This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
File:                     Fd3Uydwj-sNVdPzitClDmK3YUhw.mft (raw, json)
Hash identifier:          fTJdXHRC2ogYgEVnL0z79bm1HlkvWITII7Dua0gxeBo=
Subject key identifier:   6A:E0:FF:BC:04:59:C7:40:CB:98:83:71:2F:F7:E9:0A:D6:9F:00:7C
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Certificate issuer:       /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial:       019B34C5E835CCDC653F087F976ECC6F6E3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
Manifest number:          0F20
Signing time:             Fri 19 Dec 2025 04:02:23 +0000
Manifest this update:     Fri 19 Dec 2025 04:02:23 +0000
Manifest next update:     Sat 20 Dec 2025 04:02:23 +0000
Files and hashes:         1: 2elU8M79ZokIDRQA4FCMvXhZ_30.roa (hash: xpy/QNiCAMomRGDsG3lcQqLW5mZVYEG99RtMqAQeBgw=)
                          2: Fd3Uydwj-sNVdPzitClDmK3YUhw.crl (hash: Ec8PrkQwwUrFSFwv+61cVaPhC8DQ/GJcIx15WUlY2Ys=)
                          3: aivWngKJz6YVhMe876fRwO2Pwak.roa (hash: QrxS5tWIMxcDOD99WB/oU0c4ZizRW8rYWP871u28/z4=)
                          4: uElDFGcVxZsMl0bu0vs6jORoDh8.roa (hash: aT6b179aTl0Zm/hagXpA3FILak7batN1BBwPLZgXw5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 04:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:34:c5:e8:35:cc:dc:65:3f:08:7f:97:6e:cc:6f:6e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
        Validity
            Not Before: Dec 19 04:02:23 2025 GMT
            Not After : Dec 20 04:02:23 2025 GMT
        Subject: CN=6ae0ffbc0459c740cb9883712ff7e90ad69f007c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f5:e6:1f:42:d0:d2:0d:7e:1e:4d:e1:e6:38:
                    83:6d:a1:dc:50:b2:d4:45:65:91:f9:f5:27:e7:65:
                    5b:52:bd:48:90:66:8a:d8:ff:46:60:20:1a:97:84:
                    78:12:07:0e:c8:3a:9c:ef:71:c6:73:b8:cd:d6:4f:
                    b7:41:17:21:ed:7a:65:9e:da:ca:09:25:f2:c7:4b:
                    25:a6:9f:ee:f2:a6:10:af:63:c7:e3:db:7c:06:ae:
                    10:6f:d7:e6:4b:cc:4e:2e:14:52:5c:50:43:fc:66:
                    ca:b1:3f:de:05:47:30:0e:63:00:de:59:4d:d2:bf:
                    1f:01:74:68:16:3a:54:b8:de:4b:b6:bc:cd:50:49:
                    72:87:84:ac:f7:93:e6:4e:47:f9:9a:08:2b:83:bd:
                    27:72:4f:3b:74:e4:55:06:43:38:00:0b:a4:55:f9:
                    32:95:d3:2b:86:58:fe:9b:bf:51:ca:40:64:fe:d9:
                    44:fb:62:6a:3e:5e:51:a0:44:93:5e:16:d2:9c:0c:
                    41:8e:3f:54:d9:c0:cf:71:ce:4d:4b:9b:46:90:cf:
                    5a:d3:24:85:a5:74:25:b4:80:04:fe:fa:cf:0b:fc:
                    b4:7e:be:2a:54:96:9d:0b:9c:45:b8:22:79:75:cc:
                    04:ec:da:71:01:9a:73:45:f5:00:2c:ef:5c:50:da:
                    13:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E0:FF:BC:04:59:C7:40:CB:98:83:71:2F:F7:E9:0A:D6:9F:00:7C
            X509v3 Authority Key Identifier:
                keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:56:9c:08:d1:09:79:9c:44:7f:48:69:b3:e0:6f:8f:c7:93:
         e2:a8:0d:47:b9:4e:f8:dd:db:c0:e1:4a:86:30:0a:30:de:00:
         b4:f9:b9:70:17:8e:8b:15:51:3d:0e:ea:32:39:b7:65:f3:ae:
         86:2f:43:42:76:16:6d:e2:d1:dc:95:90:81:fe:03:c2:78:23:
         c3:8c:39:ff:de:5c:3e:41:e1:6c:93:12:45:9c:38:29:ce:70:
         79:f1:3b:a0:a7:d7:d5:ce:1d:b2:25:22:df:d9:02:3b:8a:08:
         26:c5:54:24:ff:a0:3c:13:71:af:48:af:8b:4f:b7:fc:4f:99:
         82:ff:18:78:59:d6:3a:82:9a:2b:c3:ad:af:59:dc:0a:12:75:
         43:f6:ff:9b:b2:01:fd:26:6d:88:df:8c:70:85:d1:b7:7c:a1:
         5b:d9:88:28:91:79:05:5d:dc:8c:8d:ca:18:34:1d:cb:ce:90:
         b6:81:88:31:94:bc:02:c2:b6:07:97:e9:ce:1f:b8:a4:d5:e2:
         4c:a4:a0:cd:10:53:23:ea:38:fb:8c:db:ed:d5:eb:ea:71:10:
         5f:d4:86:fd:f4:b0:6d:ed:ad:25:ef:4e:62:21:76:52:60:b2:
         9f:e3:8c:d6:f1:ed:93:ec:ec:4c:51:f3:ca:0d:15:41:b3:c4:
         01:73:2b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:49:22 2025 by rpki-client