This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
File:                     fTXAsgkTXCLMgAWnwuIixjwTbLA.mft (raw, json)
Hash identifier:          nG51W3ZQ6gQkCrfc00X0k+vxsQCWQCEJ7onFTf0VpfU=
Subject key identifier:   8E:4E:63:3E:6F:2A:8F:58:A6:DB:D3:A6:21:00:C7:54:83:7F:B2:88
Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Certificate issuer:       /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Certificate serial:       019B476FCFAE3E77187B22B1867BF9B55CDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
Manifest number:          178D
Signing time:             Mon 22 Dec 2025 19:01:08 +0000
Manifest this update:     Mon 22 Dec 2025 19:01:08 +0000
Manifest next update:     Tue 23 Dec 2025 19:01:08 +0000
Files and hashes:         1: E008mlaZ-98yoVlxucj25N9tnVo.roa (hash: 7h9j4kfENIh6mVCwgI4OQBIMY0MBjmJwFr/fTNDIJFk=)
                          2: R2-GAax-KT1qCEjDDbUwaoUFHaY.roa (hash: DTrChNvAxi6mH07womaTROYkgqmDr0mKtOiNc7UHhPs=)
                          3: fTXAsgkTXCLMgAWnwuIixjwTbLA.crl (hash: dTr/h59aJhrzyzlvcTTGNM9Fjs8cLxqE+HgCWDswBdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 19:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:47:6f:cf:ae:3e:77:18:7b:22:b1:86:7b:f9:b5:5c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
        Validity
            Not Before: Dec 22 19:01:08 2025 GMT
            Not After : Dec 23 19:01:08 2025 GMT
        Subject: CN=8e4e633e6f2a8f58a6dbd3a62100c754837fb288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7e:05:eb:ab:54:73:40:d8:89:66:61:19:7a:
                    dd:76:b3:9b:0b:00:ab:08:fd:68:e4:ee:fc:bc:74:
                    f1:be:84:3c:33:7a:8a:2d:11:06:41:a4:42:ef:06:
                    71:c0:18:01:6b:d3:93:2b:a2:f1:b1:cd:08:68:47:
                    4c:9a:bf:2f:4a:6b:cf:ad:c5:9a:38:78:48:42:91:
                    92:84:dc:96:4d:47:3e:d9:f1:b4:cd:98:9a:d9:b2:
                    4b:c1:00:e9:2f:54:d5:5f:fe:e6:4c:e8:62:3d:84:
                    b7:92:f7:d0:9c:74:03:17:0d:6e:56:02:1f:d4:a2:
                    e8:f8:9b:17:26:49:73:53:e7:2e:fa:c3:34:39:a8:
                    ac:eb:b3:f8:f5:71:a1:89:73:b8:75:74:a7:3a:3f:
                    95:14:f6:d8:c1:45:2f:cf:d8:e9:37:f0:01:20:7d:
                    95:6a:b7:49:41:41:c0:c2:b1:d9:17:72:9a:b9:e2:
                    53:e5:5e:9e:d5:54:4e:c1:4f:2f:66:38:6c:33:91:
                    0d:a7:78:1b:68:c0:02:6f:3e:fc:66:80:99:63:fa:
                    59:5c:b7:23:38:9b:58:b6:40:17:15:8a:a2:4d:1f:
                    95:7a:4a:9c:ca:c0:64:d7:a4:f4:8b:31:90:83:07:
                    3a:08:14:18:05:bf:6b:25:ea:bf:85:f3:62:cd:40:
                    75:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4E:63:3E:6F:2A:8F:58:A6:DB:D3:A6:21:00:C7:54:83:7F:B2:88
            X509v3 Authority Key Identifier:
                keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f0:78:f7:d2:a3:af:ef:13:f2:93:58:63:c0:99:43:7f:d1:
         7a:06:cd:ed:2f:66:35:32:a9:54:8b:ad:bb:73:58:43:0e:ee:
         7a:2c:c8:e2:5d:78:56:cd:dd:41:ba:b8:79:e3:06:d3:dc:9e:
         54:6e:31:0c:0a:d0:4a:f1:1b:57:39:08:22:2a:4d:da:42:12:
         36:8f:06:7b:7d:b3:5f:70:93:bd:1d:1e:bc:7c:e7:ce:aa:aa:
         ab:dc:93:ab:4f:60:d2:db:a9:56:db:6a:78:f8:e1:20:07:5a:
         b0:24:09:04:b4:70:96:53:07:27:d1:a1:3c:3e:6e:25:8f:df:
         b1:45:c3:fd:e2:c9:ac:14:04:af:5f:36:b9:b7:2e:57:af:7b:
         46:62:7f:ed:5c:cd:08:76:83:dc:1a:cf:d0:fe:12:97:00:e3:
         c1:a1:f3:12:96:98:55:0c:85:f9:41:58:8e:6c:9f:48:fc:63:
         aa:c4:45:42:ad:15:da:4e:58:2d:1e:e1:99:2d:80:b8:69:4f:
         59:89:3c:f9:a8:ce:57:ae:88:64:69:ae:57:48:b8:60:b1:85:
         dc:86:35:e7:49:7c:29:6a:a6:4d:a2:14:26:97:aa:aa:ce:15:
         9f:5e:64:44:04:14:df:bf:0a:d2:2e:51:8c:1c:05:0f:b8:cc:
         d7:c1:32:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 02:38:45 2025 by rpki-client