This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
File:                     fj-4U_hAs3cM0_pCs_nS-b59G38.mft (raw, json)
Hash identifier:          cYaxyq39TPtfhP1ej0liRTDTDJBNwy09bjWn09Xfo9A=
Subject key identifier:   13:4E:33:CC:25:86:2D:16:AC:18:A7:84:DB:C9:DB:8B:90:8E:3D:4C
Authority key identifier: 7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F
Certificate issuer:       /CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
Certificate serial:       019AF12E0132A6A8F472608862FBF6F694D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
Manifest number:          1613
Signing time:             Sat 06 Dec 2025 01:01:55 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:55 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:55 +0000
Files and hashes:         1: fj-4U_hAs3cM0_pCs_nS-b59G38.crl (hash: NeuriAtlSJXQmfiLdtLkpF/vDgUNcxRie0SKR7dAjB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:01:32:a6:a8:f4:72:60:88:62:fb:f6:f6:94:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
        Validity
            Not Before: Dec  6 01:01:55 2025 GMT
            Not After : Dec  7 01:01:55 2025 GMT
        Subject: CN=134e33cc25862d16ac18a784dbc9db8b908e3d4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:02:44:91:58:8b:ec:74:e0:5a:d8:a1:04:19:
                    a2:ad:b7:37:39:08:cc:96:8f:cd:0d:d9:87:4f:b0:
                    0c:7d:ec:8b:b2:2c:45:ca:bd:84:03:79:a9:80:f9:
                    72:0d:22:56:10:5a:46:b8:7d:42:1a:73:44:c2:18:
                    fc:05:29:7d:f8:92:e8:2c:b7:94:82:55:8e:c5:c2:
                    9d:a6:53:b1:18:64:7a:51:3b:e4:35:8d:54:6c:9f:
                    f9:2b:d6:91:4e:d9:7a:f0:c7:e5:6c:b8:03:75:e2:
                    67:9a:57:64:b1:24:9b:82:1d:00:77:bc:5f:48:b5:
                    72:76:50:91:68:5c:75:65:ba:68:b7:ff:96:e2:ed:
                    e5:b4:fe:f1:d8:c2:7e:3d:44:63:de:e9:3e:7a:d6:
                    13:54:23:7d:39:41:a6:ac:9e:ba:d8:35:40:38:ee:
                    55:0b:ba:93:13:39:3a:55:47:28:5f:07:80:0f:9f:
                    70:77:10:7e:05:03:37:26:56:7a:a2:5e:3f:85:de:
                    9a:e1:2a:d2:c3:45:17:dc:01:b7:98:73:b3:9e:ee:
                    ce:3b:bb:ff:e1:21:df:65:8e:06:a9:06:97:4d:3e:
                    45:46:1b:35:20:ac:30:e8:ad:b4:2b:33:7f:3e:b2:
                    3b:11:9e:bf:b6:f0:e2:20:01:e4:5b:f9:a1:68:0d:
                    ec:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4E:33:CC:25:86:2D:16:AC:18:A7:84:DB:C9:DB:8B:90:8E:3D:4C
            X509v3 Authority Key Identifier:
