This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
File:                     1-muQgEgTpldoh5it3nvb0ObQ5T4.mft (raw, json)
Hash identifier:          YhNf5xqg1YUw2pSKJxGE3u6Tnd95hzMJNPJg5TVrNUs=
Subject key identifier:   97:8B:26:8A:A6:08:A8:A7:DB:E0:22:30:14:A5:16:D0:9F:72:2B:2F
Authority key identifier: FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E
Certificate issuer:       /CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
Certificate serial:       019AF23F5F071FF152396557A6A0A58F2E24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
Manifest number:          0686
Signing time:             Sat 06 Dec 2025 06:00:30 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:30 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:30 +0000
Files and hashes:         1: 1-muQgEgTpldoh5it3nvb0ObQ5T4.crl (hash: TQmRsJf6a2kn3D45Y1jPumPGVyILmFc8Vir0YGYeNRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:5f:07:1f:f1:52:39:65:57:a6:a0:a5:8f:2e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
        Validity
            Not Before: Dec  6 06:00:30 2025 GMT
            Not After : Dec  7 06:00:30 2025 GMT
        Subject: CN=978b268aa608a8a7dbe0223014a516d09f722b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d7:47:cc:3f:51:74:d6:88:1c:ba:7d:99:19:
                    33:9d:b1:d7:bf:3f:80:ed:a6:7c:71:0f:48:c1:ef:
                    91:16:e2:dc:ff:8e:28:d7:8f:1a:71:9a:ec:db:5f:
                    ae:ce:bb:a4:75:88:68:5d:2e:85:24:3d:eb:5a:8e:
                    45:2d:4e:bf:c7:db:72:c1:67:d5:af:e4:6f:8f:b9:
                    43:34:b0:3c:aa:fb:d7:74:88:66:52:1f:60:9a:4a:
                    df:d5:ac:ee:3d:58:82:a9:00:76:5e:2a:ee:1e:a4:
                    42:b5:5e:0e:ba:12:d5:22:53:22:75:3b:72:c1:fc:
                    c5:fe:60:25:e7:e8:35:c3:e3:f6:af:83:e5:e0:f5:
                    25:a6:74:6b:1c:2b:71:0e:71:61:c6:38:40:43:34:
                    b2:49:61:c5:1e:18:8e:f9:f9:c0:7b:7e:18:c1:f0:
                    ac:4a:31:08:e1:5a:29:38:50:0c:fd:cb:b8:8f:d5:
                    97:47:7b:7c:4b:a8:c7:6b:99:e3:08:96:e7:8d:b8:
                    c7:23:3a:c2:ab:40:fc:02:cb:8e:3d:92:f0:b8:83:
                    6f:aa:07:76:8a:3a:36:d0:61:8e:04:57:0c:b6:65:
                    86:e0:ea:25:d3:5f:85:84:06:8c:72:e2:05:54:47:
                    96:15:3c:05:1f:6d:1e:b2:93:54:14:9d:e1:72:a0:
                    d6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8B:26:8A:A6:08:A8:A7:DB:E0:22:30:14:A5:16:D0:9F:72:2B:2F
            X509v3 Authority Key Identifier:
                keyid:FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:27:a4:f7:47:66:3e:db:49:73:9b:ca:85:ad:3c:a0:e7:57:
         04:14:17:cd:3e:9d:d4:6e:ce:94:08:20:13:63:06:f1:cd:ba:
         4f:91:37:a2:90:2f:17:2d:1e:c8:65:42:03:31:fb:4b:88:7c:
         0f:b1:65:1e:3c:a0:e2:5a:55:e9:30:db:ff:1a:da:ee:b6:c9:
         b6:33:14:ee:a4:cb:bc:4f:e0:3b:fe:58:60:36:8b:95:3c:24:
         51:2d:5e:ae:e3:53:be:ef:b6:ba:bc:51:3a:28:f6:29:53:77:
         0b:52:dd:96:09:b0:ad:35:1f:7d:4c:43:af:07:77:c9:59:6a:
         1c:1f:27:ca:a4:a0:09:ac:30:9e:4e:83:20:75:71:dc:b7:6c:
         53:1a:48:d4:dd:57:00:ad:08:4b:69:fc:cb:35:49:94:d4:59:
         c1:ba:4f:89:ec:25:8f:0b:46:44:db:53:9c:35:b8:22:0c:c1:
         9e:25:2b:f3:0c:66:d5:a1:04:83:e6:d1:a8:6e:1c:6f:36:a0:
         15:7e:c7:2e:22:1f:d1:fb:5c:b4:b4:f2:ab:30:1d:9d:43:25:
         8d:79:9a:89:cd:c3:d2:e1:47:b6:ea:99:3d:de:2c:a7:dd:2f:
         95:e9:8d:b8:72:31:29:0c:f6:87:c0:8d:e3:27:fc:03:44:86:
         20:41:c6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:47:42 2025 by rpki-client