This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
File:                     fGlngv8SGuWm2dXPo4R5dotr8L0.mft (raw, json)
Hash identifier:          tgg/ce1d08lUoxPk2BygWfJl4FBXSvgcmJMMGZzQ/NU=
Subject key identifier:   D9:19:BA:00:70:DF:86:9D:A1:CA:D9:AF:78:A6:8C:91:AA:96:9E:E7
Authority key identifier: 7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
Certificate issuer:       /CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Certificate serial:       019AF352714C330689C23E2F2F9BFC46E996
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 11:00:57 +0000
Manifest this update:     Sat 06 Dec 2025 11:00:57 +0000
Manifest next update:     Sun 07 Dec 2025 11:00:57 +0000
Files and hashes:         1: CqEll3qj27nC3RPq0fziUJlBCNs.roa (hash: ne9W9a5q+GjzbaXSyhc66nMcJYTTVJvwji8w4P/0Sl4=)
                          2: dPc9m_TH3I35OVg96ErdD-dIFxE.roa (hash: 6rEh+8XVtIQuMK//Hp1XM75izAZwXIaq6ISFlV91ktM=)
                          3: fGlngv8SGuWm2dXPo4R5dotr8L0.crl (hash: 8sX327Od0mrCsaVqj0WC1XYAUiOs5Tjf4DGSgRCswH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 11:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:71:4c:33:06:89:c2:3e:2f:2f:9b:fc:46:e9:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
        Validity
            Not Before: Dec  6 11:00:57 2025 GMT
            Not After : Dec  7 11:00:57 2025 GMT
        Subject: CN=d919ba0070df869da1cad9af78a68c91aa969ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ee:40:7a:48:f7:50:77:f7:ea:6a:16:b3:93:
                    06:f3:1f:b8:a9:aa:32:69:fd:e9:99:f7:29:68:5b:
                    63:a3:01:3f:d5:8d:c8:91:e6:84:f5:52:5a:dc:4e:
                    d2:8e:b3:cb:7b:a8:83:57:7a:e2:40:5b:a9:6e:b6:
                    67:f5:06:ab:ce:28:a8:fb:e4:ab:66:96:e8:54:2b:
                    8b:bf:a4:62:9e:e4:98:8a:dc:bf:7a:d2:a2:e9:87:
                    ba:63:12:87:18:5c:65:04:3f:5f:d4:55:f5:8b:57:
                    46:0a:4e:5f:41:0f:ef:5f:05:eb:9c:b0:c9:a7:23:
                    64:de:1d:6e:5c:75:9a:eb:a4:f0:0a:36:cc:b7:a7:
                    6a:9f:b9:cc:56:18:b1:22:3f:84:59:1a:ae:63:20:
                    a4:1a:49:80:42:ac:8a:1b:b6:b4:b7:99:5e:dc:31:
                    bd:65:91:4d:8c:4e:0d:67:d1:c3:3f:2c:7e:4b:8c:
                    55:2f:82:c1:10:68:fd:09:ca:e4:88:ff:bd:84:55:
                    d3:ce:94:f9:f9:7e:ae:d7:7a:cf:51:ac:23:80:b8:
                    33:b5:0d:c2:01:db:4f:34:6f:87:3c:bf:29:52:e3:
                    49:f3:09:18:d7:cd:ce:86:da:61:5b:da:c5:e7:69:
                    f9:37:50:57:b5:46:c4:40:0e:c4:f6:b5:3e:25:7b:
                    bf:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:19:BA:00:70:DF:86:9D:A1:CA:D9:AF:78:A6:8C:91:AA:96:9E:E7
            X509v3 Authority Key Identifier:
                keyid:7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:a5:91:84:b6:0f:4b:3e:71:7c:7a:05:b4:f5:31:bf:b0:71:
         76:33:97:f1:0a:04:f0:0d:86:68:cf:f2:96:4c:3c:7a:38:07:
         85:8e:ad:fd:87:75:f9:63:88:cb:aa:d2:19:91:38:e6:c8:a6:
         8f:d3:7d:fa:e8:56:f3:18:d5:16:89:71:04:48:ee:4b:63:3f:
         f6:64:75:6a:d7:49:e4:d6:36:c8:01:1e:bf:94:22:d7:84:f5:
         8e:f4:0e:93:2c:ce:88:32:bf:d8:28:d7:03:13:38:ab:61:00:
         e9:49:b2:f2:5a:be:44:34:da:56:89:7c:3e:1d:7c:18:6f:c5:
         f7:6a:e3:20:7b:d0:da:41:d6:44:00:f2:06:db:14:f7:0e:a5:
         6b:0d:54:bc:ec:de:37:a5:7a:cb:60:d0:c8:32:bc:27:69:a9:
         a7:02:67:6e:98:92:e3:9c:10:f6:31:d1:c6:e5:10:de:5b:d6:
         fe:db:e9:49:b1:8f:3e:35:57:99:30:50:a1:05:fc:d2:c5:4f:
         e2:be:fe:79:29:15:c5:19:78:6a:1e:ea:f2:91:a7:ed:02:39:
         d1:9f:30:30:00:34:57:ea:1b:52:b2:4f:c1:9e:11:33:9e:87:
         7e:28:bb:75:0c:61:16:6e:d7:d8:4e:c9:2f:5f:de:fc:01:d7:
         07:fa:35:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:56:18 2025 by rpki-client