This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.mft
File:                     fujoTNwPSdrCk637XgSkkQjO1kY.mft (raw, json)
Hash identifier:          FfqJYVMqkauZs4P/wZvBMHaotB8FiRn9wgb6hLvP7kk=
Subject key identifier:   3D:E6:E8:90:72:5D:11:B9:AD:C3:6E:94:DE:F2:4D:2A:DD:46:11:5C
Authority key identifier: 7E:E8:E8:4C:DC:0F:49:DA:C2:93:AD:FB:5E:04:A4:91:08:CE:D6:46
Certificate issuer:       /CN=7ee8e84cdc0f49dac293adfb5e04a49108ced646
Certificate serial:       019AF12E48EB7D5A1CD04B285E8E8AE0EF79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fujoTNwPSdrCk637XgSkkQjO1kY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.mft
Manifest number:          073F
Signing time:             Sat 06 Dec 2025 01:02:13 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:13 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:13 +0000
Files and hashes:         1: Ovv3jRDadSuJuvhS-S0kK_fQ9ro.roa (hash: X1g4S0KOxzsTxSeEns4d0ko+VlZEXePzUj9xmUEL7Qw=)
                          2: fujoTNwPSdrCk637XgSkkQjO1kY.crl (hash: aj5JmxTPiHJrDu1Ui+v4XZp2i3OYnY41qtkXEsYeQS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fujoTNwPSdrCk637XgSkkQjO1kY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:48:eb:7d:5a:1c:d0:4b:28:5e:8e:8a:e0:ef:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee8e84cdc0f49dac293adfb5e04a49108ced646
        Validity
            Not Before: Dec  6 01:02:13 2025 GMT
            Not After : Dec  7 01:02:13 2025 GMT
        Subject: CN=3de6e890725d11b9adc36e94def24d2add46115c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:31:3d:1a:6c:71:a0:e6:6b:75:4f:40:0a:35:
                    8e:0b:cc:30:ca:09:47:ba:15:33:50:22:2c:e6:8d:
                    cb:1a:a8:32:f7:ae:d2:93:68:7d:3e:a7:2f:43:8a:
                    c2:93:0d:f5:70:14:58:50:d0:2a:2f:df:cd:c0:0f:
                    7a:93:78:e6:43:f3:bb:c9:39:b5:d2:ad:06:2a:80:
                    2c:b2:a3:e7:aa:1d:3f:37:86:65:45:c6:0f:a5:e5:
                    86:62:cd:8d:64:cf:d7:a0:20:5f:43:39:f2:c2:95:
                    ee:93:33:15:ee:5d:99:4d:57:5f:f5:5c:c7:44:8b:
                    09:59:cd:b6:52:bc:0c:53:35:51:59:84:7e:d1:16:
                    8a:c4:bf:ed:ed:eb:25:41:52:b5:55:b5:66:48:d8:
                    6d:76:b2:51:95:0d:04:91:30:6f:ae:62:3e:66:64:
                    79:b7:09:f6:c4:2d:c5:96:b0:cd:68:a4:e8:e8:36:
                    6f:e9:47:40:e2:6d:02:17:11:5e:41:79:32:af:ab:
                    8e:a3:df:2e:56:56:81:8c:0e:10:bd:bf:7a:e1:26:
                    3f:71:60:8b:2a:f8:d8:ce:b4:92:a9:97:11:2e:05:
                    ab:08:20:02:cf:b3:dd:93:20:04:36:c2:7c:a3:37:
                    46:21:83:82:36:40:b1:d5:e5:a6:0c:71:65:92:41:
                    26:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E6:E8:90:72:5D:11:B9:AD:C3:6E:94:DE:F2:4D:2A:DD:46:11:5C
            X509v3 Authority Key Identifier:
                keyid:7E:E8:E8:4C:DC:0F:49:DA:C2:93:AD:FB:5E:04:A4:91:08:CE:D6:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fujoTNwPSdrCk637XgSkkQjO1kY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:cf:2d:73:24:13:e0:88:b3:84:f2:d9:c4:7d:f9:18:78:dd:
         b5:a9:87:65:d1:89:e7:b8:26:c5:50:84:36:d2:52:cb:e0:ce:
         e6:c7:8c:28:f5:ad:65:a5:7a:d3:ee:b3:97:05:84:8e:d6:f7:
         e1:a8:26:c1:4c:e1:ac:fe:0b:4f:39:0a:a6:01:98:e8:02:13:
         e0:65:d8:69:26:7d:5e:04:d7:28:8f:d9:49:58:8b:ee:6f:f9:
         89:34:13:c6:dd:66:4a:3e:c0:fe:3f:4d:01:ea:be:80:aa:01:
         9b:32:94:ba:ad:28:7b:e5:05:93:d3:87:c0:b1:64:84:09:b4:
         91:28:1b:79:06:9f:23:69:ef:98:ae:27:46:83:77:09:d0:e9:
         62:48:52:49:20:52:4f:cc:cf:b8:db:bd:65:2b:60:17:bf:72:
         91:b9:b3:e2:03:30:3b:86:b4:c5:12:0e:f0:1e:60:8e:9a:f3:
         62:bc:74:0e:a9:41:9c:8f:24:02:fb:95:13:2e:0c:17:ce:0b:
         1e:29:ad:c7:ab:aa:f0:e4:40:3b:5d:91:ea:82:8e:1f:ce:19:
         32:bb:3a:28:65:66:6e:cf:0d:cd:a5:26:19:a8:a9:9b:a0:d8:
         7a:40:8a:db:75:2f:7c:53:2a:24:b2:ae:56:38:ce:e0:db:1d:
         62:e6:d6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:12:37 2025 by rpki-client