                keyid:7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:4f:e1:d9:ef:6d:0f:e5:70:22:d0:dd:3a:8d:c0:7c:a2:44:
         4f:96:f3:18:f4:da:bb:b0:86:fa:fb:c0:33:d7:bb:d2:a2:45:
         2d:ab:3c:5c:e0:14:7c:28:fe:cc:43:dc:f8:c8:1b:e9:36:f9:
         14:2b:7d:46:bd:53:45:dd:d5:79:84:27:b7:a9:ec:3b:32:94:
         18:70:b8:90:71:12:82:4e:bc:3f:41:06:27:f6:da:0b:d9:6d:
         f0:fb:72:96:c9:4b:94:ae:94:ec:65:eb:90:58:e6:93:2d:6c:
         df:23:4b:2c:12:16:ef:6b:8f:0d:6e:a8:6a:85:fe:19:8e:ab:
         5f:bd:66:a3:9a:9a:7b:44:ee:ea:ed:7c:9a:52:22:9f:ac:b8:
         21:33:78:85:6e:cc:2c:cd:c3:87:e5:c4:73:40:82:cb:0d:57:
         51:de:80:69:bf:79:4c:af:62:b0:e1:e7:eb:9d:b3:80:83:2a:
         b3:7f:03:86:7e:ba:fc:0f:12:31:1b:0f:60:aa:5e:2d:b3:e0:
         ca:ac:b6:6d:d0:a9:f5:fb:4e:f8:6e:2e:8f:c4:c7:9b:46:f4:
         39:e9:dd:dc:bf:9c:ae:c1:66:91:df:2f:bc:79:cc:93:3a:5a:
         34:d2:d0:94:38:9b:b9:38:4a:a7:c2:d3:bb:62:22:6f:4a:4b:
         e6:c0:92:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLgEypqj0cmCIYvv29pTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlM2ZiODUzZjg0MGIzNzcwY2QzZmE0MmIzZjlkMmY5YmU3
ZDFiN2YwHhcNMjUxMjA2MDEwMTU1WhcNMjUxMjA3MDEwMTU1WjAzMTEwLwYDVQQD
EygxMzRlMzNjYzI1ODYyZDE2YWMxOGE3ODRkYmM5ZGI4YjkwOGUzZDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgJEkViL7HTgWtihBBmirbc3OQjM
lo/NDdmHT7AMfeyLsixFyr2EA3mpgPlyDSJWEFpGuH1CGnNEwhj8BSl9+JLoLLeU
glWOxcKdplOxGGR6UTvkNY1UbJ/5K9aRTtl68MflbLgDdeJnmldksSSbgh0Ad7xf
SLVydlCRaFx1Zbpot/+W4u3ltP7x2MJ+PURj3uk+etYTVCN9OUGmrJ662DVAOO5V
C7qTEzk6VUcoXweAD59wdxB+BQM3JlZ6ol4/hd6a4SrSw0UX3AG3mHOznu7OO7v/
4SHfZY4GqQaXTT5FRhs1IKww6K20KzN/PrI7EZ6/tvDiIAHkW/mhaA3sUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNOM8wlhi0WrBinhNvJ24uQjj1MMB8GA1UdIwQY
MBaAFH4/uFP4QLN3DNP6QrP50vm+fRt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmotNFVfaEFzM2NNMF9wQ3NfblMtYjU5RzM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZGRlYWUtYjU5Yi00MWJiLThmZDYt
MTYzZjBlMDc3ZjIzLzEvZmotNFVfaEFzM2NNMF9wQ3NfblMtYjU5RzM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9lZGRlYWUtYjU5Yi00MWJiLThmZDYtMTYzZjBlMDc3ZjIz
LzEvZmotNFVfaEFzM2NNMF9wQ3NfblMtYjU5RzM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdk/h2e9t
D+VwItDdOo3AfKJET5bzGPTau7CG+vvAM9e70qJFLas8XOAUfCj+zEPc+Mgb6Tb5
FCt9Rr1TRd3VeYQnt6nsOzKUGHC4kHESgk68P0EGJ/baC9lt8PtylslLlK6U7GXr
kFjmky1s3yNLLBIW72uPDW6oaoX+GY6rX71mo5qae0Tu6u18mlIin6y4ITN4hW7M
LM3Dh+XEc0CCyw1XUd6Aab95TK9isOHn652zgIMqs38Dhn66/A8SMRsPYKpeLbPg
yqy2bdCp9ftO+G4uj8THm0b0Oend3L+crsFmkd8vvHnMkzpaNNLQlDibuThKp8LT
u2Iib0pL5sCSPA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:24:36 2025 by rpki-client