This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
File:                     F564e9wyeT2_7RhKb_vBTtFdMqQ.mft (raw, json)
Hash identifier:          8fzIwjPFiLVoU0tBLcMzowUOzC1H1/QDrD4h3nD+1Xw=
Subject key identifier:   50:76:91:BE:4C:3E:4C:AA:20:0C:3B:73:2A:84:AD:51:05:D2:49:9D
Authority key identifier: 17:9E:B8:7B:DC:32:79:3D:BF:ED:18:4A:6F:FB:C1:4E:D1:5D:32:A4
Certificate issuer:       /CN=179eb87bdc32793dbfed184a6ffbc14ed15d32a4
Certificate serial:       019AF19B5A9E8126DF5BE0214DD40662EE07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
Manifest number:          0481
Signing time:             Sat 06 Dec 2025 03:01:21 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:21 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:21 +0000
Files and hashes:         1: F564e9wyeT2_7RhKb_vBTtFdMqQ.crl (hash: zocTeZI9M7xOT/CU4PUT9g/GMqyYQaU3pnS7DgvTMas=)
                          2: YYdbZAN7pN6TVTepPYBGugFjphQ.roa (hash: NsxHuGOHh0xg9XbBNwi/wuinAUzVezbbbYAR6J2U768=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:5a:9e:81:26:df:5b:e0:21:4d:d4:06:62:ee:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179eb87bdc32793dbfed184a6ffbc14ed15d32a4
        Validity
            Not Before: Dec  6 03:01:21 2025 GMT
            Not After : Dec  7 03:01:21 2025 GMT
        Subject: CN=507691be4c3e4caa200c3b732a84ad5105d2499d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:77:a4:5f:84:6f:7b:22:39:e1:68:2c:be:1a:
                    17:e2:12:0e:ac:0b:91:96:53:97:9d:6a:0a:3d:80:
                    7e:28:67:4e:4d:fc:f0:fd:e7:f0:d6:3b:0a:93:fa:
                    a6:da:a6:92:f9:e6:63:5c:6a:13:9b:9e:3e:5e:0a:
                    dd:ca:be:64:c1:45:48:84:f9:8c:9c:ea:16:21:75:
                    99:52:04:fc:1b:69:e2:e3:f5:46:1f:c5:f3:82:25:
                    fa:44:61:ca:f1:47:36:6d:c9:67:f6:fc:37:d5:bd:
                    c5:d2:28:7c:52:1f:a7:6d:5f:38:53:49:a5:85:b5:
                    17:ad:2b:a2:40:64:02:c2:4c:92:46:77:c5:31:91:
                    8c:5c:7d:35:f5:c1:ea:ad:6d:7a:0e:32:fb:98:5b:
                    5f:06:03:fe:07:ef:9e:f5:78:23:2e:18:d7:d6:1e:
                    e1:c9:af:32:a8:25:49:e1:90:b0:78:4b:e1:19:aa:
                    88:84:b6:3f:05:a7:41:f4:6b:7f:75:d0:80:8c:48:
                    53:15:7d:5e:9e:2a:48:7f:19:bc:1c:7a:85:e6:24:
                    04:08:55:71:b6:7c:78:8d:ae:00:e4:6f:a4:38:a1:
                    a8:e0:e0:65:e5:9f:8c:29:74:33:8a:c7:1b:12:97:
                    3c:6e:14:c1:91:54:51:d7:86:e6:74:47:eb:7c:21:
                    77:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:76:91:BE:4C:3E:4C:AA:20:0C:3B:73:2A:84:AD:51:05:D2:49:9D
            X509v3 Authority Key Identifier:
                keyid:17:9E:B8:7B:DC:32:79:3D:BF:ED:18:4A:6F:FB:C1:4E:D1:5D:32:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:8c:c6:34:b8:7b:2d:03:0b:d0:67:c5:8b:83:52:7c:e4:cc:
         49:c9:07:5c:74:f6:9c:3f:ac:b5:e3:f8:a2:b5:0e:7f:11:16:
         7e:ae:ed:c2:70:cf:41:3d:c7:47:4b:84:2a:72:21:37:b6:11:
         bc:bf:93:45:0b:81:2a:e4:21:d6:6f:f2:03:d1:4f:b8:88:4e:
         0a:88:b2:88:4b:5e:a3:84:d4:83:a9:58:db:d3:0a:9a:17:d4:
         99:5c:5d:59:52:f4:dd:48:4b:5a:e0:14:15:09:51:70:3f:04:
         e1:ce:ca:a7:6b:75:0c:73:11:b9:02:4e:07:b3:b0:c0:65:10:
         df:73:ae:03:84:86:e8:8f:92:e1:e6:32:52:f7:95:a9:eb:48:
         80:0b:80:d9:af:1d:9f:35:19:fe:a5:5e:0b:90:6b:12:f6:ff:
         7d:21:fc:e2:17:b9:d0:64:83:dc:05:1e:e3:45:43:56:6c:36:
         38:49:54:7a:d6:2f:64:be:66:7a:32:0d:d1:c8:82:16:fc:a2:
         26:63:ff:1f:fa:cf:09:65:4f:ec:ff:bc:64:11:a1:ff:e4:d9:
         41:55:cb:f2:bd:1d:c8:88:dd:e0:02:10:3f:a8:ee:a8:10:d1:
         d2:43:08:72:63:5f:a3:91:4d:42:c4:98:e5:a9:9b:a4:48:2e:
         8b:c9:6d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:42:19 2025 by rpki-client