This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.mft
File:                     Fr_GV2_0KHqI6d4-IQuewOERta0.mft (raw, json)
Hash identifier:          erue80FIWUAw4ljUskPsdfxi5A5KOaJyKNnS4A6AFII=
Subject key identifier:   E5:6D:CF:16:09:59:50:78:54:42:FB:47:A0:34:E1:D6:BB:E1:A4:C5
Authority key identifier: 16:BF:C6:57:6F:F4:28:7A:88:E9:DE:3E:21:0B:9E:C0:E1:11:B5:AD
Certificate issuer:       /CN=16bfc6576ff4287a88e9de3e210b9ec0e111b5ad
Certificate serial:       019AF23F67B53600F21FBFFB1E146D8C2C19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.mft
Manifest number:          1741
Signing time:             Sat 06 Dec 2025 06:00:32 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:32 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:32 +0000
Files and hashes:         1: Fr_GV2_0KHqI6d4-IQuewOERta0.crl (hash: bQGz0zGTBtE/4csWs9b0ec9liGuLkB+FtIDFI/8xJ/M=)
                          2: Pl6_b4ESbhBQwVrjzE07MKHE2CY.roa (hash: xjan3bQ1OceBM5n08V3cPxCTA3U7Zazmx9IxnGNehfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:67:b5:36:00:f2:1f:bf:fb:1e:14:6d:8c:2c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16bfc6576ff4287a88e9de3e210b9ec0e111b5ad
        Validity
            Not Before: Dec  6 06:00:32 2025 GMT
            Not After : Dec  7 06:00:32 2025 GMT
        Subject: CN=e56dcf16095950785442fb47a034e1d6bbe1a4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8c:b1:2c:7b:b9:43:aa:4f:17:c6:fa:f0:35:
                    a0:12:09:76:17:01:cc:c6:ef:1e:6c:3b:ce:1b:48:
                    de:8a:9d:e4:0a:9b:37:f3:01:1f:b3:7b:87:d5:9c:
                    15:2b:16:60:07:88:54:d2:d9:21:f4:22:34:91:3b:
                    ca:c5:0e:ff:90:2b:3a:92:cd:fb:97:d8:3c:43:ad:
                    a5:6a:ba:96:2b:67:2d:fb:7e:f5:bd:1d:a9:a5:82:
                    89:49:a0:e5:a6:89:36:46:83:99:d8:de:64:24:eb:
                    fc:b7:f9:3f:da:6d:3f:74:c0:70:8c:3c:8e:15:75:
                    82:f0:a1:74:92:47:ba:89:79:da:cd:76:8b:22:86:
                    55:bd:46:26:80:cb:75:2a:24:cf:b2:34:8f:62:d7:
                    d2:af:d0:21:c7:be:59:e7:6c:93:50:0a:b3:e8:b5:
                    86:d9:41:e1:53:87:46:51:da:8e:d0:21:5c:ef:77:
                    6f:d5:ef:ec:9a:0f:bf:6b:4a:1c:dd:66:26:ee:7f:
                    af:13:1c:fe:2f:bb:6e:e5:03:93:82:e6:b7:0e:66:
                    bd:74:80:ea:27:a1:28:d4:84:10:1e:4e:f3:ed:cb:
                    38:13:c4:ab:4a:2b:bd:be:ee:34:a0:a5:47:02:6c:
                    9a:7a:55:40:24:2e:f9:df:fd:48:94:48:92:f3:0b:
                    28:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6D:CF:16:09:59:50:78:54:42:FB:47:A0:34:E1:D6:BB:E1:A4:C5
            X509v3 Authority Key Identifier:
                keyid:16:BF:C6:57:6F:F4:28:7A:88:E9:DE:3E:21:0B:9E:C0:E1:11:B5:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:54:8f:c7:c3:72:b8:9c:8e:ff:66:b3:85:a2:27:73:66:d8:
         1e:a3:b9:e3:47:7a:08:f9:10:c9:95:00:69:a6:c7:f1:03:bf:
         a0:c2:8a:1d:b0:47:e8:1a:1f:9a:5c:aa:9d:59:c2:49:43:9b:
         cf:2a:94:9a:72:07:e5:70:63:7e:df:4c:cb:55:46:70:c5:75:
         8a:f6:71:40:c3:8a:bc:46:06:1f:3c:3a:c6:a4:0a:fc:d1:96:
         55:39:1c:1d:5f:97:f4:f2:7d:c3:ae:b5:6f:4f:27:6b:f4:57:
         1b:0a:96:03:bd:e6:de:03:85:b9:34:60:6b:cb:66:08:7e:08:
         ba:5a:19:7e:8a:1c:c5:6f:b2:91:78:a8:a3:ee:95:55:f2:98:
         56:28:e6:63:fe:73:79:d0:e7:75:d3:6f:09:0d:36:07:45:ea:
         37:20:e5:7c:23:48:09:c8:02:ce:ec:58:10:1c:7e:f7:bf:20:
         c2:e9:4b:9b:36:6c:c3:9b:08:34:f2:89:b2:14:07:d3:ed:db:
         fe:4b:5a:c9:3d:4c:46:0b:04:52:76:d7:ad:c1:12:42:d7:dd:
         01:0d:88:77:2b:af:69:29:23:09:8f:c9:04:77:ae:77:27:6b:
         38:c4:6c:c8:e3:41:92:99:bf:63:7f:6b:94:87:50:ce:23:13:
         4f:67:8a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:21:49 2025 by rpki-client