This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
File:                     fVllljYInjIyRpdinCGNo4orZz0.mft (raw, json)
Hash identifier:          PKh89guOAdorJ60YtTwv5EVTLwSz2/5NkV7d5l2DW7Q=
Subject key identifier:   09:D6:90:A1:8B:C4:57:F6:42:25:49:A3:8B:33:43:D9:8A:0A:A2:C2
Authority key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
Certificate issuer:       /CN=7d59659636089e32324697629c218da38a2b673d
Certificate serial:       019AF31BAC36DDA7B0904750489022193BB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
Manifest number:          159C
Signing time:             Sat 06 Dec 2025 10:01:08 +0000
Manifest this update:     Sat 06 Dec 2025 10:01:08 +0000
Manifest next update:     Sun 07 Dec 2025 10:01:08 +0000
Files and hashes:         1: UK9YjHWc92sXiUJt3VZoNIq4t0k.roa (hash: igI+4irUGdklUjezFA8tc/PWzUHzep3VbVTtAZ5nupE=)
                          2: fVllljYInjIyRpdinCGNo4orZz0.crl (hash: 3qM7SHFRTZLB8Pj7pKA3P1MuLVGQT9ZPzfyAooFGcIg=)
                          3: zUIN-vPBSWAo7u0peNQbk111_tY.roa (hash: ycq1Cqg0dupTJx5bcb6gz2Vt69i1lXhyAaV7FfHeKNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:ac:36:dd:a7:b0:90:47:50:48:90:22:19:3b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d59659636089e32324697629c218da38a2b673d
        Validity
            Not Before: Dec  6 10:01:08 2025 GMT
            Not After : Dec  7 10:01:08 2025 GMT
        Subject: CN=09d690a18bc457f6422549a38b3343d98a0aa2c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:19:7c:c9:9d:c5:e1:35:45:1d:dd:0c:15:39:
                    66:4a:41:77:04:6c:18:27:d4:d9:bf:48:de:af:0e:
                    61:0b:09:06:5f:5b:62:7c:2e:41:ee:fc:4b:3b:0e:
                    ca:fe:bb:ec:e6:c2:91:46:86:48:77:b4:da:0e:6b:
                    ed:44:75:35:2f:7c:8e:a5:10:fc:dc:6e:84:b7:a9:
                    0c:5f:f4:d7:c7:85:49:54:e5:6d:1c:c5:9e:dc:e8:
                    2e:36:06:3c:c8:43:a2:27:b8:f8:77:57:a4:56:3a:
                    fd:ac:1a:9d:7e:48:73:c7:4b:76:e2:61:59:13:c2:
                    23:a3:a9:fc:77:3d:44:38:23:de:72:ce:30:33:e5:
                    37:19:ab:09:a9:ea:9a:f0:37:4f:60:5f:2e:5c:fb:
                    61:6b:f0:db:50:a0:a5:9a:60:57:1a:4d:51:1e:22:
                    81:3f:75:1a:68:05:80:ba:0a:d1:93:8b:99:00:ef:
                    24:8f:30:ec:85:6d:31:06:bd:e1:5c:27:07:4d:56:
                    6a:3b:01:74:85:c3:ea:52:1a:53:09:31:11:a5:13:
                    b6:66:c1:6a:dc:f8:81:e7:e8:2a:6c:63:1b:a3:9f:
                    f2:6b:30:83:2a:80:73:8c:5d:b2:e9:32:66:aa:8c:
                    78:ed:b3:aa:1a:52:a4:88:55:db:d9:48:ff:ad:73:
                    29:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D6:90:A1:8B:C4:57:F6:42:25:49:A3:8B:33:43:D9:8A:0A:A2:C2
            X509v3 Authority Key Identifier:
                keyid:7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:bb:ac:50:b9:77:35:cd:d5:d9:0b:fc:d1:cd:71:5a:fd:37:
         c3:4f:a0:69:3f:4b:67:3d:16:4e:88:fb:71:ce:df:70:e8:27:
         32:93:64:4d:54:26:ab:1f:69:76:c3:7e:42:49:04:f9:a0:98:
         f8:e0:38:7b:6a:15:9d:20:02:38:05:a5:54:07:eb:16:7a:be:
         65:75:e0:57:3d:aa:ed:6a:88:7e:ee:b0:24:58:bb:86:1b:1a:
         d7:71:a5:50:3b:8e:96:1c:e7:2d:14:31:83:5c:30:55:9e:9b:
         0c:ee:ce:45:60:c1:e3:9b:18:f8:a3:12:49:54:95:0e:2b:5d:
         7b:8b:39:7f:d3:6c:6b:ee:e5:29:83:b2:08:bf:9d:8c:e0:78:
         94:b4:7a:21:0b:69:aa:73:d8:d0:da:6e:b7:c8:e5:d3:0a:88:
         b9:60:7c:39:ee:80:4d:e4:61:ca:3e:02:6f:fd:30:7e:94:a6:
         31:12:c9:1d:cb:01:70:1f:67:61:27:d9:11:bc:dd:67:a5:1f:
         f3:12:3b:75:1e:bf:f7:8d:ce:59:65:76:f5:4e:f9:1b:83:6a:
         23:d5:32:08:83:df:db:fa:b0:6b:87:eb:f2:f4:54:44:a5:19:
         b2:4a:e8:c4:ac:92:f7:27:a0:e1:2d:76:54:fe:65:66:ef:2b:
         bf:c5:72:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:49:12 2025 by rpki-client