This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
File:                     FbWVJg9ywiJUesPjZ_LIh644o_w.mft (raw, json)
Hash identifier:          yvG839aFR54mzxHYEvxWZy5KeXY/rDeIEktY4oCFHn8=
Subject key identifier:   24:B7:12:1E:16:9F:39:3A:90:97:83:AC:F9:3A:5C:A6:71:D8:DB:F1
Authority key identifier: 15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC
Certificate issuer:       /CN=15b595260f72c222547ac3e367f2c887ae38a3fc
Certificate serial:       019B435B8CF141664A64FFC6129899E2F277
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
Manifest number:          1535
Signing time:             Mon 22 Dec 2025 00:00:31 +0000
Manifest this update:     Mon 22 Dec 2025 00:00:31 +0000
Manifest next update:     Tue 23 Dec 2025 00:00:31 +0000
Files and hashes:         1: FbWVJg9ywiJUesPjZ_LIh644o_w.crl (hash: mAi1InZ5xHv9pNACY9OpIOf2vINj5hc/v6FrTVVUUJA=)
                          2: gEUoWtci9gDrlWD7_2HBRPHc3Kk.roa (hash: m0n0mKFLG+q3BgRaxr/RvXon3zAIOWdnRruNeP120aw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:43:5b:8c:f1:41:66:4a:64:ff:c6:12:98:99:e2:f2:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15b595260f72c222547ac3e367f2c887ae38a3fc
        Validity
            Not Before: Dec 22 00:00:31 2025 GMT
            Not After : Dec 23 00:00:31 2025 GMT
        Subject: CN=24b7121e169f393a909783acf93a5ca671d8dbf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6a:b8:04:03:18:6b:d9:bf:88:bb:9a:8f:30:
                    31:82:cb:25:85:f5:0f:ac:df:d1:6d:a7:bf:16:9b:
                    27:0e:47:20:77:42:2d:74:b4:f7:b9:d2:f3:82:9d:
                    e2:ae:96:a2:76:e3:a2:17:38:95:cf:1b:a8:59:3b:
                    c4:b0:1c:ca:f3:63:b0:68:32:4b:82:1b:81:39:83:
                    15:26:76:bd:d7:e5:09:b9:19:c9:be:98:a2:29:e5:
                    25:38:bf:14:57:94:f7:20:06:6e:27:62:18:b8:a3:
                    e5:11:3a:fc:c5:f9:66:cd:7c:b5:2b:f0:b5:19:47:
                    7a:2e:bd:69:d0:b1:3f:56:2e:31:0d:2f:02:9b:d4:
                    85:b2:67:7f:a9:fe:9f:c8:b2:a6:cc:5b:8f:67:03:
                    c6:97:e7:fa:fe:7b:89:70:ed:62:5c:df:e4:ea:91:
                    0f:1c:ec:c5:5f:2d:f1:42:25:44:ab:5e:92:57:5f:
                    88:ab:6c:7d:d0:34:ea:f0:b9:30:89:24:9c:5c:cf:
                    d1:ca:9c:c4:8d:0b:f3:6b:e6:fd:cb:ee:4a:9b:73:
                    ea:dd:ec:57:50:53:f4:27:95:e3:2c:bb:1c:59:e3:
                    92:c8:b1:6d:7c:f6:77:5b:b6:2e:18:06:70:a1:cb:
                    24:07:8d:54:5e:74:83:ef:3a:27:38:0d:2e:f1:7c:
                    32:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B7:12:1E:16:9F:39:3A:90:97:83:AC:F9:3A:5C:A6:71:D8:DB:F1
            X509v3 Authority Key Identifier:
                keyid:15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:00:f1:eb:68:db:7b:73:9e:db:91:f0:8c:c1:79:c7:f4:8c:
         99:e5:34:25:2b:4e:b9:78:27:78:ae:3b:2b:ab:2d:22:4c:d1:
         b2:f7:3f:9b:aa:d0:e8:9c:9d:81:ea:bf:1a:de:61:77:74:a9:
         64:59:9f:50:3c:00:f9:29:85:7b:2b:86:07:b4:a9:61:33:28:
         c8:c7:86:a2:c6:c0:36:2d:e0:10:b5:c9:72:e1:77:78:04:31:
         f1:c8:d5:f2:dc:a9:42:5b:58:03:fd:6c:c9:84:41:f2:cd:79:
         76:ba:7c:f8:63:da:5c:5e:cf:34:0b:f2:52:bb:86:a2:fc:60:
         5e:98:e4:63:6b:c4:95:cf:a9:b6:08:60:37:61:2a:bb:0b:61:
         68:ee:56:66:93:5a:20:ef:71:de:16:54:97:13:aa:a2:39:cb:
         b0:05:1e:9a:18:6d:50:b1:46:c7:40:4f:da:18:8a:c2:83:05:
         e0:38:4d:cc:a0:c3:c2:7e:b7:d6:1c:41:b1:d3:78:82:5b:76:
         fe:a9:75:2c:7e:26:28:1b:80:69:a1:00:71:db:1d:73:e4:13:
         6c:65:82:3e:97:c9:30:29:a0:5c:2b:52:db:21:b0:30:3c:b8:
         69:6d:52:3f:9c:46:ff:fd:cf:ec:21:63:e6:48:65:8b:9d:21:
         90:0e:c0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 01:01:55 2025 by rpki-client