This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File:                     Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier:          EweWHXO9oEqGkaWUgzWcGkeIvELrkDD7f8z7HIlgZq8=
Subject key identifier:   B7:11:F3:C0:57:3A:BB:78:23:7C:60:E1:E7:B9:A1:65:46:B2:B3:49
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer:       /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial:       019B3A21A44C69A8B2ECF35B5BE90EBEACAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number:          17B0
Signing time:             Sat 20 Dec 2025 05:00:41 +0000
Manifest this update:     Sat 20 Dec 2025 05:00:41 +0000
Manifest next update:     Sun 21 Dec 2025 05:00:41 +0000
Files and hashes:         1: 6u0Asdv1MK3aB_6LSzkcot6bBic.roa (hash: Unsvdd0urMCZdw1KCmFCBV2OeTjQKyc3NTKlxR83W+g=)
                          2: AGOQH07CbOv-ptcClhHBm5EQp-4.roa (hash: LGaMLQ5/MFjNXGL657nV7BSt6luG57ujXGiYSAKsY5E=)
                          3: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: KjzNK7yUOvtUIU9YtJZtbtQJzRdEpUNPrfqf0VNbHSI=)
                          4: G_eCdr_CtHHYdvx_wsfrWGJQP2E.roa (hash: m4lFNVsxQJtYcVSh1StMkG9TI91ecQZqyflVHyNHncI=)
                          5: GidaO4fqGI7-halQpBDnfVEn_Ok.roa (hash: 4Qa43QNlwQ5rnVqM9gppkhB0rPIyCwL3Fhw99Q4kiY4=)
                          6: O-SsLGZDDis9x7Hdr9bjMmd2BoY.roa (hash: HishzW2LB7SBBdcbiiTEBoYKX9Z+I6RhesW10ogdrys=)
                          7: UezMgLKKI-WhO1czQILLBRClTv8.roa (hash: AnuM+KLFPB1elW7al0sjIDYMJlOpGTtEqCymfhnESgE=)
                          8: X_c4nULo2I9_8M6Tnr9LOGMWT4o.roa (hash: OYUYahQ2k3gq1hCdgyN2LHpOg006aLSKZ8M7SU5zas0=)
                          9: pSyaNNQfHIxFiSnrATHPuSm-jfo.roa (hash: OeYszJRRDpsrfoggTZzuEZA5/POYAPXra4Ky725R5xQ=)
                          10: zXrOjxGX_DI-tXkFUtLuBXotuic.roa (hash: mrO+89Y/llkPbD0Oqqb4OVuncS888EEiNoMgxFZFl6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:21:a4:4c:69:a8:b2:ec:f3:5b:5b:e9:0e:be:ac:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
        Validity
            Not Before: Dec 20 05:00:41 2025 GMT
            Not After : Dec 21 05:00:41 2025 GMT
        Subject: CN=b711f3c0573abb78237c60e1e7b9a16546b2b349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2c:95:45:73:68:f0:e1:4a:6c:78:bd:6c:5f:
                    9a:f2:77:6b:6b:f1:8a:55:b7:fe:08:d6:af:21:b8:
                    13:f3:14:ad:2d:92:cf:07:45:c1:87:22:d3:aa:35:
                    bb:92:fd:74:ae:14:e1:16:de:d5:2d:42:0f:10:d5:
                    e4:ef:1b:13:66:7d:21:b7:15:08:95:4e:72:3b:b6:
                    08:ef:a3:10:02:44:34:ae:51:c8:bb:cc:22:d3:04:
                    86:75:ef:c0:2a:05:58:77:9b:d9:3e:ee:17:30:36:
                    55:bf:b6:a3:da:e6:70:59:59:60:35:d8:59:30:ea:
                    f8:04:96:78:57:86:35:29:c2:32:af:ea:c4:81:09:
                    59:9b:f1:21:67:b6:f9:21:4d:c6:1c:2e:7f:7b:7c:
                    8f:c6:85:b0:d3:9b:62:da:68:cd:f7:a3:b8:b8:0c:
                    62:ce:6c:1c:47:2b:67:b3:5c:4b:da:40:aa:66:a9:
                    ca:71:f9:34:33:d5:65:ad:38:6a:b2:20:99:f4:f6:
                    17:a0:b8:e2:ef:53:3e:4e:ed:59:8a:70:13:40:40:
                    be:d5:37:15:ea:e1:be:1c:a6:0c:38:8d:aa:23:30:
                    c6:7f:99:e6:88:af:6c:3d:3b:57:42:be:67:1e:01:
                    bf:f5:fc:1e:58:83:27:6e:32:69:32:e0:a1:9d:69:
                    8e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:11:F3:C0:57:3A:BB:78:23:7C:60:E1:E7:B9:A1:65:46:B2:B3:49
            X509v3 Authority Key Identifier:
                keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:15:8f:07:e5:3f:fa:d1:3a:a8:7a:69:a8:58:20:a7:11:ab:
         47:21:73:1f:5a:35:ab:bc:da:88:b7:7e:44:d1:61:c8:54:fe:
         b2:4a:52:2a:82:ad:f0:c6:de:f5:6a:cc:d2:72:c1:2a:04:c7:
         68:74:d8:39:9b:4e:5d:0f:0b:65:37:aa:34:17:4a:bc:37:a2:
         6a:58:a8:75:ab:fb:69:6c:78:87:5a:44:bc:87:44:48:5b:09:
         43:5b:ef:7f:02:65:f0:d8:88:78:7b:59:61:f0:77:34:55:59:
         69:89:c5:07:17:de:7d:bd:0b:d0:95:28:d7:b0:d9:70:8b:db:
         3d:f8:b8:be:4e:61:c8:45:6e:fa:57:2d:9e:69:3e:ce:7b:43:
         ea:1c:43:b7:25:46:5e:eb:57:76:f4:5a:bf:c5:7e:ed:1d:4a:
         56:05:6e:79:e1:b3:4c:57:26:56:7d:7a:45:dc:40:44:42:31:
         97:71:db:b3:15:0e:37:18:2d:4b:6c:c4:17:8b:c0:37:56:58:
         aa:76:48:4a:7f:e0:7e:b2:b7:a9:99:29:be:91:d8:15:c8:54:
         0d:75:b9:0a:50:e9:36:cf:c4:06:44:30:c8:7b:98:b2:35:24:
         7b:d2:44:7b:18:c1:3c:b0:1a:ec:01:df:93:bd:f8:5e:79:20:
         d7:9a:1f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:03:24 2025 by rpki-client