This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
File:                     F564e9wyeT2_7RhKb_vBTtFdMqQ.mft (raw, json)
Hash identifier:          39cuka46vp7Ei53dJpYl91N1azGxgyTiiK3Z6QRN9Ds=
Subject key identifier:   99:68:50:46:99:8C:BE:01:19:80:20:A0:86:C8:1E:57:61:6B:36:51
Authority key identifier: 17:9E:B8:7B:DC:32:79:3D:BF:ED:18:4A:6F:FB:C1:4E:D1:5D:32:A4
Certificate issuer:       /CN=179eb87bdc32793dbfed184a6ffbc14ed15d32a4
Certificate serial:       019B6F21941C4CE23D4F2C0221F141A78E34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
Manifest number:          04C2
Signing time:             Tue 30 Dec 2025 12:00:30 +0000
Manifest this update:     Tue 30 Dec 2025 12:00:30 +0000
Manifest next update:     Wed 31 Dec 2025 12:00:30 +0000
Files and hashes:         1: F564e9wyeT2_7RhKb_vBTtFdMqQ.crl (hash: i6IgyY66Q+BDZqHY5wlbbxhYEm4amZitghSOJ2EGlKg=)
                          2: YYdbZAN7pN6TVTepPYBGugFjphQ.roa (hash: NsxHuGOHh0xg9XbBNwi/wuinAUzVezbbbYAR6J2U768=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 31 Dec 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6f:21:94:1c:4c:e2:3d:4f:2c:02:21:f1:41:a7:8e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179eb87bdc32793dbfed184a6ffbc14ed15d32a4
        Validity
            Not Before: Dec 30 12:00:30 2025 GMT
            Not After : Dec 31 12:00:30 2025 GMT
        Subject: CN=99685046998cbe01198020a086c81e57616b3651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6d:6a:87:29:3c:a5:25:eb:0f:11:1e:e4:70:
                    58:0c:d1:28:57:c4:d4:1d:4c:8b:bb:78:c5:b3:f8:
                    5d:9c:c0:e0:a0:e4:eb:92:00:37:78:09:69:17:14:
                    9f:9d:b8:99:9e:d4:e5:a7:db:fc:1e:7a:2a:74:73:
                    ba:f3:79:92:c9:2b:5e:88:0a:65:cf:d8:5d:16:7f:
                    b7:99:2b:f6:01:e6:cb:22:27:de:83:7a:e4:51:dc:
                    ea:ae:35:5b:85:09:99:ba:6c:af:fb:d3:bc:5b:35:
                    af:f8:18:04:62:9f:7e:e8:97:cd:3c:1b:83:45:ef:
                    29:3d:23:0b:65:5d:de:a7:da:e4:8f:22:61:fe:b2:
                    9e:9e:b0:e7:00:89:c4:1d:19:47:81:f9:dc:ea:43:
                    13:b4:73:e6:ea:e5:7d:16:41:97:46:9a:7d:db:b6:
                    92:c9:f6:93:dd:6f:f8:e1:e3:a1:23:3f:03:82:53:
                    8e:ca:11:58:2c:51:71:0f:3e:5e:cb:6e:bc:da:96:
                    0c:bd:52:9c:96:8e:a6:27:a1:99:ec:64:8c:3d:d4:
                    8c:b7:9c:e4:47:34:6c:2e:2c:90:63:75:a7:04:f3:
                    e8:15:44:f2:88:02:ad:fd:58:e7:92:ad:8e:6f:b9:
                    ec:a5:9f:3c:69:51:8c:09:88:42:43:d6:bd:00:ce:
                    26:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:68:50:46:99:8C:BE:01:19:80:20:A0:86:C8:1E:57:61:6B:36:51
            X509v3 Authority Key Identifier:
                keyid:17:9E:B8:7B:DC:32:79:3D:BF:ED:18:4A:6F:FB:C1:4E:D1:5D:32:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:7f:5c:3f:db:87:bb:53:8c:a9:42:43:9a:82:d3:50:b3:ed:
         d2:ea:58:08:05:e1:cb:d3:04:44:4b:03:79:a3:49:ce:07:84:
         8e:a0:96:db:b3:04:d9:a7:69:1d:4d:71:b8:38:7e:55:6c:1b:
         1a:ff:a0:7f:f3:a3:2a:eb:66:e4:5a:97:cb:92:cc:cc:31:4e:
         01:8b:60:24:cc:d4:fa:87:b1:55:7f:74:87:7a:13:7e:df:2d:
         74:c4:43:28:9e:5b:66:0f:c9:c5:fd:fc:2e:50:92:67:d3:1a:
         f2:b2:79:6f:4c:17:de:90:87:59:5d:6d:ae:84:62:b8:cb:58:
         ea:99:ff:af:47:96:c0:23:7d:f3:d5:e0:fc:3a:f2:83:21:87:
         ce:2f:9a:9d:60:80:9d:80:16:2f:34:aa:66:4e:e2:f0:0e:2d:
         ef:84:0f:ef:68:23:cc:64:07:60:29:db:71:56:58:e0:97:8f:
         1f:26:e0:50:62:24:6e:a5:26:3a:88:7a:f4:e8:b6:78:0b:f4:
         51:34:23:af:90:7e:e4:a3:a4:af:2a:ba:3c:d5:c8:4c:16:e0:
         9f:86:86:cf:9f:2e:b2:8e:6d:e0:8d:03:0e:e8:3f:59:58:0d:
         57:98:89:f8:da:d8:4f:69:35:37:c8:1d:2f:c2:e0:18:17:01:
         4c:85:0b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 14:55:14 2025 by rpki-client