This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
File:                     FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft (raw, json)
Hash identifier:          XkTc0q78tqscGQfP2hYVogBlmAJET9EevtRlFOXWyXk=
Subject key identifier:   E8:F0:68:62:0C:02:0F:23:FB:06:A8:E0:F7:64:05:68:F9:7A:93:08
Authority key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
Certificate issuer:       /CN=1662cfd26eccf289757399cc99c17d1cb4357535
Certificate serial:       019AF1D1E1260561167F2A477E37D720D5B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
Manifest number:          16C2
Signing time:             Sat 06 Dec 2025 04:00:54 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:54 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:54 +0000
Files and hashes:         1: DCNKSj1_5YHNKhsqvaqolZH_B60.roa (hash: TXy+j47cDCmczgpA/MrIE9kmjblkjLGkgY8O20y42aY=)
                          2: FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl (hash: U+AkCb9xHcRxnBEOI3ldIBCLDIYRptNLO+DYKnPKADI=)
                          3: JvuO5YaPjLFf0HZP4H-1yUabiMY.roa (hash: +Bx+7z+E11mxbukF+AWlKTGcSTRDPcpqMiJ/UPsOhzE=)
                          4: O-lMv2utgSL0sF15RsiGk9rGqhU.roa (hash: 4uJaHT6rWS3qzpOxWgNId7Ke0ps1U1qLVv6t8Kfw/Vs=)
                          5: O0m6rpxbshw5KyfbV3Df-u5gpAw.roa (hash: K3VIPCSpjhR1Ioq4yukkhoTaNVjKptpkSTwyxyPzC1Y=)
                          6: gJdvURE1CiuF2RTlrllA5EaJUA0.roa (hash: QQc8DdjtzLaI++nEpaA6R37pPd4UQFAmh/VqOKkxVE0=)
                          7: sPgmpLyF_PKafpXcgtR7FvsC9bY.roa (hash: sMp8sjJ9YjMshoV/D5bSKKVpPxzHt4F0frkmzXOCA3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:e1:26:05:61:16:7f:2a:47:7e:37:d7:20:d5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1662cfd26eccf289757399cc99c17d1cb4357535
        Validity
            Not Before: Dec  6 04:00:54 2025 GMT
            Not After : Dec  7 04:00:54 2025 GMT
        Subject: CN=e8f068620c020f23fb06a8e0f7640568f97a9308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8b:f7:77:12:8e:de:a9:11:ca:6c:c6:fd:eb:
                    8e:f6:0a:ef:78:a8:97:8a:4f:d4:95:24:93:e9:08:
                    aa:55:29:8f:1e:38:74:54:b6:ed:26:53:48:c3:6d:
                    bf:cc:0f:ed:ef:5b:2f:0d:39:bb:c3:f1:a5:f9:4b:
                    14:d5:0c:62:0d:6f:aa:a6:f3:7f:75:f3:18:3f:32:
                    fa:60:9e:75:b3:b5:04:61:f9:91:0b:69:12:31:f2:
                    ff:a0:57:c6:bf:99:99:0d:e3:89:35:68:9d:2c:17:
                    9e:ce:77:f7:04:92:6e:1f:3e:fc:3f:06:72:57:fa:
                    f4:b7:ae:d3:12:68:01:bd:1b:08:3b:9a:4d:ae:97:
                    50:5d:e9:03:4e:5b:bf:b1:c3:da:92:c2:e7:7d:89:
                    b5:76:69:99:73:c6:cd:bc:93:84:e5:60:fc:ea:f8:
                    bc:ef:33:74:02:0b:4f:47:d1:fd:df:5d:04:c1:78:
                    4e:1f:a4:6a:48:41:d5:eb:cd:07:ab:aa:b1:ab:f1:
                    4e:fc:81:29:dd:70:5b:9b:e4:8b:85:5b:07:3c:69:
                    e3:1a:1d:30:2c:32:46:d8:7b:19:bb:64:b0:b9:d9:
                    9b:e6:6c:fc:0d:08:ad:37:f4:58:26:4b:39:a0:07:
                    cc:20:17:3b:90:13:7b:66:8b:f7:f0:08:e4:42:aa:
                    fe:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F0:68:62:0C:02:0F:23:FB:06:A8:E0:F7:64:05:68:F9:7A:93:08
            X509v3 Authority Key Identifier:
                keyid:16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:15:bb:5b:db:95:4a:eb:84:2f:82:31:1e:e1:02:ff:66:9a:
         b0:4a:a5:b9:b0:92:37:cb:82:ad:36:25:c1:ea:fa:83:4d:57:
         99:f4:3a:e5:1f:a4:92:71:81:48:bf:8a:f0:b1:5b:91:a4:6c:
         50:a2:e2:e6:6c:ab:19:e8:25:5e:9d:26:bf:ac:14:22:20:5f:
         05:9a:ff:30:f9:aa:87:74:a6:9a:13:20:8b:a7:66:91:8b:2a:
         58:8e:17:68:80:62:09:87:b7:a6:c0:8b:32:68:6f:da:13:20:
         f0:0d:23:f8:c5:94:61:9d:85:dc:b9:00:4e:db:ec:fc:f8:ac:
         84:59:c0:b9:ed:5d:19:70:6a:82:5e:1f:c9:89:6b:c1:87:51:
         0e:b2:de:ca:c0:79:fd:fe:6b:eb:47:90:db:ae:d7:06:4f:9d:
         c9:cf:d6:10:05:be:76:03:2f:08:1c:04:b5:e8:95:6c:60:b0:
         97:27:18:5e:98:8c:78:2f:30:70:93:97:a5:1e:fe:a7:1a:49:
         c7:69:8a:84:3c:0d:bb:90:c5:84:02:e7:bc:a0:ab:da:23:0a:
         c0:c0:df:bd:fd:44:2b:24:e6:94:6f:45:4c:aa:fc:3e:7c:07:
         48:9e:b0:e1:39:93:90:81:7b:45:6d:d4:c9:56:69:d9:e1:ed:
         52:77:06:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:13:45 2025 by rpki-client