This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
File:                     F4I131NVJtnm1q_2-nrFIpOpLHE.mft (raw, json)
Hash identifier:          1bqKWg2JO4ryGdXJKE+gUBBZ7GbjJXiJVew6xG2K7nc=
Subject key identifier:   65:10:A6:D5:3F:7F:F7:96:FC:3D:68:31:70:AF:34:55:90:16:B7:B4
Authority key identifier: 17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
Certificate issuer:       /CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Certificate serial:       019AF4657CFB38C41E112CB0FF8A6D134404
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
Manifest number:          1767
Signing time:             Sat 06 Dec 2025 16:01:23 +0000
Manifest this update:     Sat 06 Dec 2025 16:01:23 +0000
Manifest next update:     Sun 07 Dec 2025 16:01:23 +0000
Files and hashes:         1: F4I131NVJtnm1q_2-nrFIpOpLHE.crl (hash: INWX8Hlo82oPq6TNrVmnF95Y7P3n1fR3LzonjmLlm/E=)
                          2: NXK16WCoOxiuP5Pdh0Kqs98_6Y4.roa (hash: Y5m51ite4A5LbDxUmGbQiHLBy8E1baqu+BrJUl8RNq4=)
                          3: VhwEbxUgJOza67qJ4K_i1Uqq3ms.roa (hash: aCXGgi5AYKAi5vfsurTRm09inwo+Mr6Oxc+TCBbgaZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 16:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:65:7c:fb:38:c4:1e:11:2c:b0:ff:8a:6d:13:44:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178235df535526d9e6d6aff6fa7ac52293a92c71
        Validity
            Not Before: Dec  6 16:01:23 2025 GMT
            Not After : Dec  7 16:01:23 2025 GMT
        Subject: CN=6510a6d53f7ff796fc3d683170af34559016b7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3e:9a:68:7b:08:fc:15:7f:e0:80:2c:27:b1:
                    04:c3:93:db:3b:02:10:98:ec:8c:42:00:83:59:ab:
                    a4:af:f0:a0:47:f6:eb:71:15:3d:11:f3:8f:a2:b4:
                    28:4f:10:db:06:6e:f9:5e:79:61:c2:6b:d8:25:7b:
                    13:50:94:0c:8b:50:9b:2c:ee:0e:c8:ee:cd:15:dd:
                    d3:76:82:99:49:9d:1d:b9:8f:b3:b4:22:6a:ba:72:
                    d1:09:e6:37:45:5d:01:e8:f5:83:bb:eb:0b:7e:61:
                    84:7e:d7:49:b4:45:62:bf:b1:9f:68:04:31:93:78:
                    94:f0:80:0b:75:0c:2c:48:da:46:3b:b8:62:98:db:
                    9f:32:61:1e:88:72:4d:00:f3:e1:b5:f7:3d:e0:9a:
                    87:2f:35:e3:9f:eb:4d:10:32:a4:ca:c4:95:05:32:
                    e6:c0:ea:b1:c8:35:9f:11:4b:0e:3e:0d:f0:cc:9d:
                    3c:73:18:be:3b:21:8a:4c:e5:cb:2f:f9:4a:55:41:
                    a4:81:e1:7c:04:6d:70:32:1e:ee:4b:ed:78:8f:ce:
                    d9:75:b0:bd:d9:af:7e:76:57:53:f4:4a:d5:6c:8a:
                    e4:1c:84:27:63:d9:86:eb:1a:de:e8:77:1e:8c:15:
                    a2:15:6c:f3:a3:0d:8d:c0:00:30:54:49:99:da:be:
                    bc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:10:A6:D5:3F:7F:F7:96:FC:3D:68:31:70:AF:34:55:90:16:B7:B4
