This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft
File:                     ftUAFk8HOBNbmuwE44_CTLkOD18.mft (raw, json)
Hash identifier:          zZDBurlhrosMT5ruvtSMBW8ESGr2bwLOIIpdizgFVnQ=
Subject key identifier:   E9:27:3A:97:25:61:69:23:05:FF:21:E5:60:B4:A2:0C:D6:B6:C1:04
Authority key identifier: 7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F
Certificate issuer:       /CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f
Certificate serial:       019AF19ACB4700D4315FFC2ABB0E4D73D4FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft
Manifest number:          14B0
Signing time:             Sat 06 Dec 2025 03:00:44 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:44 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:44 +0000
Files and hashes:         1: UpOdGPWJK0meS7Gh3_WX8w49CRw.roa (hash: Xe80koGnCIpEItaZAU3CBuIZI63oxsrazQvG2gOmx4M=)
                          2: YPpoO-eihLVjR6QWGuwlFSalldc.roa (hash: I2Yas9YEEPm9KZs3KYRfc07hbQQR2Q6lK14KBojWMnk=)
                          3: ftUAFk8HOBNbmuwE44_CTLkOD18.crl (hash: tK2dfWyb8nQC1Wci6Ww1LC2U+x+el2J+K5YRvg79za0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:cb:47:00:d4:31:5f:fc:2a:bb:0e:4d:73:d4:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f
        Validity
            Not Before: Dec  6 03:00:44 2025 GMT
            Not After : Dec  7 03:00:44 2025 GMT
        Subject: CN=e9273a972561692305ff21e560b4a20cd6b6c104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:40:25:f6:10:16:d1:58:06:52:8e:0c:2c:70:
                    e9:47:fe:97:80:da:e5:9f:78:c9:d4:14:04:11:88:
                    c2:a4:0c:4f:2b:d7:40:39:3c:7b:e6:6f:37:23:69:
                    0a:fe:a3:de:7d:27:c5:76:3c:ca:94:f9:a6:e9:39:
                    36:fc:14:8f:89:9b:01:88:c0:68:53:73:a7:48:d4:
                    95:5c:5e:67:74:08:a0:86:ec:d0:77:1d:25:84:b9:
                    02:9e:e0:d8:32:c5:0b:1e:f6:4d:cc:04:1c:48:42:
                    a8:fe:72:98:82:24:71:36:80:bb:7e:f4:80:ec:d4:
                    d0:1d:2f:4d:30:2d:ce:4f:d5:5f:38:52:dd:47:ea:
                    0f:cf:26:49:bf:a6:b9:d3:30:f9:1f:30:58:4d:62:
                    8d:fc:32:59:fe:21:da:ba:01:98:e5:b2:cc:64:41:
                    c4:7a:b8:ca:17:9a:e6:a2:b5:7f:44:73:fb:b6:23:
                    c9:0f:8d:9e:ed:dc:dc:76:90:9f:dc:60:32:85:8f:
                    bf:d4:c9:33:37:be:0e:17:ce:62:3c:6c:67:b2:91:
                    45:12:49:d0:3f:9a:1d:3a:fa:52:f8:31:d9:74:4d:
                    4a:29:ff:19:a8:82:d3:d6:64:f3:b3:dc:d4:bd:57:
                    d2:e2:05:28:33:c3:f7:4b:f8:64:a4:ba:2c:f6:53:
                    2a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:27:3A:97:25:61:69:23:05:FF:21:E5:60:B4:A2:0C:D6:B6:C1:04
            X509v3 Authority Key Identifier:
                keyid:7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:26:f6:90:7c:eb:3b:73:dc:b0:6f:8f:99:6f:67:cd:9b:43:
         9b:7d:79:4a:bd:3a:1d:53:27:7d:76:92:72:8d:8b:07:82:49:
         86:1d:21:a1:d7:4e:9a:91:fb:98:a6:a9:73:0a:67:c9:63:d9:
         cf:10:85:fd:46:da:df:d2:eb:cd:8e:dd:34:35:e1:2c:7b:f3:
         28:c5:5f:fe:7f:e4:12:81:c0:ba:73:1a:c9:57:4a:36:e1:7a:
         e8:ec:2e:54:e9:ce:9a:b9:76:51:0a:26:51:0d:bb:0c:90:56:
         51:79:43:28:be:cf:9b:3b:e9:f1:70:32:04:e5:7e:b1:e9:be:
         75:1f:60:ba:d6:90:94:bf:32:bc:c8:85:74:65:23:2e:bc:9a:
         6a:f3:21:a3:ca:89:4d:a2:b5:5e:8b:66:26:d2:95:4c:21:8f:
         4e:05:c7:bb:00:57:6e:71:90:62:7c:6b:d5:d3:4e:08:5e:19:
         fe:26:8f:d4:47:6b:23:4f:f4:57:3e:aa:b9:22:c0:0c:79:dd:
         70:6b:20:89:5a:8f:94:43:16:83:17:b5:0b:85:4f:0f:75:ac:
         a6:5a:d8:a6:76:d6:f3:6c:81:2b:1b:68:2b:39:6a:4b:e4:5a:
         06:96:77:d4:36:33:01:df:50:92:58:da:d6:cd:46:63:64:cc:
         0a:3d:79:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:15:06 2025 by rpki-client