk.crl (hash: i1ODRA1LjyxCifEPsIRRZv71iHRw0A0rxrEmmw/9Ar0=)
                          2: tIBVHEbpT3B92jmv17nHEdfPfME.roa (hash: F4q9q1phtloOjlG43lA2x7BlugORaBByvlUxXUgAa14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 01:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2e:fa:f7:7a:7b:f3:fb:05:d7:02:97:6a:ce:aa:a5:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
        Validity
            Not Before: Dec 18 01:02:37 2025 GMT
            Not After : Dec 19 01:02:37 2025 GMT
        Subject: CN=75377ea76cc63b2ff8f43e1f00d820341a6cb2b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c0:f6:44:f4:cd:2f:a6:bc:6c:5e:9c:a4:bc:
                    a8:94:a8:c9:43:3c:00:c2:36:ce:4f:a4:5e:8f:73:
                    ea:48:55:60:14:c9:eb:4b:b3:0e:bb:46:25:81:11:
                    96:92:cb:fc:79:8c:39:37:8f:e3:89:9f:3c:0a:4e:
                    6e:29:83:86:78:54:93:5a:6c:d5:29:6e:0c:ba:80:
                    cc:d0:be:f4:06:4b:d7:7d:29:e8:4c:33:4c:c1:22:
                    47:88:bd:37:1b:7c:08:3b:0e:9e:71:5c:60:32:7e:
                    1c:94:9e:b4:e9:7b:e3:4d:c2:c1:ed:61:b0:48:ee:
                    68:1d:e5:10:9f:40:4e:de:4a:43:bb:b7:b3:1e:bf:
                    79:4f:da:9c:a0:fa:35:15:e7:95:48:90:62:42:ec:
                    06:f4:6c:77:99:ec:30:05:17:3d:96:3d:34:20:10:
                    f3:71:b1:9a:f7:58:5f:26:62:fd:fa:79:44:48:ee:
                    ee:e6:8f:4c:66:17:ea:45:bd:d6:53:86:8e:fe:42:
                    bf:06:d2:81:ef:d3:12:e5:8a:d8:14:0d:77:4e:c5:
                    e4:6e:09:0f:25:99:95:c5:db:27:d0:94:cc:51:ed:
                    97:fb:71:92:98:eb:ce:21:54:4e:83:21:db:88:c4:
                    3d:f8:ba:53:17:54:a7:bb:10:03:4a:54:34:82:3b:
                    03:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:37:7E:A7:6C:C6:3B:2F:F8:F4:3E:1F:00:D8:20:34:1A:6C:B2:B9
            X509v3 Authority Key Identifier:
                keyid:7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:0e:61:82:27:29:fc:7e:f6:6c:4f:ee:2c:eb:5a:7d:b0:cc:
         b9:f9:78:e2:d0:34:97:ab:35:b6:02:f5:2c:4e:0b:7b:ad:db:
         a6:a9:ad:68:1b:ff:c9:bd:c9:ed:d7:c7:ad:36:8f:94:a6:c5:
         60:ef:ea:87:1b:10:86:3c:00:4e:ab:e8:31:63:87:af:f5:96:
         a9:99:81:10:24:11:d6:51:8e:5c:10:2d:8a:c7:2e:70:fb:98:
         e4:fe:f1:d5:c4:b2:e4:fd:e6:67:65:b4:15:86:0e:96:9a:c0:
         15:cf:68:65:8a:ad:3c:57:61:80:7f:fb:b9:3b:27:e5:ba:2e:
         a9:31:37:17:ba:0c:83:5a:b5:1f:26:03:5a:79:81:0c:46:15:
         43:e2:4b:c7:77:aa:51:87:d8:ec:8c:b9:a3:4e:40:5c:cd:f4:
         e7:15:33:97:15:38:1d:aa:c4:2a:52:eb:66:e0:d1:24:bb:9b:
         02:36:40:96:0d:f5:42:d8:6e:2c:2d:50:a9:32:9d:07:c2:ba:
         f1:05:db:12:7a:e8:ff:73:27:c9:9a:f8:8c:21:10:f2:ec:e6:
         10:53:55:eb:dc:bb:02:a6:73:b1:8d:35:74:75:72:19:72:5d:
         5c:b0:fa:70:57:d5:77:b9:05:b0:06:82:38:43:c8:98:38:2b:
         3a:33:ef:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 08:19:40 2025 by rpki-client