This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
File:                     FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft (raw, json)
Hash identifier:          VDk8ElxwZ9tZY04V8XrOOWrzPbZRD5Ik46ozgIiIhC8=
Subject key identifier:   2F:17:2C:59:3F:8C:EA:9A:65:C6:2A:AB:70:2F:B3:17:EB:2D:46:D2
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Certificate issuer:       /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial:       019AF50A97580B60EFE3361C0BF299FFF1A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
Manifest number:          104F
Signing time:             Sat 06 Dec 2025 19:01:43 +0000
Manifest this update:     Sat 06 Dec 2025 19:01:43 +0000
Manifest next update:     Sun 07 Dec 2025 19:01:43 +0000
Files and hashes:         1: FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl (hash: ZScycZ9IF2ql31QlvLBSXOT5Bsu/vK1y8cnmcsnDatI=)
                          2: H8QVEiVhWpEoda9CGE6Oc3pdrL4.roa (hash: yuDUq5plzATZXFJtuu3iWGDCyprgTwUU8VCknElMZCk=)
                          3: _ct2jrxg6RKH3wrlYOdA7gv_y28.roa (hash: KvPeA3S14yjz3YBD7/OoXk/uguHv1hI5r36BeHgTkgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 19:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:0a:97:58:0b:60:ef:e3:36:1c:0b:f2:99:ff:f1:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
        Validity
            Not Before: Dec  6 19:01:43 2025 GMT
            Not After : Dec  7 19:01:43 2025 GMT
        Subject: CN=2f172c593f8cea9a65c62aab702fb317eb2d46d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:0a:d6:94:c8:ce:df:b8:ea:28:2c:c8:1a:
                    51:b7:e7:d0:ae:fd:e8:f4:e5:70:29:c3:32:41:00:
                    a4:66:ab:f2:80:b9:f4:34:03:b2:55:8f:82:d8:05:
                    b5:d6:26:af:ec:58:de:b3:9c:97:a1:77:f4:6b:96:
                    0c:ea:f3:eb:a6:27:19:fc:7c:26:ca:e2:0e:b9:45:
                    3e:c4:c5:2a:d4:5d:7d:31:08:68:ea:38:4f:d1:0d:
                    f9:63:87:c7:83:ff:94:76:bd:e2:10:e0:6e:04:b5:
                    1e:02:82:4d:d7:a5:15:6d:57:64:1d:67:15:52:a7:
                    df:1e:e6:60:eb:97:a9:07:14:47:48:9c:1f:3b:b4:
                    5b:10:c6:89:d8:8a:57:ab:a7:20:3c:5e:9d:ec:87:
                    7c:c2:86:6b:6f:17:55:01:77:76:8a:a4:f3:a3:ca:
                    39:71:bf:24:79:26:28:57:5b:9a:8c:8a:8e:05:6d:
                    73:3b:d8:e7:bf:ee:82:0b:1c:e6:4d:76:cc:2b:98:
                    18:e7:d6:c2:44:be:33:45:89:df:bd:18:17:6e:69:
                    fc:2e:78:68:2f:66:03:74:9d:0c:d9:b2:a2:2c:bb:
                    93:87:15:45:bc:25:b8:cd:0b:22:8b:69:11:a5:6a:
                    b0:77:f5:5d:4b:de:d7:0d:68:80:14:af:70:27:2e:
                    92:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:17:2C:59:3F:8C:EA:9A:65:C6:2A:AB:70:2F:B3:17:EB:2D:46:D2
            X509v3 Authority Key Identifier:
                keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:1a:84:ad:6a:b1:38:e5:1b:23:42:f5:23:cf:83:0c:15:26:
         b4:48:68:71:08:2d:b9:f4:c4:5c:9e:ac:d0:d5:23:ca:3d:0b:
         52:d7:37:2e:93:be:20:45:fe:79:d1:ca:76:a7:ad:99:49:13:
         3b:ab:4c:07:e1:da:8e:50:3c:b3:3f:ad:8a:0a:bf:f3:86:38:
         e1:ea:a3:be:c3:b2:12:87:c5:e4:b9:00:6d:39:1e:7d:e9:d0:
         c7:07:7f:ae:b6:98:4b:95:a6:7c:60:a1:56:11:68:7f:a3:0e:
         07:51:bc:86:9b:02:11:62:fc:db:75:46:c8:54:b6:2f:f8:2c:
         c8:c6:f7:c6:1e:9f:05:b0:69:67:3f:56:d4:f4:03:fc:03:10:
         34:e9:ca:21:42:a0:52:c4:df:8d:6a:35:69:52:50:28:e8:a2:
         0a:0d:e7:30:80:16:9c:a1:17:94:91:63:72:70:0a:14:74:f0:
         6c:c2:d4:6b:53:f9:14:63:e4:83:86:66:45:f9:3a:06:ad:b9:
         33:e5:06:8e:9e:fd:f9:e2:7c:f6:43:59:16:a1:ef:70:07:a8:
         0b:0a:93:9f:5d:c1:f4:77:b0:fa:74:2e:b2:d0:ab:88:55:ae:
         f2:7b:0c:7a:8a:43:58:20:34:50:7a:aa:ba:0f:bf:1f:06:f1:
         c3:4d:44:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:35:13 2025 by rpki-client