This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
File:                     fUFb7iIlhfLRqvv_unlQMaRRKcc.mft (raw, json)
Hash identifier:          T2GEd7ZRtt0p8u1NXM0Pi2+3Ii6/IH0VDLMsMTP8W5s=
Subject key identifier:   FD:8D:7F:C0:DA:32:34:14:76:DE:07:04:54:5C:6B:EF:29:E9:B2:E1
Authority key identifier: 7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7
Certificate issuer:       /CN=7d415bee222585f2d1aafbffba795031a45129c7
Certificate serial:       019B24E37E9B055A9B2359DD78EFCD9163F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
Manifest number:          82
Signing time:             Tue 16 Dec 2025 02:00:47 +0000
Manifest this update:     Tue 16 Dec 2025 02:00:47 +0000
Manifest next update:     Wed 17 Dec 2025 02:00:47 +0000
Files and hashes:         1: JUVcVjdBtjPI8y-f9rnNibK8zkY.roa (hash: 6oXfkYV491tM7NL0VRDyyRr5CGy7QuBKlofPdnTMl/U=)
                          2: az7D72m3aRzcMGuqVgsus2HYPJI.asa (hash: UYH2LQP6yhA1ucYPAXvinazn/8R7Ym8Hnb5ZSwGQQiU=)
                          3: fUFb7iIlhfLRqvv_unlQMaRRKcc.crl (hash: pROeAGwHHdTzLGWlbxWIReUoAFf/Iibkn2j4QBKyZIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:24:e3:7e:9b:05:5a:9b:23:59:dd:78:ef:cd:91:63:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d415bee222585f2d1aafbffba795031a45129c7
        Validity
            Not Before: Dec 16 02:00:47 2025 GMT
            Not After : Dec 17 02:00:47 2025 GMT
        Subject: CN=fd8d7fc0da32341476de0704545c6bef29e9b2e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:46:23:4d:c3:f6:78:6c:30:6f:4c:ba:90:eb:
                    d3:f3:c3:2f:a2:65:74:74:2d:a9:bb:f4:a0:4a:f9:
                    57:d6:c0:6c:3e:81:53:51:86:82:fb:f0:cc:25:8f:
                    75:0c:1d:69:a4:8d:40:0e:2c:cc:bd:46:ff:46:e2:
                    0e:13:18:1f:e4:cf:5c:03:c0:61:0f:ea:bc:98:cb:
                    f2:86:dd:a3:7c:fc:36:10:84:af:be:ac:82:0b:1f:
                    02:22:fb:45:2a:8b:cf:f3:d7:eb:e4:89:d0:90:5a:
                    03:e0:ae:fb:8a:db:ad:49:db:30:7c:ca:c2:0b:40:
                    4b:4e:bb:b9:4e:bd:5b:c7:69:c2:bd:60:d0:80:fc:
                    c6:f6:c9:81:d7:0f:ab:9f:b1:3e:0e:c7:5c:d7:31:
                    b4:78:83:b9:cc:9e:7f:a9:91:f1:4c:93:0f:28:7d:
                    53:17:24:8c:d2:2a:b1:44:cb:14:84:08:28:d8:46:
                    9f:36:55:61:fa:2c:7b:23:4b:50:4e:fa:5f:8a:09:
                    14:10:d6:d5:d0:71:98:5c:65:52:b7:27:bc:81:49:
                    fd:8b:57:1c:1e:c8:91:1a:2f:d1:85:11:61:8f:82:
                    ca:cb:05:74:f9:90:9a:ff:e2:94:1b:1c:a4:6f:3f:
                    1a:81:7a:fa:2f:4d:18:c4:c9:57:d9:d7:a2:1f:12:
                    c8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8D:7F:C0:DA:32:34:14:76:DE:07:04:54:5C:6B:EF:29:E9:B2:E1
            X509v3 Authority Key Identifier:
                keyid:7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:71:a6:0b:31:52:26:51:8d:e6:36:e4:21:b9:16:37:ca:5f:
         4f:64:46:c1:76:17:f7:c3:e7:0b:05:af:53:70:fa:b8:02:d2:
         77:bb:23:f5:9b:63:13:f2:d0:4b:19:ef:19:a9:19:72:87:f9:
         7b:43:f6:ee:82:e6:11:34:7e:d4:68:d0:a5:4b:2e:80:ee:1a:
         eb:5b:8d:d8:b9:df:b8:e8:b1:89:d8:ce:5a:52:4c:c4:5e:d7:
         11:24:78:2b:28:3b:06:ff:aa:f8:34:52:87:e9:28:be:dc:89:
         3a:90:47:6d:95:e8:3f:0e:0f:70:4f:9c:12:32:c1:33:75:1d:
         11:5a:da:04:99:60:8c:13:87:6a:bd:14:14:0d:9f:fa:16:00:
         b4:24:01:e0:43:dc:03:3a:19:dc:11:c9:04:6f:39:c2:f9:d9:
         03:7e:6b:d7:6a:e8:67:48:81:9d:da:9a:16:c2:4c:e7:ed:1e:
         4a:a1:18:eb:be:64:55:8c:2e:b6:b6:4f:84:9f:ff:5f:57:80:
         ef:7d:1a:30:6a:f4:b7:22:47:ff:be:a0:48:81:64:6c:92:fd:
         8a:2f:99:ff:12:4a:40:0c:14:14:02:be:fd:d5:ca:dc:cc:4a:
         33:62:ad:f5:8d:02:87:f9:22:55:f4:ff:38:a4:49:59:4e:74:
         ce:7a:d0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 09:38:05 2025 by rpki-client