This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
File:                     FOEoPa4LC5l4ZyZcssAIPFETbto.mft (raw, json)
Hash identifier:          AJePYifW/x4OKmTVWhMeCWKf+gv9bpwzWsay5AIVRHQ=
Subject key identifier:   E7:D2:B8:67:DB:56:4F:A2:BB:05:C6:5A:9F:64:FE:B1:50:33:AE:96
Authority key identifier: 14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
Certificate issuer:       /CN=14e1283dae0b0b997867265cb2c0083c51136eda
Certificate serial:       019AF08844EAA12094CB0C4114BE84AFCE87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
Manifest number:          78
Signing time:             Fri 05 Dec 2025 22:00:53 +0000
Manifest this update:     Fri 05 Dec 2025 22:00:53 +0000
Manifest next update:     Sat 06 Dec 2025 22:00:53 +0000
Files and hashes:         1: FOEoPa4LC5l4ZyZcssAIPFETbto.crl (hash: f3zoU4+le67Rju+/CiNp/9SvnNoM2o0LRi/lsa2ibqU=)
                          2: YJnryPyjSM9m2GAkfptlcJ6VzAs.roa (hash: ycoIEs6bEZoIpBaIl7C3dtXJvolOHbKG/ZycQeSD1RA=)
                          3: _PTsrjA4Vx4ohcRmFglFLj69Gbk.roa (hash: qHBktGp3NlHLcFdGjmDdlgxPr6r0hRT3TQKlIEYQtgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 22:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:88:44:ea:a1:20:94:cb:0c:41:14:be:84:af:ce:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14e1283dae0b0b997867265cb2c0083c51136eda
        Validity
            Not Before: Dec  5 22:00:53 2025 GMT
            Not After : Dec  6 22:00:53 2025 GMT
        Subject: CN=e7d2b867db564fa2bb05c65a9f64feb15033ae96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a9:fb:68:9d:53:ae:0b:ba:8a:6a:92:64:9c:
                    61:4a:9b:5c:e4:bd:8e:a1:5a:24:94:e6:80:19:74:
                    86:dd:5b:30:5a:1d:73:4a:92:f0:ac:9c:71:4b:b8:
                    59:7f:78:35:a0:df:79:5e:93:9b:bf:c4:e2:5c:31:
                    39:cc:fd:63:f8:ad:e1:c9:87:fc:33:8b:52:ef:66:
                    c3:fa:c3:46:fc:a4:62:a9:e0:06:ea:79:b4:4c:8b:
                    95:4d:f5:e8:db:81:00:0b:fe:9e:82:d3:ca:c2:29:
                    61:dd:78:b9:9e:2a:9a:90:a4:df:3e:f1:bf:ee:f9:
                    24:44:1b:17:0f:5d:5d:af:20:7c:de:c4:7a:1d:a6:
                    60:4a:c2:1b:dc:67:98:3f:7d:8b:1a:8c:31:7c:88:
                    76:9b:8b:2f:64:51:b4:12:9f:65:5e:28:9f:6d:09:
                    86:97:61:1f:3f:4d:84:4b:5a:16:54:76:b7:fd:4a:
                    e6:f9:07:58:3f:ea:32:21:a6:ce:b9:97:0f:c7:ed:
                    9d:38:e9:a2:ec:f7:93:e1:09:a8:e6:7f:e7:b9:ad:
                    15:12:23:69:d8:34:51:36:fb:87:65:1c:6c:fd:2d:
                    71:05:da:65:e7:98:06:ec:3d:d1:99:a3:ac:c8:e2:
                    43:9a:a3:1a:2c:c5:75:f5:25:f3:27:4f:26:e9:02:
                    84:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D2:B8:67:DB:56:4F:A2:BB:05:C6:5A:9F:64:FE:B1:50:33:AE:96
            X509v3 Authority Key Identifier:
                keyid:14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:18:e6:29:b1:5d:b9:c8:fd:25:53:bf:b7:50:c6:2f:12:ee:
         79:d5:dd:4a:42:2a:f6:fa:6e:82:a9:84:ed:61:42:a2:30:23:
         79:a1:31:03:d3:37:55:dc:0c:e5:2c:c2:1c:0b:97:df:96:cc:
         2a:c9:9b:f7:f0:a5:e5:0b:e5:94:92:14:3b:71:0c:12:be:92:
         f0:7b:61:9c:55:d9:3d:73:39:2a:79:21:59:10:c5:6b:fe:8e:
         a2:df:e6:69:3a:1f:a2:8c:bb:b1:c9:65:6c:ec:ca:60:4a:57:
         95:6f:18:00:84:6a:1b:23:c3:4b:6d:64:f3:b7:77:d4:23:48:
         71:cc:b8:38:2d:24:dd:2d:83:1c:0c:41:8a:16:2a:ec:ac:6b:
         90:d4:af:e0:a3:bc:c0:d5:7f:fe:c0:94:ed:9a:ad:e4:2c:a5:
         55:df:0d:10:0d:e7:66:63:e2:88:fb:78:f7:81:1d:5c:6f:71:
         83:3b:5a:e2:29:d4:d2:bf:cd:e6:ec:66:e8:62:28:f2:27:37:
         2c:c1:f8:82:98:5b:85:21:02:04:5c:e6:78:98:fb:43:7d:8c:
         49:48:e5:15:55:c9:da:49:f6:79:ae:4d:87:97:cf:c7:5f:1f:
         9f:1c:c7:e8:4f:44:79:74:55:56:f3:d1:cf:2f:49:d8:d0:da:
         43:3f:bb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:02:29 2025 by rpki-client