This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
File:                     fTBF_EkdOfUucUWxAAs7hsN97UU.mft (raw, json)
Hash identifier:          b/zr4xgZ5oQTH/Mvc2yw2QGYdQ/QurY2ZWZ9RPacItY=
Subject key identifier:   E7:42:C9:A3:00:EF:0F:17:79:61:ED:88:82:BA:CB:77:49:58:3E:75
Authority key identifier: 7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
Certificate issuer:       /CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Certificate serial:       019AF1D1E7AD68E722846D4A5596A63BBA17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
Manifest number:          175F
Signing time:             Sat 06 Dec 2025 04:00:56 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:56 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:56 +0000
Files and hashes:         1: K4Lbu-PRsMurt2fUpQp-WCgArbs.roa (hash: 3LSqxDqKlKKQa1qqql+RiI3DEtvgTxuB2Pprc5JwA8Q=)
                          2: bGmJuHKC9r9iVbyoDDsXdRaZNn4.roa (hash: cFv1Kx/hvA8sFFYnUpS91+Kz1exkjjuW0Zq9NwB3OSk=)
                          3: fTBF_EkdOfUucUWxAAs7hsN97UU.crl (hash: 4KOE+W1Q4HilW5pRn4iObxMKB67WJGN/bRCJukPZWTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:e7:ad:68:e7:22:84:6d:4a:55:96:a6:3b:ba:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
        Validity
            Not Before: Dec  6 04:00:56 2025 GMT
            Not After : Dec  7 04:00:56 2025 GMT
        Subject: CN=e742c9a300ef0f177961ed8882bacb7749583e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:67:81:cc:f4:31:80:36:8c:59:6e:18:3d:83:
                    c8:ce:3f:c9:4c:ef:a0:1e:68:e2:ff:b2:80:57:88:
                    36:dd:00:39:8b:39:c2:37:51:47:d2:4b:db:9a:45:
                    6b:eb:8d:0c:54:70:ef:54:36:96:6f:e2:9f:0b:f1:
                    d5:82:97:cb:0b:d2:a1:9a:c8:0a:da:db:a4:68:0c:
                    ab:14:5e:22:80:d9:0e:d4:31:a2:f2:1b:79:ad:ec:
                    06:c0:c7:a3:c8:5e:69:bf:77:28:25:45:67:a4:73:
                    fe:5c:03:2f:d2:ca:b3:49:fc:24:db:40:15:6b:58:
                    cc:62:50:42:43:1a:a2:68:90:6f:b4:5f:8e:19:fd:
                    32:59:f3:59:ba:b2:0f:12:13:2f:f9:f6:9c:be:c4:
                    18:e9:b2:43:83:ed:3e:21:8c:ee:e9:d0:2f:85:51:
                    3c:aa:8b:80:d9:80:10:37:72:a8:44:b7:37:c7:be:
                    86:ed:0b:95:72:f8:03:e4:12:d4:8b:54:a6:cc:9d:
                    22:8e:27:2b:df:b4:a6:4a:2a:fa:da:c8:e1:b1:b6:
                    5a:4d:41:03:dd:0a:85:72:c8:36:6a:46:42:90:a3:
                    00:fe:3a:73:e3:b9:9b:53:59:85:9d:56:45:9d:d1:
                    68:9a:ec:10:ed:80:49:6c:41:66:43:5e:e6:84:67:
                    67:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:42:C9:A3:00:EF:0F:17:79:61:ED:88:82:BA:CB:77:49:58:3E:75
            X509v3 Authority Key Identifier:
                keyid:7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e5:cb:69:50:cc:dc:c2:88:1e:25:c3:e3:7f:53:e5:1d:74:
         7f:f8:da:07:96:fd:12:e9:c4:e7:5c:a5:a9:b9:82:43:5a:aa:
         a5:c6:79:67:cf:1a:57:27:30:75:f0:e3:6a:ca:d0:93:a3:24:
         d3:df:34:34:bf:e6:2b:ed:02:ae:20:17:89:c8:da:af:11:c9:
         bf:b8:8e:df:7e:0f:c4:de:58:34:1b:00:5f:4f:17:e5:c9:f2:
         d2:6e:33:8a:08:c6:44:00:44:a0:eb:1a:3a:4a:9c:f4:f4:58:
         3e:97:08:77:57:38:08:6c:02:2d:d8:cc:e8:1b:db:3b:bf:af:
         1e:ba:8f:b1:37:10:36:50:f2:b4:67:e1:2d:d8:b1:64:9d:8f:
         68:bb:e9:93:73:c6:49:61:ea:68:b3:7b:f5:76:3c:29:f5:58:
         32:9d:e2:54:98:70:cb:19:ed:2a:a9:0f:d9:7c:8e:2e:23:ca:
         81:72:19:88:0d:bb:84:65:ac:91:d6:ff:26:ae:78:4b:1b:32:
         48:94:f0:74:7f:f7:c0:ea:3c:44:82:54:e5:bd:f9:e0:6e:cf:
         d9:f5:db:15:34:d4:28:d6:3a:65:6b:0e:b7:aa:25:26:95:b7:
         77:b0:25:8f:72:7d:5f:20:d6:b2:6f:97:5a:0d:ac:35:7b:78:
         6c:d5:7b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:56:08 2025 by rpki-client