This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
File:                     FKPeS35myHz5wz4AigLRpG4_x2Y.mft (raw, json)
Hash identifier:          GHEbtnQNRc0cfkKU53N+Fft8pwNj+T4XNac78quV5T8=
Subject key identifier:   2A:5D:66:08:83:6A:7B:9A:C2:79:13:3B:30:B5:3D:4C:1E:FD:05:FA
Authority key identifier: 14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
Certificate issuer:       /CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Certificate serial:       019AF12E70A2FBC103411B74EA239C0835A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 01:02:23 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:23 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:23 +0000
Files and hashes:         1: FKPeS35myHz5wz4AigLRpG4_x2Y.crl (hash: fyLt2HYJIzQ3cZbb66IlMGb5p/XHB9RSSaD512UBBJI=)
                          2: GeEhJpkO5WEp0V80xW7FkFa1oZU.roa (hash: JmYppaSBdSTenAfyN0elIx7FE9TqEQ3u8bLv/x+0br4=)
                          3: nGeZMPiJHuxTp5r7-LPyVgsD0PU.roa (hash: l7oDkA0XjfZYSaNEYHxPZ+fCmO92nea2c0B83OBtIh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:70:a2:fb:c1:03:41:1b:74:ea:23:9c:08:35:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
        Validity
            Not Before: Dec  6 01:02:23 2025 GMT
            Not After : Dec  7 01:02:23 2025 GMT
        Subject: CN=2a5d6608836a7b9ac279133b30b53d4c1efd05fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3a:64:fb:29:83:f5:29:b0:ed:eb:ef:ef:e2:
                    bf:c3:68:14:4d:30:67:2c:82:20:e4:4a:8a:6d:34:
                    18:37:7f:e1:b4:20:92:ed:b8:8f:7a:85:b2:3b:ed:
                    70:4c:6e:c6:9e:7e:77:6c:df:79:0e:1e:28:07:94:
                    73:1e:67:82:04:62:99:ec:6f:e8:13:b5:18:87:3c:
                    5c:83:85:92:db:81:cc:2d:50:ec:05:95:b2:38:e9:
                    75:bd:29:c8:7f:d8:71:5c:7a:29:84:5e:df:94:a4:
                    98:05:72:e1:18:52:9d:be:5a:2e:9f:d3:46:9b:12:
                    28:8b:2e:e3:e8:59:ab:2d:2e:9f:3b:96:49:34:40:
                    e0:1e:34:91:38:9f:5c:5d:57:49:de:a9:fd:00:84:
                    db:46:11:6b:9f:62:b1:69:9c:11:95:97:af:e5:1f:
                    5f:a9:da:4d:bf:41:28:93:68:66:6a:2c:ed:e4:2c:
                    e2:23:8f:7b:87:84:8f:cc:55:4f:5b:97:a2:94:e3:
                    f0:37:1a:ec:61:db:39:b3:b6:ef:da:d8:dc:e8:49:
                    dd:e8:c5:5f:ee:06:55:6e:d2:88:3c:73:75:48:14:
                    fd:64:03:3d:25:8e:03:02:f7:ae:c0:c5:f5:fc:68:
                    ec:e1:4a:a1:3d:25:ed:e2:c0:9c:f1:76:6e:a8:05:
                    50:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:5D:66:08:83:6A:7B:9A:C2:79:13:3B:30:B5:3D:4C:1E:FD:05:FA
            X509v3 Authority Key Identifier:
