This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
File:                     fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft (raw, json)
Hash identifier:          q+DmdlubGutKB9oH9Q4QX3AJKGCLP79ES0PTE6uWHWU=
Subject key identifier:   18:C3:3E:F6:37:69:06:DC:8D:44:80:22:48:12:86:98:D5:A0:0B:2E
Authority key identifier: 7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7
Certificate issuer:       /CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
Certificate serial:       019AF208FA44004F88987290003F888631AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
Manifest number:          176E
Signing time:             Sat 06 Dec 2025 05:01:05 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:05 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:05 +0000
Files and hashes:         1: W2BuG8RslZuNWC6TDHZNFeUTCEY.roa (hash: +B77DKlelA4p5jWRpiPjtjH8suz5E4rMKyxyDqtqToM=)
                          2: fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl (hash: QbmWHJuNYjiv5hwX5Kfg3QLgvm6sL0WwzMnGy67RtU8=)
                          3: z4oor_anfKvF8OJgHq78qxzauZw.roa (hash: Av1Epao40j1p+xBtHh/bygdrMOec+Urn13J/fU6v3Ag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:08:fa:44:00:4f:88:98:72:90:00:3f:88:86:31:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
        Validity
            Not Before: Dec  6 05:01:05 2025 GMT
            Not After : Dec  7 05:01:05 2025 GMT
        Subject: CN=18c33ef6376906dc8d44802248128698d5a00b2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3c:ca:4b:25:48:15:16:d8:a6:5d:8f:bb:0e:
                    f7:8c:4b:c9:67:c8:43:a6:f3:42:73:69:de:26:af:
                    14:a2:23:0a:d5:80:b7:14:fe:bd:ae:9d:7c:32:e8:
                    6b:44:b8:dc:11:1f:c2:48:d9:02:ea:5e:2a:6c:0a:
                    c3:44:ba:69:2d:51:8f:57:a6:12:70:8a:d4:34:b8:
                    2a:7d:66:47:82:08:00:39:68:5b:75:9a:79:34:44:
                    19:dd:34:ec:86:86:ae:21:e5:bb:e9:44:d9:8f:ee:
                    5b:66:ad:a8:7d:09:4a:de:ec:b5:11:d1:45:96:d0:
                    03:8f:f7:8d:23:e7:fc:69:c8:33:d4:b3:d7:af:eb:
                    c4:15:88:aa:95:1f:fc:ae:86:de:09:68:b8:00:00:
                    e0:ed:18:b5:0a:22:1d:26:44:fb:10:de:fd:4c:59:
                    65:99:90:3f:f8:39:c5:ea:2b:42:54:7b:a4:fe:ca:
                    11:0a:d5:ba:8c:61:b6:d1:5a:34:bb:d8:8f:69:88:
                    b0:7d:16:cc:0b:64:6a:6c:5a:40:dd:bc:d3:eb:d8:
                    31:08:78:3e:68:76:5a:e3:68:a3:78:f2:2b:ff:28:
                    50:a7:eb:ae:32:ea:77:96:16:f4:09:2e:a9:32:f5:
                    2b:69:5c:1f:dc:9d:b3:95:63:48:9d:20:f5:a7:b0:
                    5e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C3:3E:F6:37:69:06:DC:8D:44:80:22:48:12:86:98:D5:A0:0B:2E
            X509v3 Authority Key Identifier:
                keyid:7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:fe:d8:c7:e5:a1:71:55:fd:27:56:77:90:1d:fa:c0:01:22:
         82:a4:02:81:18:37:9a:05:41:03:ee:2f:cd:f8:f2:84:9a:73:
         0a:29:e6:88:bb:b9:12:ff:cc:34:f8:dc:eb:b3:34:0b:4e:d1:
         14:b2:db:2b:ee:ae:b8:2a:b6:49:78:5a:2f:47:8d:71:d8:6c:
         4f:db:dd:b1:e8:ef:14:cd:4b:9a:1c:df:3b:74:e0:eb:4d:c7:
         b2:23:b3:97:a7:de:4f:09:8c:13:f9:cd:b5:66:41:1d:54:e3:
         6f:ce:96:52:2d:f0:03:df:08:a5:0b:73:7e:53:74:7c:53:bc:
         86:9b:be:c5:be:9d:95:f7:ee:db:82:5d:b7:0b:01:5e:bd:9a:
         96:6b:34:f7:64:2f:b8:1c:96:00:d7:90:5d:d9:63:43:5f:8c:
         8d:03:35:4d:5b:ba:4c:c0:91:7e:4a:82:e4:0f:be:09:1f:a4:
         db:27:09:3b:77:10:16:f8:5b:dd:40:75:af:44:8e:89:e1:21:
         2b:b4:1d:ac:07:c5:6a:9a:ed:fd:a2:de:4a:db:68:00:64:09:
         4f:fa:e9:08:db:bd:22:28:11:46:c4:52:05:d3:9b:11:7d:6c:
         67:d9:1c:90:02:45:51:c2:48:1c:1e:7a:dc:e2:c5:5f:74:42:
         4d:fd:71:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:37:02 2025 by rpki-client