            X509v3 Authority Key Identifier:
                keyid:17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:68:dd:2f:2f:76:df:3c:ad:56:67:71:4b:01:56:66:5d:00:
         70:b7:9f:41:08:85:05:e1:da:dd:b0:50:68:14:22:d4:17:74:
         88:4e:5f:cb:9f:7f:b0:cd:1f:b4:5f:ba:1e:60:e3:14:a5:12:
         94:e7:61:47:e2:de:4a:02:6b:49:e1:04:18:b5:ce:74:a4:14:
         5a:96:b7:2d:aa:21:e2:fa:71:ff:05:e7:7e:c1:8f:c9:19:0e:
         34:2c:89:0f:8a:60:4c:dc:ff:9a:32:fb:ff:bc:4b:c2:f4:8c:
         76:e5:01:ec:39:cf:25:a5:ce:a1:9d:07:6f:9f:c2:12:95:47:
         01:2f:03:f8:59:dc:f7:7d:dc:a3:9d:53:20:4a:f7:46:0b:29:
         6c:c3:f7:ad:66:dc:6a:7a:4e:7b:3d:7f:8f:2f:e4:8c:c2:16:
         a1:38:6c:fa:ff:48:a5:f7:70:3b:bf:95:c6:be:a4:96:e9:ac:
         fd:92:71:64:5e:b6:a5:f3:d8:79:9f:46:09:bd:14:18:a0:b1:
         83:f2:25:7b:08:2d:ef:8a:b9:ea:73:db:ef:42:a2:ed:9b:f6:
         46:17:4a:bf:15:0a:9b:2c:02:5f:92:1f:86:35:63:57:4f:ba:
         8f:e4:a2:32:ba:f3:26:dd:ea:53:68:18:8b:3a:d2:33:db:20:
         e8:7e:6b:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr0ZXz7OMQeESyw/4ptE0QEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ODIzNWRmNTM1NTI2ZDllNmQ2YWZmNmZhN2FjNTIyOTNh
OTJjNzEwHhcNMjUxMjA2MTYwMTIzWhcNMjUxMjA3MTYwMTIzWjAzMTEwLwYDVQQD
Eyg2NTEwYTZkNTNmN2ZmNzk2ZmMzZDY4MzE3MGFmMzQ1NTkwMTZiN2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz6aaHsI/BV/4IAsJ7EEw5PbOwIQ
mOyMQgCDWaukr/CgR/brcRU9EfOPorQoTxDbBm75XnlhwmvYJXsTUJQMi1CbLO4O
yO7NFd3TdoKZSZ0duY+ztCJqunLRCeY3RV0B6PWDu+sLfmGEftdJtEViv7GfaAQx
k3iU8IALdQwsSNpGO7himNufMmEeiHJNAPPhtfc94JqHLzXjn+tNEDKkysSVBTLm
wOqxyDWfEUsOPg3wzJ08cxi+OyGKTOXLL/lKVUGkgeF8BG1wMh7uS+14j87ZdbC9
2a9+dldT9ErVbIrkHIQnY9mG6xre6HcejBWiFWzzow2NwAAwVEmZ2r68cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUQptU/f/eW/D1oMXCvNFWQFre0MB8GA1UdIwQY
MBaAFBeCNd9TVSbZ5tav9vp6xSKTqSxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjRJMTMxTlZKdG5tMXFfMi1uckZJcE9wTEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9jMzgzYmItZTgwNi00YTZkLWEyZTgt
ZWU1Y2EzNmYxZDlhLzEvRjRJMTMxTlZKdG5tMXFfMi1uckZJcE9wTEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9jMzgzYmItZTgwNi00YTZkLWEyZTgtZWU1Y2EzNmYxZDlh
LzEvRjRJMTMxTlZKdG5tMXFfMi1uckZJcE9wTEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2jdLy92
3zytVmdxSwFWZl0AcLefQQiFBeHa3bBQaBQi1Bd0iE5fy59/sM0ftF+6HmDjFKUS
lOdhR+LeSgJrSeEEGLXOdKQUWpa3Laoh4vpx/wXnfsGPyRkONCyJD4pgTNz/mjL7
/7xLwvSMduUB7DnPJaXOoZ0Hb5/CEpVHAS8D+Fnc933co51TIEr3RgspbMP3rWbc
anpOez1/jy/kjMIWoThs+v9IpfdwO7+Vxr6klums/ZJxZF62pfPYeZ9GCb0UGKCx
g/Ilewgt74q56nPb70Ki7Zv2RhdKvxUKmywCX5IfhjVjV0+6j+SiMrrzJt3qU2gY
izrSM9sg6H5rXA==
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:19:21 2025 by rpki-client