                keyid:14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:04:2e:e9:03:c7:99:b8:4b:b5:e9:55:83:63:5b:1c:2d:e4:
         76:7b:62:ac:a5:97:16:a2:96:87:17:82:99:b4:84:fa:02:2a:
         15:81:d8:a0:ac:f5:f1:37:45:09:6d:7a:6a:01:5b:78:ed:5f:
         79:5c:47:7d:2e:53:23:42:82:c3:e2:84:18:f7:39:5f:ec:1f:
         80:d3:50:d0:a4:c5:c7:4c:10:0a:21:c4:b7:e4:7b:ea:eb:e3:
         3c:74:88:f7:8c:f5:c7:e5:b4:b6:ca:66:18:71:ea:e7:3d:4f:
         a3:92:e1:d0:4d:85:d2:87:de:64:43:50:0e:af:13:e4:97:b5:
         cf:57:9d:f6:86:66:87:46:62:7e:d3:18:45:39:e5:9a:95:11:
         18:47:73:b6:04:28:fb:3a:ee:f5:5e:10:89:e1:0b:59:25:25:
         82:c2:a1:60:31:6e:81:39:a2:dd:14:75:05:45:44:3a:99:fc:
         b3:9e:68:8e:78:6a:ed:0f:37:2c:2b:df:65:67:f9:88:ed:4d:
         b0:49:10:6f:83:77:a9:0b:ed:81:a8:05:dc:b0:7a:2c:31:93:
         aa:09:59:24:72:28:42:82:b8:38:cc:ae:56:73:22:c6:a2:65:
         d4:49:1d:f1:00:ff:fb:ea:d9:af:b3:d5:9d:eb:51:d0:13:20:
         f9:05:1d:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLnCi+8EDQRt06iOcCDWoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YTNkZTRiN2U2NmM4N2NmOWMzM2UwMDhhMDJkMWE0NmUz
ZmM3NjYwHhcNMjUxMjA2MDEwMjIzWhcNMjUxMjA3MDEwMjIzWjAzMTEwLwYDVQQD
EygyYTVkNjYwODgzNmE3YjlhYzI3OTEzM2IzMGI1M2Q0YzFlZmQwNWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTpk+ymD9Smw7evv7+K/w2gUTTBn
LIIg5EqKbTQYN3/htCCS7biPeoWyO+1wTG7Gnn53bN95Dh4oB5RzHmeCBGKZ7G/o
E7UYhzxcg4WS24HMLVDsBZWyOOl1vSnIf9hxXHophF7flKSYBXLhGFKdvloun9NG
mxIoiy7j6FmrLS6fO5ZJNEDgHjSROJ9cXVdJ3qn9AITbRhFrn2KxaZwRlZev5R9f
qdpNv0Eok2hmaizt5CziI497h4SPzFVPW5eilOPwNxrsYds5s7bv2tjc6End6MVf
7gZVbtKIPHN1SBT9ZAM9JY4DAveuwMX1/Gjs4UqhPSXt4sCc8XZuqAVQaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpdZgiDanuawnkTOzC1PUwe/QX6MB8GA1UdIwQY
MBaAFBSj3kt+Zsh8+cM+AIoC0aRuP8dmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRktQZVMzNW15SHo1d3o0QWlnTFJwRzRfeDJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wYjU1NmItZWQyMi00NDUzLTkyNWQt
NWRiYjM2ZjdhMDMzLzEvRktQZVMzNW15SHo1d3o0QWlnTFJwRzRfeDJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8wYjU1NmItZWQyMi00NDUzLTkyNWQtNWRiYjM2ZjdhMDMz
LzEvRktQZVMzNW15SHo1d3o0QWlnTFJwRzRfeDJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAugQu6QPH
mbhLtelVg2NbHC3kdntirKWXFqKWhxeCmbSE+gIqFYHYoKz18TdFCW16agFbeO1f
eVxHfS5TI0KCw+KEGPc5X+wfgNNQ0KTFx0wQCiHEt+R76uvjPHSI94z1x+W0tspm
GHHq5z1Po5Lh0E2F0ofeZENQDq8T5Je1z1ed9oZmh0ZiftMYRTnlmpURGEdztgQo
+zru9V4QieELWSUlgsKhYDFugTmi3RR1BUVEOpn8s55ojnhq7Q83LCvfZWf5iO1N
sEkQb4N3qQvtgagF3LB6LDGTqglZJHIoQoK4OMyuVnMixqJl1Ekd8QD/++rZr7PV
netR0BMg+QUdOw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:26:12 2025 by rpki-client