This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft
File:                     fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft (raw, json)
Hash identifier:          j+FYjdAtDPP7JR0xa4fV822CnFNAk3Ii8cEnkttCRm0=
Subject key identifier:   AE:B1:43:FC:0E:17:C3:2B:59:27:48:9B:C0:B5:37:CB:6F:41:12:CF
Authority key identifier: 7E:E5:C0:F9:5A:B7:BE:8B:85:F7:11:FA:43:36:65:C1:4E:6E:93:59
Certificate issuer:       /CN=7ee5c0f95ab7be8b85f711fa433665c14e6e9359
Certificate serial:       019B4DE0E2AC85C6368589E8B36F506EABF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft
Manifest number:          0BB2
Signing time:             Wed 24 Dec 2025 01:02:22 +0000
Manifest this update:     Wed 24 Dec 2025 01:02:22 +0000
Manifest next update:     Thu 25 Dec 2025 01:02:22 +0000
Files and hashes:         1: 592QE4e5wcWss3bcgpe0118a4o8.roa (hash: yC3/nLVWBZfIP94drGS0GWcqBe2jUht68itw5CKk0vc=)
                          2: J06OgSRvPXWRTEncuFxsKEeSz8k.roa (hash: q4U3gprZEclQCDc7ah7VpmWTw4NUG0NXMbh/c06uR5g=)
                          3: JGBf-HSBUO7hgbq8X1OnBUjDyVQ.roa (hash: MtZT8bLkQTUgeFwypbcTgOQkoRE3SGspSU9gsC7WWCE=)
                          4: fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl (hash: nsk26ppTJGNcn2M0qvQMg7IE66SFmag60Bs066IOmbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 19:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4d:e0:e2:ac:85:c6:36:85:89:e8:b3:6f:50:6e:ab:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee5c0f95ab7be8b85f711fa433665c14e6e9359
        Validity
            Not Before: Dec 24 01:02:22 2025 GMT
            Not After : Dec 25 01:02:22 2025 GMT
        Subject: CN=aeb143fc0e17c32b5927489bc0b537cb6f4112cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b2:50:49:ca:2d:a7:2f:cf:28:b4:0c:74:06:
                    d7:77:96:b8:c1:ba:69:ce:de:c5:67:b5:3e:f0:73:
                    99:1f:9b:68:81:8d:3e:9b:6c:91:03:d0:c5:c6:27:
                    91:e6:a1:24:37:45:ea:29:90:4a:b3:f0:32:15:73:
                    b0:1a:96:16:c1:34:0a:6d:26:ba:ff:c4:4d:2c:7c:
                    d4:7f:c3:8b:5a:b3:c8:68:9e:39:9b:02:f6:a1:dc:
                    9e:22:c7:c2:81:86:53:49:97:13:02:9f:76:b8:eb:
                    5e:d6:d9:14:72:7c:19:d9:9c:09:e8:6b:bc:c6:de:
                    53:47:f1:78:54:78:15:5f:ff:0a:28:d8:e9:56:a8:
                    76:22:93:67:51:d2:3d:1e:fe:3f:9c:68:ab:bd:2d:
                    a7:7c:49:d4:2d:09:95:64:bd:08:8d:c3:33:89:7f:
                    b3:22:df:c5:92:41:e0:f5:95:19:18:cc:61:a7:32:
                    a1:f0:4a:44:99:59:11:60:e9:09:33:c6:6a:cc:98:
                    f2:aa:70:a1:aa:fc:69:de:45:f2:fa:d7:f5:f1:5c:
                    bf:d4:47:73:b0:53:b9:02:ec:ee:e1:ce:52:36:6a:
                    f6:52:b6:04:0c:d6:ce:de:7a:48:de:60:e7:4a:49:
                    fe:ca:e7:b5:b4:6c:81:9e:b4:31:f6:7c:f0:c5:01:
                    c5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B1:43:FC:0E:17:C3:2B:59:27:48:9B:C0:B5:37:CB:6F:41:12:CF
            X509v3 Authority Key Identifier:
                keyid:7E:E5:C0:F9:5A:B7:BE:8B:85:F7:11:FA:43:36:65:C1:4E:6E:93:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:70:e7:d8:9e:cb:ef:8f:a7:42:28:b5:4d:eb:a8:29:00:31:
         3a:ba:18:b8:6c:7e:8d:5b:07:d5:dc:23:e8:bd:a9:26:53:4a:
         ea:c7:4d:c6:67:d9:c2:0d:79:d4:e9:d5:96:c7:86:7a:7e:aa:
         b1:b7:51:9a:48:de:9a:a9:2f:25:7c:15:1f:0e:d9:c5:90:47:
         21:90:cf:c9:8b:56:5c:d4:ee:c1:48:e9:22:bc:37:bc:c7:6c:
         21:e6:72:2e:14:ef:02:c7:f8:45:31:61:ca:4a:2c:ef:32:1c:
         9a:2c:a3:83:25:61:b6:96:a7:da:54:91:24:84:f6:41:04:77:
         66:01:74:31:bf:ea:6d:c6:30:92:46:3a:c3:43:90:8d:9d:aa:
         4f:2b:be:fc:bd:5e:cb:4c:84:34:c3:62:c7:c4:b6:b2:a3:ad:
         5b:4d:f8:3a:e2:25:b7:68:6e:07:df:06:96:8e:2f:7e:c9:1a:
         5e:58:08:0a:fd:a7:a4:01:d8:f9:aa:df:3c:77:08:de:5d:15:
         fc:8b:58:ff:eb:af:d8:fc:b8:14:44:68:99:63:7c:26:29:53:
         01:ad:47:09:66:b1:a7:3f:1a:d5:e5:ff:bd:81:82:24:d6:48:
         fc:58:af:4d:dc:d0:83:4d:35:81:d6:4d:df:c4:81:4a:b7:ab:
         9b:bc:3d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 03:35:27 2025 by rpki-client