This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File:                     fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier:          xQTX+Dche9FOjb3o5fgsrG2t/mtWMISIkiA2wjJMWhw=
Subject key identifier:   F8:9C:6C:C0:F0:A4:74:91:D9:74:60:42:08:9F:41:8C:A7:EE:B9:31
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer:       /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial:       019AF2766A851E1511E2A4D19EEE06BCDEA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number:          0AC3
Signing time:             Sat 06 Dec 2025 07:00:38 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:38 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:38 +0000
Files and hashes:         1: 7gpeu0S7hXZ8riAsKwy1ohmGU98.roa (hash: yLiQ4BEaMhFQdskxNlE7aRv3rWf0cLts9Xjd3ePJwJ8=)
                          2: Be7hWobHeXIDcEV-DcvLVcoAOIA.roa (hash: BaLaak1kH9hW9zdiezS80huivnGVBMTLdsyXEFD6uzM=)
                          3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: 76Ss+HtaLCVRfV1s4jh9EzeulZhMl7f7FAI9Z8wHjwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:6a:85:1e:15:11:e2:a4:d1:9e:ee:06:bc:de:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
        Validity
            Not Before: Dec  6 07:00:38 2025 GMT
            Not After : Dec  7 07:00:38 2025 GMT
        Subject: CN=f89c6cc0f0a47491d9746042089f418ca7eeb931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:82:48:7d:ab:e4:76:d2:d3:5e:c4:e1:cf:b7:
                    bb:b5:6b:8d:42:1d:52:f9:9a:c4:b1:ea:7f:c0:8a:
                    69:63:95:07:cd:15:4c:f9:0c:db:26:dc:08:b6:f4:
                    7d:96:fc:90:55:03:e2:8b:0b:7d:9b:10:7a:1c:64:
                    bc:e6:3b:19:11:38:22:72:cd:8a:1a:8f:6b:a3:81:
                    f2:13:57:96:e4:b3:88:48:86:95:31:df:00:55:ee:
                    eb:5b:4d:fa:78:81:31:40:24:8d:72:b9:f4:ce:40:
                    d1:22:fe:eb:fa:17:39:15:95:c3:0a:5f:92:cb:f0:
                    96:41:8b:68:f6:ea:d5:65:38:fb:86:fd:78:b9:b3:
                    e7:6f:f3:90:75:69:c2:d8:a3:07:a7:67:dc:69:f9:
                    c0:2b:a6:c0:eb:cb:e2:2d:05:2d:2f:96:3d:b3:1d:
                    a9:7b:a4:83:b1:fe:6b:b6:88:60:8c:86:40:ee:61:
                    49:d7:4f:91:a0:16:18:cf:95:65:48:33:84:51:30:
                    b6:fa:12:bf:ce:f1:38:37:ed:fa:fe:2e:c3:d1:2f:
                    08:b9:f4:fb:64:ec:3f:ef:d6:54:09:73:49:c0:c6:
                    50:51:9e:5b:ae:cd:ae:27:b7:84:7f:68:2b:35:97:
                    bb:57:73:57:f0:2a:50:ea:b2:c6:65:65:43:0d:58:
                    4e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9C:6C:C0:F0:A4:74:91:D9:74:60:42:08:9F:41:8C:A7:EE:B9:31
            X509v3 Authority Key Identifier:
                keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:7e:a9:fb:e0:aa:00:48:05:63:4e:9e:a6:9b:48:ea:6a:b7:
         62:3e:97:fe:f2:de:76:63:4d:4b:76:a1:09:80:13:66:31:86:
         09:ee:41:07:6d:fc:f2:b4:fc:af:7c:34:50:1f:ff:45:db:a3:
         b3:20:9b:8c:8f:ff:7b:9f:5c:fa:50:16:d4:3f:68:60:9f:11:
         0e:87:21:59:4e:50:39:e0:0c:64:ae:61:de:ab:95:36:5f:ab:
         24:0e:3f:33:a3:70:78:70:28:54:9d:d9:4e:24:53:11:32:c4:
         23:d7:5b:db:21:b9:99:36:3d:d4:94:e2:96:0a:84:1f:ef:e6:
         76:35:a6:9c:32:23:8d:33:d9:a4:fc:e9:92:52:b4:97:cd:36:
         82:71:dd:8a:67:b7:13:73:82:9b:63:3d:b5:2f:79:28:e4:83:
         ac:e5:bb:c7:7b:b2:df:d8:ca:a1:35:d5:7e:9c:a5:98:45:3a:
         01:28:a6:50:4d:0d:25:a6:11:7b:1e:6e:b7:1d:81:19:c3:54:
         7e:7b:f7:4c:96:f7:49:1f:01:79:06:f5:e8:42:8e:06:3f:43:
         91:88:0c:d4:aa:92:15:90:3b:1a:25:aa:0b:cc:3b:63:f0:fa:
         3b:88:58:63:98:4b:f4:ef:8d:dc:ba:c1:7c:7d:23:74:07:f0:
         bb:21:92:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrydmqFHhUR4qTRnu4GvN6iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMzJkZWRhMzFmZThlYWZjZGFkNmUyYTA2ZmRlMjM2ZTdk
MTFkNjEwHhcNMjUxMjA2MDcwMDM4WhcNMjUxMjA3MDcwMDM4WjAzMTEwLwYDVQQD
EyhmODljNmNjMGYwYTQ3NDkxZDk3NDYwNDIwODlmNDE4Y2E3ZWViOTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYJIfavkdtLTXsThz7e7tWuNQh1S
+ZrEsep/wIppY5UHzRVM+QzbJtwItvR9lvyQVQPiiwt9mxB6HGS85jsZETgics2K
Go9ro4HyE1eW5LOISIaVMd8AVe7rW036eIExQCSNcrn0zkDRIv7r+hc5FZXDCl+S
y/CWQYto9urVZTj7hv14ubPnb/OQdWnC2KMHp2fcafnAK6bA68viLQUtL5Y9sx2p
e6SDsf5rtohgjIZA7mFJ10+RoBYYz5VlSDOEUTC2+hK/zvE4N+36/i7D0S8IufT7
ZOw/79ZUCXNJwMZQUZ5brs2uJ7eEf2grNZe7V3NX8CpQ6rLGZWVDDVhOZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPicbMDwpHSR2XRgQgifQYyn7rkxMB8GA1UdIwQY
MBaAFH0y3tox/o6vza1uKgb94jbn0R1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jNDNlZDItNzBiMy00NWQ4LWFhMjgt
NTNmYjAxOGE4YzBlLzEvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jNDNlZDItNzBiMy00NWQ4LWFhMjgtNTNmYjAxOGE4YzBl
LzEvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA36p++Cq
AEgFY06epptI6mq3Yj6X/vLedmNNS3ahCYATZjGGCe5BB2388rT8r3w0UB//Rduj
syCbjI//e59c+lAW1D9oYJ8RDochWU5QOeAMZK5h3quVNl+rJA4/M6NweHAoVJ3Z
TiRTETLEI9db2yG5mTY91JTilgqEH+/mdjWmnDIjjTPZpPzpklK0l802gnHdime3
E3OCm2M9tS95KOSDrOW7x3uy39jKoTXVfpylmEU6ASimUE0NJaYRex5utx2BGcNU
fnv3TJb3SR8BeQb16EKOBj9DkYgM1KqSFZA7GiWqC8w7Y/D6O4hYY5hL9O+N3LrB
fH0jdAfwuyGS7Q==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:18:05 2025 by rpki-client