This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
File:                     flVV8aLO6JtxNGVghvBU15Y1PB4.mft (raw, json)
Hash identifier:          zdP+xKeoAs7Qnvwk+r9jhNrxRh4R4dyX3Z3jCiKnyUs=
Subject key identifier:   D6:C0:EA:F5:24:85:A9:31:38:08:79:C1:FD:92:43:2F:A4:23:B9:CC
Authority key identifier: 7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
Certificate issuer:       /CN=7e5555f1a2cee89b7134656086f054d796353c1e
Certificate serial:       019AF0F5D80C2149FCFFE29C1466D78E7954
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
Manifest number:          1766
Signing time:             Sat 06 Dec 2025 00:00:34 +0000
Manifest this update:     Sat 06 Dec 2025 00:00:34 +0000
Manifest next update:     Sun 07 Dec 2025 00:00:34 +0000
Files and hashes:         1: 0JqunmMBjEmd1A-HgkE4JsYwvvg.roa (hash: S7pQ47ggIC3jlvfHhUSFNbRX+v6ZCpTaVmICGgx3JLA=)
                          2: KqK95kA_OeRU7nACiSd3lAze0vY.roa (hash: B7AMB5/+VeIa1+pxAsGTh2RB/UvVZMPeKnxdMUh4GP8=)
                          3: flVV8aLO6JtxNGVghvBU15Y1PB4.crl (hash: Ccj2r7fxR4qPCA+zhK+nIv1adcPs/Zz4TYC4ivJ1L/A=)
                          4: vd2pBoJBZhf5P4J8dtMG91g6Jt4.roa (hash: rtCqRJvAHr3CK7C32hUZPO+hSIBq5AQ/a8C+367rDXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:f5:d8:0c:21:49:fc:ff:e2:9c:14:66:d7:8e:79:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e5555f1a2cee89b7134656086f054d796353c1e
        Validity
            Not Before: Dec  6 00:00:34 2025 GMT
            Not After : Dec  7 00:00:34 2025 GMT
        Subject: CN=d6c0eaf52485a931380879c1fd92432fa423b9cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:10:05:37:bc:49:2f:b2:6f:3c:ad:ba:24:57:
                    32:29:ee:74:c8:8f:15:ab:d3:06:92:76:f8:2a:7e:
                    1c:9e:ba:26:c2:7e:b1:5c:5d:05:a6:e8:31:ad:25:
                    7d:36:66:7a:77:2d:05:b8:92:34:b0:72:e5:b5:2c:
                    90:93:24:8f:cc:ce:2e:a3:d4:1f:a6:67:21:e5:e9:
                    ab:d6:e2:4a:86:0c:da:e8:84:9c:18:04:71:69:8e:
                    71:a5:59:bf:70:8b:56:82:b8:6e:79:e3:fe:d3:4a:
                    e2:6c:1f:00:04:e0:ee:4d:5b:33:f4:6c:a1:36:7f:
                    f3:6f:fe:9a:43:40:4b:6b:80:35:fb:39:92:0b:9a:
                    0b:e1:5b:06:95:04:ac:7d:ce:a8:5a:41:03:fa:c7:
                    05:86:69:77:3b:19:5c:a8:ce:a6:7e:10:38:b1:26:
                    f7:0c:ad:30:9d:c6:b6:f2:f5:a2:3b:83:14:7c:8e:
                    76:ee:a1:30:91:e0:6b:09:86:d2:67:51:44:64:4b:
                    c3:d1:fc:87:90:a0:b7:88:6c:66:27:99:36:0e:eb:
                    16:46:79:81:bd:a6:ec:62:c4:76:06:c9:84:1e:69:
                    5d:22:2d:5f:57:a8:7e:1b:a8:35:0f:42:2f:4c:e0:
                    d4:1e:ea:52:e3:57:64:50:bf:2a:6f:8d:7c:2d:28:
                    80:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C0:EA:F5:24:85:A9:31:38:08:79:C1:FD:92:43:2F:A4:23:B9:CC
            X509v3 Authority Key Identifier:
                keyid:7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:19:b6:f1:e5:5d:30:d4:be:c3:83:d3:f9:42:dd:97:6f:6b:
         02:5e:2e:9b:3b:e1:79:1d:a9:c4:4e:e0:7f:97:78:f6:22:56:
         0a:26:7b:0a:48:7c:84:8b:ba:18:3d:03:6a:ff:24:c3:25:4d:
         d4:e7:7a:19:a0:f5:14:6b:7c:48:22:89:b5:bb:59:33:5a:5c:
         f9:8c:d6:9f:9b:ad:5f:3b:3e:a6:0e:07:12:6b:59:79:e5:f7:
         13:6b:ba:ff:2d:81:7b:c7:05:9f:0f:94:cf:4e:18:99:91:d5:
         bd:55:24:b7:c4:42:5f:2d:80:e4:6a:cc:51:dd:39:6d:55:3e:
         32:ae:af:2c:4e:9e:3d:24:f4:c9:8c:cc:45:a8:2b:61:ce:1d:
         61:36:30:0a:ed:64:5b:82:a4:95:db:32:73:a7:79:54:c6:14:
         b5:51:d8:98:33:4c:72:58:7d:13:3f:8f:e8:b2:42:b5:aa:13:
         69:72:91:7f:c3:ef:4a:83:cd:08:bb:dc:18:3b:e1:28:e7:39:
         9e:19:68:6e:41:a8:b8:4a:93:06:1c:f0:20:8c:b9:27:3e:e1:
         c9:5a:88:55:66:27:3b:68:3c:d2:55:b5:0d:46:a9:a5:a9:81:
         53:bc:ce:d7:43:91:68:49:77:ab:ff:b8:05:cb:cb:6e:ed:47:
         d4:b6:0a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:58:28 2025 by rpki-client