This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
File:                     FYLuxLNHON9xjangFDqdDpJBqFw.mft (raw, json)
Hash identifier:          3ulpfEp5SpX5VDFcGJNyV4iWvQy4MsMOx6MI37B2Two=
Subject key identifier:   33:33:49:1A:2F:A7:19:A6:6E:32:55:ED:6C:F6:6D:75:4C:7D:37:D2
Authority key identifier: 15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C
Certificate issuer:       /CN=1582eec4b34738df718da9e0143a9d0e9241a85c
Certificate serial:       019AF0BF448F597AF94C860FAEBC6B43CFFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
Manifest number:          1765
Signing time:             Fri 05 Dec 2025 23:00:57 +0000
Manifest this update:     Fri 05 Dec 2025 23:00:57 +0000
Manifest next update:     Sat 06 Dec 2025 23:00:57 +0000
Files and hashes:         1: FYLuxLNHON9xjangFDqdDpJBqFw.crl (hash: tyzXaR9lu74Uv5edfYHvPskuv+FpL3eq2kV4Pj/6poA=)
                          2: k5ydTa5DTriL3x0F0EbNZljZ2r0.roa (hash: p8IHnKZdftXn56jD2pkT3j17kBY8BQWmijSx2NhIyvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 23:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:bf:44:8f:59:7a:f9:4c:86:0f:ae:bc:6b:43:cf:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1582eec4b34738df718da9e0143a9d0e9241a85c
        Validity
            Not Before: Dec  5 23:00:57 2025 GMT
            Not After : Dec  6 23:00:57 2025 GMT
        Subject: CN=3333491a2fa719a66e3255ed6cf66d754c7d37d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:63:3c:73:6e:76:de:5d:3c:ab:b8:04:57:24:
                    2e:e3:38:07:70:16:ab:c4:b3:a3:87:58:b5:ee:76:
                    f3:3a:26:94:13:d9:80:88:0d:0a:6c:44:3a:1a:36:
                    ee:6e:95:5c:8c:19:49:de:1c:28:17:1c:c8:ef:32:
                    ea:a4:7e:b1:f1:85:7f:67:f6:6a:2c:86:10:72:64:
                    60:16:36:a7:19:7f:02:29:da:12:27:03:af:05:6c:
                    14:7c:2d:6a:9d:2b:65:ef:33:fb:69:b4:8c:4f:44:
                    a3:38:0a:a3:f5:fb:e9:66:8c:70:12:20:ed:b9:83:
                    94:47:cc:97:ef:b3:6b:83:c4:d2:7f:d5:93:54:88:
                    da:a8:ea:33:00:7b:1c:7b:aa:2c:2b:8b:0a:c9:a3:
                    c5:87:77:15:48:03:06:f3:c0:54:fb:14:3e:8a:b2:
                    47:15:49:91:c0:3a:53:d6:81:80:23:04:1c:da:47:
                    bd:5d:ac:fc:ad:61:ff:65:7d:2d:6a:24:ca:c3:f2:
                    94:65:69:40:6e:03:c2:34:84:85:b1:79:94:eb:f6:
                    f5:ea:13:45:bd:05:e6:18:8d:a7:7f:26:82:63:71:
                    84:e3:7d:5d:a7:dc:46:93:f8:e0:61:24:10:e0:0c:
                    39:50:d0:fa:a2:e7:b4:f7:75:a1:3d:f4:10:5a:bb:
                    06:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:33:49:1A:2F:A7:19:A6:6E:32:55:ED:6C:F6:6D:75:4C:7D:37:D2
            X509v3 Authority Key Identifier:
                keyid:15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9a:fd:9f:2a:d7:63:0d:47:ec:be:95:f8:10:29:92:59:5d:
         2b:e6:0c:af:37:e1:53:dc:8d:9d:af:97:0a:fb:4c:2f:e4:05:
         2b:fb:bc:18:09:09:c8:35:20:39:90:04:28:d9:84:14:10:3f:
         5c:dc:66:2e:7b:e1:88:d2:d6:71:98:b2:c9:92:0e:ba:67:15:
         c9:a5:84:00:81:ff:aa:c8:28:e7:b9:d9:e8:f9:d9:ad:69:2c:
         3e:74:b5:01:99:33:70:0e:6d:e9:cc:24:f8:41:2d:bf:e9:b1:
         98:f9:09:b5:53:73:55:4f:34:39:b2:cb:a6:95:a6:48:94:0b:
         7f:aa:2f:98:ca:38:f4:92:2a:91:ac:bd:08:53:81:73:fe:23:
         2f:5c:83:e4:aa:2d:91:2c:39:1f:e7:91:63:61:57:51:45:50:
         8c:c7:bc:ca:09:49:18:ea:3e:be:70:c7:b6:b3:70:16:b0:d0:
         b5:fe:ff:7e:cc:b7:eb:27:25:05:1d:2e:c1:fe:a2:10:02:fa:
         a9:b6:cd:e4:c1:a9:d7:88:1f:97:4b:0d:b9:52:84:52:20:f5:
         15:16:58:f3:16:2d:b4:c0:11:e3:62:72:c2:9c:2f:6b:c5:fb:
         88:26:52:35:95:63:7d:f9:bb:43:f5:ac:d4:b7:cb:01:a9:02:
         cd:18:7f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:22:59 2025 by rpki-client