This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
File:                     fusK7GOUn0ElxzqmF36gtyHVJ7s.mft (raw, json)
Hash identifier:          CX3Ti937AGKOGFpnjjgnYfi1/N3gfQOuTsOuwcDFm6g=
Subject key identifier:   F0:24:2B:1E:B0:E7:15:FB:DC:45:BB:96:07:65:D9:08:0D:A1:95:E7
Authority key identifier: 7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
Certificate issuer:       /CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Certificate serial:       019B76DB0CDAAD26B4083571BC625E09DDC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
Manifest number:          0F05
Signing time:             Thu 01 Jan 2026 00:00:25 +0000
Manifest this update:     Thu 01 Jan 2026 00:00:25 +0000
Manifest next update:     Fri 02 Jan 2026 00:00:25 +0000
Files and hashes:         1: cB6_dqDkGm0horqNuxQyDYUnIqU.roa (hash: q3CLYq9eWKAdWNRwww5i4XqHOK10EWh8bmYx4jG625g=)
                          2: dvkQi7LJcacPEnavAtPM4pCT8P4.roa (hash: yFRSaO/fFZoaoBkddBRpfu8JA7wvlMaSX8s3o33YjCY=)
                          3: fusK7GOUn0ElxzqmF36gtyHVJ7s.crl (hash: N+nbZRVESZ8mJ2VaaMahpcLrLLMRDW1aRJ3KmTCK9UM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Jan 2026 00:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:db:0c:da:ad:26:b4:08:35:71:bc:62:5e:09:dd:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
        Validity
            Not Before: Jan  1 00:00:25 2026 GMT
            Not After : Jan  2 00:00:25 2026 GMT
        Subject: CN=f0242b1eb0e715fbdc45bb960765d9080da195e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:85:3d:06:89:5b:4d:95:cc:98:1e:c8:64:be:
                    68:ce:a5:c7:b2:46:c7:09:30:38:f2:b1:1d:c8:60:
                    56:0a:39:6d:0b:d5:62:5a:22:c0:2c:a5:90:17:83:
                    7a:df:c7:42:96:84:62:f2:4c:4b:ce:5f:f3:ef:56:
                    ff:c3:1f:4b:7d:a5:4b:48:ab:b8:83:fb:bd:62:25:
                    a9:65:63:d6:90:a0:53:8c:56:be:5f:5b:4e:dc:3f:
                    f2:33:cf:ca:c2:33:de:42:75:bd:af:fd:1c:c4:09:
                    6b:cd:c0:c6:dd:4e:82:e2:20:b5:87:6a:cf:47:ab:
                    14:75:31:6b:95:6a:96:4c:03:ef:cc:03:bb:d1:2e:
                    a4:c1:bd:5d:bb:64:66:21:1e:e4:b6:bc:cb:4e:1d:
                    23:e7:f9:f3:65:c9:58:58:87:a2:46:bf:8d:2b:f6:
                    e5:78:16:e4:d3:08:c3:cf:c3:2c:13:a4:3d:26:c2:
                    84:36:33:8c:d7:aa:0a:10:bc:ec:be:62:2f:a1:98:
                    2f:05:49:0e:c5:49:f3:39:ce:fb:ec:11:6b:fe:f2:
                    68:5a:d7:18:0c:4d:87:72:ff:3f:57:96:03:51:8f:
                    33:e9:cd:3e:1e:0e:ea:31:3e:9f:4d:67:7b:6a:9e:
                    17:52:57:99:17:a4:72:10:14:af:8d:c3:d6:03:91:
                    ce:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:24:2B:1E:B0:E7:15:FB:DC:45:BB:96:07:65:D9:08:0D:A1:95:E7
            X509v3 Authority Key Identifier:
                keyid:7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:7f:bc:07:9b:24:19:ea:e2:21:f7:ae:57:2e:b8:ed:2c:74:
         7f:4d:8e:e7:01:45:3f:68:dc:0b:f6:ce:54:94:01:75:69:b0:
         75:ce:33:7d:bd:d5:85:f3:8d:2f:f0:6a:59:21:38:88:b5:ce:
         8b:a5:93:d3:6b:0d:82:e2:56:ca:2e:9e:26:77:b6:ec:b9:74:
         d1:ea:c2:ac:8e:09:58:33:58:e9:49:b1:29:fe:44:7e:fc:48:
         aa:b6:92:b9:82:6b:5d:e9:f0:b5:32:24:8e:e4:cc:3c:40:21:
         9f:e9:3f:ba:c4:4f:a3:c8:07:f9:24:d1:2c:59:e1:1b:ed:93:
         3a:ab:91:a5:ae:dd:c4:aa:02:e7:f4:fc:ec:cf:73:9c:eb:3a:
         96:de:f0:51:4c:a3:bd:ea:02:31:a2:6d:21:64:2e:45:5a:9a:
         6d:c4:f8:a2:41:af:50:05:5d:6c:6f:a7:ac:0c:b9:20:23:48:
         ce:40:bb:bc:d7:10:16:03:f8:46:c2:67:31:66:d4:e9:b3:8a:
         b3:58:da:a6:54:80:e7:0b:d7:00:4e:20:94:7b:36:bf:43:6d:
         92:be:88:61:2b:1f:cb:8a:5d:57:28:6c:3b:9e:d6:a3:d4:7d:
         e3:95:03:7e:5e:77:10:79:19:08:80:c7:a6:c0:39:d3:9c:52:
         53:fe:f9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 08:45:55 2026 by rpki-client