This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
File:                     FjvL2byThJp__fcpTC3p37Hq8oM.mft (raw, json)
Hash identifier:          8Kxz8mW2f10mNPXKXzoQrEBRpvwxrZLxmOxZp7ptXBo=
Subject key identifier:   46:A6:6D:8C:57:13:97:FC:45:80:93:BD:76:D7:75:3F:9F:06:D2:43
Authority key identifier: 16:3B:CB:D9:BC:93:84:9A:7F:FD:F7:29:4C:2D:E9:DF:B1:EA:F2:83
Certificate issuer:       /CN=163bcbd9bc93849a7ffdf7294c2de9dfb1eaf283
Certificate serial:       019B529814B940DFEE83F38C15A8B44150B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
Manifest number:          0961
Signing time:             Wed 24 Dec 2025 23:00:56 +0000
Manifest this update:     Wed 24 Dec 2025 23:00:56 +0000
Manifest next update:     Thu 25 Dec 2025 23:00:56 +0000
Files and hashes:         1: 3UNyKDhAIctkIaiCHfw-i8AjC60.roa (hash: RbaiVZW2VnfBiQ5GEAYbSY+TEp7BHi5lhZORNmt7Iwo=)
                          2: FjvL2byThJp__fcpTC3p37Hq8oM.crl (hash: xju3MDpGuHX+E5T/GQvPBwte6V1JWtAS4gjBdac+m94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:52:98:14:b9:40:df:ee:83:f3:8c:15:a8:b4:41:50:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=163bcbd9bc93849a7ffdf7294c2de9dfb1eaf283
        Validity
            Not Before: Dec 24 23:00:56 2025 GMT
            Not After : Dec 25 23:00:56 2025 GMT
        Subject: CN=46a66d8c571397fc458093bd76d7753f9f06d243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9d:dc:62:f2:89:50:b1:c3:bb:a7:9c:47:9d:
                    7e:8a:ec:c1:fd:56:77:0d:04:eb:12:f4:8c:39:f9:
                    c7:fe:71:44:4d:71:07:6f:e2:c9:57:78:30:28:48:
                    41:cf:b0:00:d1:c3:fe:06:37:6f:33:d6:99:e6:c0:
                    da:f3:bc:79:99:bd:75:32:c4:76:c3:5f:3e:1a:99:
                    b5:39:d1:6c:64:f4:0c:72:a9:95:33:34:74:a8:31:
                    6e:e2:ab:7b:4d:0d:ce:98:83:9a:43:d7:84:f2:cf:
                    97:78:0b:ec:80:1d:92:a0:45:e8:e4:c1:27:b5:67:
                    91:ed:d9:8a:8d:25:61:d8:f4:62:ea:81:e0:93:e8:
                    19:05:fd:79:6e:82:08:3e:08:e5:c1:f4:dd:c9:12:
                    46:df:14:fb:d4:d0:ed:82:3d:fc:31:e6:cb:a1:5f:
                    3d:9f:8d:f2:56:f7:0e:67:ef:de:94:d9:98:47:44:
                    2a:64:9a:b6:6f:37:8e:35:b6:bc:1e:34:10:43:43:
                    72:ac:f9:7f:9c:f3:e6:b6:ae:d2:26:f8:32:b6:53:
                    ee:36:72:30:96:45:62:b3:36:44:15:92:23:e3:fa:
                    b1:fe:25:6f:76:01:11:d2:a4:1e:bd:03:a1:26:92:
                    cb:da:04:90:b5:04:b5:f4:fe:4a:01:54:dc:8b:dd:
                    dc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A6:6D:8C:57:13:97:FC:45:80:93:BD:76:D7:75:3F:9F:06:D2:43
            X509v3 Authority Key Identifier:
                keyid:16:3B:CB:D9:BC:93:84:9A:7F:FD:F7:29:4C:2D:E9:DF:B1:EA:F2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:17:99:f5:f9:b0:a2:c3:4b:74:75:93:7c:fd:1f:dc:aa:70:
         a9:bd:f7:67:79:af:2a:22:ff:83:68:62:72:53:36:b4:ed:54:
         c6:a0:b7:a0:d5:6d:74:40:5a:2d:c1:d3:6e:50:49:ee:a5:92:
         6a:a4:61:55:ce:f2:6c:f4:e2:6d:ad:8d:37:e1:18:db:66:0d:
         fb:f5:32:33:3d:5b:db:3b:7f:0c:8d:77:f3:8d:d1:67:5f:64:
         68:ea:ff:56:ae:fa:ee:ce:50:96:1a:fa:63:f6:ea:ab:8b:dc:
         9a:da:73:24:96:13:4e:cd:74:d8:10:07:59:93:26:91:0f:c2:
         a7:60:14:57:bc:fa:f4:2c:82:6f:78:b0:70:13:f1:c3:70:b0:
         6e:19:79:7b:ec:c8:8f:ef:1e:71:5d:57:dd:55:c3:2f:cf:75:
         3c:95:10:c7:51:37:bd:1f:69:fe:8b:d2:59:e3:f3:40:c8:2f:
         ec:d7:8e:ef:aa:90:f5:8c:ac:49:39:57:c0:62:34:58:fd:a3:
         c6:46:25:71:45:17:6e:fa:e2:7c:38:20:2b:eb:37:09:f6:1c:
         37:a5:d3:9c:f8:3c:4e:ce:7e:fd:22:35:49:f6:0a:b7:4a:74:
         8b:39:77:1e:9c:a4:a7:87:97:d9:ee:86:2d:9a:9a:65:60:f6:
         0f:4a:c0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 01:23:14 2025 by rpki-client