This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
File:                     FrUekDbKbnVqAWPDh3ggzV_OEa4.mft (raw, json)
Hash identifier:          KFmEB1Y/oFz5r2U6IR7sKaEMFK3WSKX7tFwx/t/dIao=
Subject key identifier:   0B:46:8F:DC:CA:44:71:FD:79:6C:70:2A:6E:D0:2C:43:53:2A:E6:D4
Authority key identifier: 16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE
Certificate issuer:       /CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
Certificate serial:       019B2EFA9C12E5A6AF19A5AF5131FD4D90A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
Manifest number:          0E76
Signing time:             Thu 18 Dec 2025 01:02:14 +0000
Manifest this update:     Thu 18 Dec 2025 01:02:14 +0000
Manifest next update:     Fri 19 Dec 2025 01:02:14 +0000
Files and hashes:         1: BxCrfrb8MepjOUn66ABB5pXZXGY.roa (hash: /bAJpFbE7wB5BoE8ivAocFlXAPpfXoiDSMMP5BxwgYU=)
                          2: FrUekDbKbnVqAWPDh3ggzV_OEa4.crl (hash: vxjSpCruqEysP3roIuOIoP433MDjari7K2xRQvKyea8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 01:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2e:fa:9c:12:e5:a6:af:19:a5:af:51:31:fd:4d:90:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
        Validity
            Not Before: Dec 18 01:02:14 2025 GMT
            Not After : Dec 19 01:02:14 2025 GMT
        Subject: CN=0b468fdcca4471fd796c702a6ed02c43532ae6d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0e:ab:92:40:02:26:5f:14:c8:e1:a0:13:f3:
                    48:27:30:c6:04:84:02:7c:d5:55:0e:8b:30:c6:a3:
                    c0:d5:fe:9f:47:a2:ef:55:d3:a6:39:19:ae:ef:1c:
                    21:4a:df:54:63:d7:e4:d2:c2:92:ef:78:72:b5:90:
                    94:0d:71:2c:b4:20:4f:9c:a0:48:0e:16:83:aa:2d:
                    0d:9d:70:2b:d4:2a:87:43:0a:d9:cd:16:7e:4b:13:
                    34:48:27:06:39:bd:f7:63:81:f1:89:d8:b6:14:cd:
                    37:b6:f8:96:b9:3d:de:e2:3b:59:3e:a3:fe:8e:4e:
                    6f:09:f9:ed:bf:ed:8f:08:b9:14:74:f0:52:fc:45:
                    0a:b3:14:92:d2:94:22:76:75:aa:2d:50:c9:2d:50:
                    ab:77:f7:a9:aa:8f:0b:af:e3:6f:9a:72:84:73:ee:
                    de:65:b2:e0:b9:81:43:64:95:c3:e2:11:69:33:ae:
                    38:34:73:4e:42:49:c6:a1:84:67:d6:ca:69:3d:5d:
                    12:eb:1b:84:65:9e:c3:1e:06:d6:d1:b5:20:35:ca:
                    99:6e:fc:43:99:bf:72:a8:08:6d:be:44:88:28:04:
                    ed:f9:32:8d:d6:08:2c:2a:9c:74:40:15:ef:a4:0c:
                    7c:88:a8:93:15:88:46:ef:d2:7e:bb:e8:49:b6:fc:
                    b6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:46:8F:DC:CA:44:71:FD:79:6C:70:2A:6E:D0:2C:43:53:2A:E6:D4
            X509v3 Authority Key Identifier:
                keyid:16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:fb:59:0b:50:d3:78:82:34:a3:83:8c:06:a8:54:f8:23:e7:
         44:0a:85:14:b1:e7:31:f4:2c:67:f4:fe:8f:68:c2:d1:9b:08:
         b0:3f:cb:9b:05:00:ba:14:d3:1f:28:ea:0d:72:ef:bf:aa:98:
         7d:0b:cf:b3:e5:e9:27:41:e2:58:7d:59:99:90:e2:94:1a:7c:
         7e:3a:cd:c9:fd:36:05:53:f3:ce:5c:89:61:d2:b6:7e:81:30:
         59:5a:4c:58:dc:e9:71:9c:ff:9d:93:be:7d:27:6e:6f:59:a9:
         27:ea:8c:37:69:d0:7b:78:ce:46:d6:66:ed:70:4e:72:b8:6d:
         7d:3e:7b:fe:3b:ee:c5:f7:aa:88:39:43:7d:1b:49:26:ad:8d:
         5b:c2:f1:fe:7b:80:84:78:2f:9e:4d:ce:6e:3b:46:c0:bc:fc:
         c7:c7:cd:1d:b2:e9:cf:1f:bd:68:7c:0e:d4:94:b9:2b:20:38:
         96:d1:4e:3f:ec:d9:79:f0:57:fd:0a:7b:27:d2:d0:90:f2:68:
         6e:d1:b2:06:eb:42:cc:f1:5b:e1:46:a2:df:0a:ba:b2:0b:72:
         c1:71:d1:87:2f:57:46:56:0b:e2:9a:51:31:20:5f:a1:d0:cd:
         38:a3:49:61:fe:0b:bb:0b:86:2a:28:39:06:45:35:63:48:3e:
         ec:90:35:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:36:54 2025 by rpki-client