This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
File:                     _FXgUz76pWJPU4uS7RqXP-_4l1E.mft (raw, json)
Hash identifier:          ouYfCCw6gt6MSR5YA6kc4fpqSW6IDokta2vhak+yOZo=
Subject key identifier:   66:99:6C:81:FB:02:65:0C:D1:9F:26:78:95:D0:07:DC:9D:AA:29:2D
Authority key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
Certificate issuer:       /CN=fc55e0533efaa5624f538b92ed1a973feff89751
Certificate serial:       019AF27712BCFE8572755C2C04923E523D0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
Manifest number:          124E
Signing time:             Sat 06 Dec 2025 07:01:21 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:21 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:21 +0000
Files and hashes:         1: UdqqtZGpIUJuO-T8u_MZQwitL4U.roa (hash: hH2jMQqs4CekxdYoCxAKkLi/f8EnWwbUlFfsT0U+1TE=)
                          2: _FXgUz76pWJPU4uS7RqXP-_4l1E.crl (hash: nXGflsEzarfQzIMJ/3E8RPXcg6PhUDW3TuJLhXDEIxs=)
                          3: yh5VzgeOwtUgAcziSiqUhcW6kK8.roa (hash: hvI53ao0Y2iffOi0mRz/DzGNpvNOk5YefpCNLUXPIjc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:77:12:bc:fe:85:72:75:5c:2c:04:92:3e:52:3d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc55e0533efaa5624f538b92ed1a973feff89751
        Validity
            Not Before: Dec  6 07:01:21 2025 GMT
            Not After : Dec  7 07:01:21 2025 GMT
        Subject: CN=66996c81fb02650cd19f267895d007dc9daa292d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:03:ae:92:f0:5a:fd:c5:d9:15:29:16:de:dc:
                    ca:2b:82:97:1b:97:4f:fb:f9:1f:f9:bf:8c:66:84:
                    74:4a:c9:78:ff:81:1b:53:0b:a2:e4:3d:9b:f5:c1:
                    44:ae:ed:4e:14:75:e3:db:da:79:87:91:cf:34:b2:
                    99:0c:f6:37:90:a1:c5:31:15:e0:66:55:11:6a:bd:
                    b5:76:31:a9:ab:f4:e6:3e:06:28:f6:59:57:f4:0e:
                    e0:d9:2d:09:84:18:1a:12:3a:a9:a2:b0:99:03:4b:
                    24:0e:61:75:77:91:ff:0c:7a:85:7e:d2:03:65:61:
                    ce:5e:45:20:95:f2:43:36:24:2c:88:34:0a:69:6f:
                    33:5a:e8:6a:03:89:93:f7:33:f1:88:5d:5b:ec:eb:
                    7f:e1:0e:5d:31:50:2d:55:e6:0e:81:06:5e:94:e1:
                    62:18:2e:34:96:2b:77:93:b5:04:a5:79:b8:cf:5d:
                    4a:99:00:ae:1a:72:56:dc:e7:44:83:10:97:72:d0:
                    99:34:8e:7c:7b:99:dd:e7:07:51:ce:52:29:8f:56:
                    07:e1:0d:a5:54:59:f0:a5:80:3a:32:eb:d4:c1:34:
                    61:fb:44:13:7c:53:c9:74:86:8f:3e:30:7c:2a:fd:
                    50:2b:04:be:ee:77:91:35:38:65:70:9b:80:aa:f1:
                    27:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:99:6C:81:FB:02:65:0C:D1:9F:26:78:95:D0:07:DC:9D:AA:29:2D
            X509v3 Authority Key Identifier:
                keyid:FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:89:ff:32:70:cf:a0:b8:01:86:d4:2d:2d:d7:e5:7a:be:f0:
         8a:b2:24:17:11:aa:11:82:5c:b1:24:3e:23:09:b3:07:55:14:
         be:2c:ad:d5:a1:e8:28:df:19:40:ac:c7:a2:4f:92:2e:ea:c3:
         32:1d:b2:ea:97:b8:7a:aa:06:3c:97:3f:b1:27:c0:2f:30:06:
         bd:89:70:48:12:18:cb:72:15:23:84:7a:e1:55:d8:59:2b:5a:
         0a:02:cb:02:90:84:a2:58:9b:fe:1a:a9:cb:07:f0:72:93:e1:
         68:68:11:4c:43:1b:f9:e4:09:0d:e6:f0:c6:9e:97:d9:98:cb:
         5e:5c:72:83:47:53:d8:b9:b4:65:77:b4:09:9f:0f:64:79:84:
         ef:e5:9f:ff:a3:fe:ae:51:22:ca:e6:75:f3:bf:8e:9b:42:de:
         8f:a7:36:f9:4e:c7:1a:86:a7:9b:d7:76:0b:fc:86:c6:80:b7:
         fb:33:8b:97:37:92:60:aa:ad:37:8f:bb:1d:72:22:5e:b2:4d:
         89:97:ce:8f:19:e1:ba:06:d8:2a:df:81:97:61:95:26:16:fb:
         32:40:15:77:94:06:a8:09:14:e7:22:6e:b5:93:8d:ed:25:51:
         c4:db:5e:cb:12:6c:ba:78:55:30:55:30:e8:f0:72:f6:9e:fe:
         01:2a:48:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:00:10 2025 by rpki-client