This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
File:                     fruIjyuZ3ply4kRuugWKuOLNez8.mft (raw, json)
Hash identifier:          FtZ2WwaYG1tfiJScLL9O+hGG8apTk0hJmDdpYDZaz7A=
Subject key identifier:   26:1D:25:FB:BD:A1:12:6B:89:E2:CB:B0:95:EA:53:66:C4:F2:DF:BE
Authority key identifier: 7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F
Certificate issuer:       /CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
Certificate serial:       019AF23F7E7B489DDCD271393431B1F32776
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
Manifest number:          1769
Signing time:             Sat 06 Dec 2025 06:00:38 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:38 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:38 +0000
Files and hashes:         1: JN5O0QCPrYg2gGsd5bY4WvuMm88.roa (hash: Fx9qqqMuryeKb6+Rb+Dr8zIFkW7rIV44uKPsq4V2Qsk=)
                          2: bAMnl2_6RRTmNV4zQKgmKBPIhlw.roa (hash: V9YqmjnltEXUALOTq/OVrSw9uYwMaY1gDtJwBPznHa8=)
                          3: fruIjyuZ3ply4kRuugWKuOLNez8.crl (hash: jpcuq8geukNubaJ7gY5lyPdHmwpvC4XOTh9CjlC3MMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:7e:7b:48:9d:dc:d2:71:39:34:31:b1:f3:27:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
        Validity
            Not Before: Dec  6 06:00:38 2025 GMT
            Not After : Dec  7 06:00:38 2025 GMT
        Subject: CN=261d25fbbda1126b89e2cbb095ea5366c4f2dfbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:78:b6:b2:bf:cf:05:1b:60:62:ac:23:01:dc:
                    d8:68:ac:37:4a:f1:ea:79:e6:ff:ef:a9:58:5c:0e:
                    0e:5e:1b:89:e3:6a:1e:70:e1:b4:a2:1a:a9:5b:c7:
                    fb:fa:b1:fe:41:22:05:61:ff:4f:e3:cf:7d:7b:37:
                    07:cf:30:ee:75:c5:6f:e1:6e:ba:6e:6e:70:e9:c6:
                    6b:4f:9c:b2:f2:41:5e:81:2f:4f:80:21:95:c4:ce:
                    b4:ae:e9:e3:d9:9f:f6:ba:b3:23:2c:79:07:6e:7d:
                    57:82:14:21:ac:27:9d:0e:8a:3e:e1:7e:6b:79:d2:
                    8a:f6:f1:c4:73:d0:16:87:50:19:84:86:c3:55:91:
                    67:90:8b:9d:80:94:f1:f3:41:21:30:6a:09:e1:c4:
                    ea:39:23:1a:95:4f:3a:60:b3:b3:f4:d0:0d:8d:90:
                    49:ed:f5:55:be:0f:72:7e:ac:b6:ad:74:d8:f7:a2:
                    6c:c2:57:83:b3:94:9a:90:af:c4:ec:d7:9b:b8:4c:
                    8c:84:9b:39:b7:f4:04:86:3b:64:a0:84:bc:fd:84:
                    61:ca:22:48:58:a8:4f:c9:e9:05:ad:67:7d:8b:d5:
                    32:62:4d:41:ae:51:41:37:47:e1:06:70:ed:7b:c7:
                    b7:95:dd:c6:70:96:d4:52:5f:d0:fe:e5:48:ca:11:
                    63:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1D:25:FB:BD:A1:12:6B:89:E2:CB:B0:95:EA:53:66:C4:F2:DF:BE
            X509v3 Authority Key Identifier:
                keyid:7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:a1:a1:a7:dc:b8:07:c6:b7:ea:80:f6:f2:c0:22:f9:27:2a:
         e8:cf:b6:a0:46:cc:fd:ea:c1:59:72:0e:f0:47:30:68:91:0a:
         71:3c:94:a3:09:90:19:59:a8:3b:9e:db:0e:e1:c4:db:dc:62:
         74:fd:a9:c2:21:cf:ed:e7:5b:40:ce:66:90:1c:9f:bc:3a:93:
         37:a0:95:23:1d:ba:65:0d:02:7c:16:d4:dd:00:7b:4f:4d:df:
         49:49:e9:2f:45:cf:8d:a9:eb:88:85:fc:0d:b4:cd:38:dd:b0:
         37:e9:bc:7c:87:bf:4d:9a:2a:b9:d2:84:89:50:70:ab:67:31:
         c4:48:df:a8:a5:11:66:8e:0e:26:d2:ee:63:7a:02:71:28:73:
         1c:7c:98:f0:9f:45:9c:f5:96:16:55:66:2d:7b:fc:19:b5:f1:
         71:fc:b0:ae:ba:8c:8d:20:94:e5:33:49:f6:87:94:7a:73:ae:
         41:9d:85:b6:55:b9:0a:63:6e:51:1c:29:b1:e4:0c:46:b9:54:
         e2:9a:0f:6f:74:ba:6c:c7:fc:c6:e1:15:2c:ce:29:01:4f:9d:
         3f:be:a7:6e:0e:cc:38:5f:27:d9:f6:2b:4a:ac:44:d2:01:04:
         19:28:25:32:35:fa:41:13:c4:1e:7b:71:cf:f1:0b:a1:31:a1:
         11:43:af:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:37:56 2025 by rpki-client