This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
File:                     fVexU-7RELy9FNx-M_1H8C4v4HE.mft (raw, json)
Hash identifier:          HOxNs1NdbVFedi1ycL63oxggQ9Eb5EZxdE9+kTWK2xI=
Subject key identifier:   E0:30:56:73:A4:CF:39:85:C8:D5:88:A8:4F:48:53:C9:30:80:7F:74
Authority key identifier: 7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
Certificate issuer:       /CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Certificate serial:       019AF12CFD2A6FF806C9CAB32D27BF9D901E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
Manifest number:          1760
Signing time:             Sat 06 Dec 2025 01:00:48 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:48 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:48 +0000
Files and hashes:         1: 1gktZR41lM7jL9DWPWwIpWV6M78.roa (hash: HJiBs8EKqMUy6AK9Z/fItBE1opDLfro1xaIJHGboLfU=)
                          2: fVexU-7RELy9FNx-M_1H8C4v4HE.crl (hash: p0aboRldsQFuIkXERJZfRGjag6nA25QyJdMTzH8JuxU=)
                          3: kUIltMqyJJ6z_MdFBE4UK_gpE0M.roa (hash: pWOc8zM/cAP0pnHrLKIMmGeqVgPcNsErRAC9f0Wl2a4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2c:fd:2a:6f:f8:06:c9:ca:b3:2d:27:bf:9d:90:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
        Validity
            Not Before: Dec  6 01:00:48 2025 GMT
            Not After : Dec  7 01:00:48 2025 GMT
        Subject: CN=e0305673a4cf3985c8d588a84f4853c930807f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b5:04:e3:5e:8a:72:24:88:ce:e5:43:c9:df:
                    c1:00:97:87:af:2a:a2:be:e0:fc:6d:1e:38:13:3c:
                    d2:84:e1:7c:f3:95:5a:37:18:81:cc:a7:2c:b7:e8:
                    01:3d:a1:c6:e2:fc:02:f7:99:1e:b4:df:47:40:63:
                    59:43:aa:87:ea:8b:b4:d3:ba:4b:e0:77:fc:16:2e:
                    7f:cb:d9:b7:33:db:00:15:81:10:00:56:26:80:ae:
                    93:13:de:55:f3:c1:88:31:62:6c:dd:5d:6d:2c:56:
                    d2:2a:c6:90:2f:18:33:2a:bd:26:85:ad:5f:ad:e0:
                    91:1a:12:09:c8:a2:63:a2:39:3c:bc:8b:09:8b:1d:
                    20:a9:0f:fb:c4:1f:56:17:c0:47:94:5f:84:0a:06:
                    56:27:49:8a:44:88:fb:bb:a1:25:4a:ff:b3:e0:38:
                    ec:56:00:1d:87:b3:57:43:13:cd:44:49:be:a5:29:
                    6e:d4:a1:c6:17:2e:4d:2f:83:f3:4e:dc:41:8d:bb:
                    96:0f:68:f9:5b:c7:4f:0b:67:28:c9:12:b8:a9:33:
                    04:0f:6f:e2:25:4f:b3:d3:6d:55:fa:af:c6:61:fa:
                    f5:07:67:fa:7b:c2:d2:89:5b:43:af:16:19:87:69:
                    55:d3:06:c9:c6:7a:cc:a1:33:d8:61:c8:73:56:7c:
                    a8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:30:56:73:A4:CF:39:85:C8:D5:88:A8:4F:48:53:C9:30:80:7F:74
            X509v3 Authority Key Identifier:
                keyid:7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e0:4e:ee:13:30:d7:eb:8c:c2:2f:da:35:3d:9d:7d:5f:3d:
         67:81:13:ec:54:c0:e9:3f:46:e6:ec:b9:c0:0c:a9:76:15:8d:
         1f:b2:9e:49:5e:96:dc:0c:4d:90:f2:7a:0f:be:bb:b8:44:e9:
         dc:ff:33:4f:cd:97:79:e0:79:dc:a2:05:a4:c4:4d:c1:73:73:
         5b:db:5b:3d:09:a5:20:40:13:a3:e3:9c:28:25:77:6b:7a:fd:
         6f:d9:e3:3a:c0:87:52:09:c2:c5:80:a9:52:62:4c:a2:cb:3d:
         4a:ce:a2:6c:fc:ce:ad:ea:0d:89:eb:52:86:9f:aa:9d:78:d3:
         a7:79:30:66:73:68:52:f8:c6:f2:e4:e4:e0:e8:68:c8:34:13:
         d6:a4:2f:3d:73:02:1a:7a:55:60:fe:42:7a:ce:6b:19:35:58:
         1f:0a:b4:29:ac:1a:ba:52:9f:72:4d:64:7f:d3:5e:e4:13:eb:
         b2:c0:6a:bd:48:6c:31:ec:62:a6:41:b1:30:86:10:71:a2:39:
         5d:de:d6:c9:05:dd:95:3d:70:ac:5c:1d:b2:49:75:08:3e:27:
         8c:8d:48:6e:96:8b:3b:ff:9b:c0:29:3c:ff:14:79:7c:c6:a4:
         12:03:29:32:1c:ac:aa:71:55:be:46:68:b1:bd:c0:f8:be:82:
         00:ec:f3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:48:11 2025 by rpki-client