This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
File:                     FlHT3cat1IO3YawEdiaVM_5-pxc.mft (raw, json)
Hash identifier:          +RpZEbsR/m22dEiXdbJ7qSFTXPaJX/FGb5XL1fUgLeI=
Subject key identifier:   0C:2F:AE:E7:21:C4:92:36:FA:F9:A1:78:04:FC:36:EE:D7:96:AA:D2
Authority key identifier: 16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
Certificate issuer:       /CN=1651d3ddc6add483b761ac0476269533fe7ea717
Certificate serial:       019B4BF3113374836EE0E40568C695118637
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
Manifest number:          1791
Signing time:             Tue 23 Dec 2025 16:02:59 +0000
Manifest this update:     Tue 23 Dec 2025 16:02:59 +0000
Manifest next update:     Wed 24 Dec 2025 16:02:59 +0000
Files and hashes:         1: FlHT3cat1IO3YawEdiaVM_5-pxc.crl (hash: YAWLH2zpxUZmcVlS68Yywf11+99q9+0xqEpBj+ijU0E=)
                          2: OAOWe7maY9pSBU-5gVNjG4r2PZI.roa (hash: cj95WRLXDZ1GDxFc9L374qruvZwqpq+kg9Wr756ijmA=)
                          3: RS5heur6Cn3t-3NSKUpCkvrpLSg.roa (hash: TdAX1fGTzy2GwxRzSlF7GAvHIAjv8je9eFZvPOiAzfs=)
                          4: cisW_uPMTWGjpMgFOVf9HNh_jYk.roa (hash: Wdm0HXAD65sFut0/XjR/drYS0oNc3aDjPik/CLx6CYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 15:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4b:f3:11:33:74:83:6e:e0:e4:05:68:c6:95:11:86:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1651d3ddc6add483b761ac0476269533fe7ea717
        Validity
            Not Before: Dec 23 16:02:59 2025 GMT
            Not After : Dec 24 16:02:59 2025 GMT
        Subject: CN=0c2faee721c49236faf9a17804fc36eed796aad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:57:b7:fc:a5:01:3a:dd:d0:de:4c:a2:cb:a5:
                    53:c5:05:eb:3e:06:f3:53:78:93:49:a2:c5:cb:ac:
                    96:ee:46:2c:20:5a:58:3c:d8:fd:66:0d:75:cd:5f:
                    e3:c2:e5:25:73:43:73:cc:64:b5:15:e7:c5:b1:e3:
                    86:44:d6:07:31:b1:2a:4b:fb:7a:c4:5d:cc:3f:6e:
                    e5:15:f5:4f:4e:50:11:07:aa:00:c4:ea:3a:5e:bd:
                    d6:04:f9:ed:22:e7:92:f1:f2:e9:ae:7a:f4:84:f8:
                    b9:de:1e:f3:16:18:22:3e:52:3a:45:d2:aa:fc:87:
                    9f:d7:eb:ae:10:0b:be:09:f3:b4:3b:6f:a8:78:26:
                    91:b2:a3:79:45:95:d4:57:76:a9:08:57:db:4e:aa:
                    b8:95:0c:8c:f1:8b:e1:4a:aa:9c:a5:e9:2f:9b:c7:
                    f0:dd:3a:6f:a0:9c:63:f1:14:52:65:79:00:e9:4d:
                    8e:bd:60:f1:13:73:47:ba:9f:8a:e4:b8:b3:6e:f2:
                    de:8b:bb:af:90:80:be:7b:95:4d:e4:d0:e1:45:b9:
                    27:86:df:62:9c:10:c1:f5:12:03:d1:c9:c1:7a:9f:
                    c5:86:b2:8f:55:be:5f:aa:1d:04:63:89:9c:1b:00:
                    98:e9:ee:bb:33:26:b8:7c:97:37:d8:78:7c:5d:1b:
                    3c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2F:AE:E7:21:C4:92:36:FA:F9:A1:78:04:FC:36:EE:D7:96:AA:D2
            X509v3 Authority Key Identifier:
                keyid:16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:29:67:b7:35:01:f5:54:c2:54:a9:63:aa:25:8f:f1:9c:43:
         18:80:71:c6:6b:00:86:f5:f7:b3:a2:19:b8:7e:ce:85:8e:47:
         78:e4:37:c7:12:f3:ce:81:74:9f:de:c0:54:90:5f:d8:53:cd:
         20:6e:01:20:07:01:6c:76:7f:03:5d:b5:61:f7:03:b6:f3:74:
         c5:8f:bd:04:f5:17:72:b5:87:74:d3:b7:da:84:3a:9b:20:a3:
         4c:44:b8:bd:3d:92:e5:da:0d:a3:93:77:5c:27:7f:4e:e5:21:
         b2:a7:d8:48:7d:04:41:5b:45:b1:ea:e1:0a:5f:50:4a:92:43:
         95:05:cf:77:37:2a:6e:83:cb:bf:4b:a9:d0:56:d8:bc:fd:9b:
         d1:ee:da:91:02:59:7d:f2:9b:73:ae:04:3a:ab:d8:57:48:68:
         7f:7b:6c:1c:45:51:43:14:85:30:6b:d3:8a:c0:3b:2e:eb:ae:
         a2:75:ca:1c:8c:b3:d0:47:a3:ab:b3:b1:e8:ae:d7:c7:59:08:
         00:61:d3:b1:94:d8:d7:ce:b4:63:a0:58:53:be:15:89:9c:f9:
         03:1c:3b:f3:9b:15:4c:4b:80:6b:e8:17:26:75:65:c7:4a:de:
         17:f6:4c:89:c4:84:95:83:20:c4:83:a4:50:64:51:47:ba:ce:
         39:ae:c3:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtL8xEzdINu4OQFaMaVEYY3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NTFkM2RkYzZhZGQ0ODNiNzYxYWMwNDc2MjY5NTMzZmU3
ZWE3MTcwHhcNMjUxMjIzMTYwMjU5WhcNMjUxMjI0MTYwMjU5WjAzMTEwLwYDVQQD
EygwYzJmYWVlNzIxYzQ5MjM2ZmFmOWExNzgwNGZjMzZlZWQ3OTZhYWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1e3/KUBOt3Q3kyiy6VTxQXrPgbz
U3iTSaLFy6yW7kYsIFpYPNj9Zg11zV/jwuUlc0NzzGS1FefFseOGRNYHMbEqS/t6
xF3MP27lFfVPTlARB6oAxOo6Xr3WBPntIueS8fLprnr0hPi53h7zFhgiPlI6RdKq
/Ief1+uuEAu+CfO0O2+oeCaRsqN5RZXUV3apCFfbTqq4lQyM8YvhSqqcpekvm8fw
3TpvoJxj8RRSZXkA6U2OvWDxE3NHup+K5LizbvLei7uvkIC+e5VN5NDhRbknht9i
nBDB9RID0cnBep/FhrKPVb5fqh0EY4mcGwCY6e67Mya4fJc32Hh8XRs8qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwvruchxJI2+vmheAT8Nu7XlqrSMB8GA1UdIwQY
MBaAFBZR093GrdSDt2GsBHYmlTP+fqcXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmxIVDNjYXQxSU8zWWF3RWRpYVZNXzUtcHhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zMjFmNzQtMDkyZC00ZGZmLWIzMzUt
MjA1NGY2ZTYxOTIyLzEvRmxIVDNjYXQxSU8zWWF3RWRpYVZNXzUtcHhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8zMjFmNzQtMDkyZC00ZGZmLWIzMzUtMjA1NGY2ZTYxOTIy
LzEvRmxIVDNjYXQxSU8zWWF3RWRpYVZNXzUtcHhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgSlntzUB
9VTCVKljqiWP8ZxDGIBxxmsAhvX3s6IZuH7OhY5HeOQ3xxLzzoF0n97AVJBf2FPN
IG4BIAcBbHZ/A121YfcDtvN0xY+9BPUXcrWHdNO32oQ6myCjTES4vT2S5doNo5N3
XCd/TuUhsqfYSH0EQVtFserhCl9QSpJDlQXPdzcqboPLv0up0FbYvP2b0e7akQJZ
ffKbc64EOqvYV0hof3tsHEVRQxSFMGvTisA7LuuuonXKHIyz0Eejq7Ox6K7Xx1kI
AGHTsZTY1860Y6BYU74ViZz5Axw785sVTEuAa+gXJnVlx0reF/ZMicSElYMgxIOk
UGRRR7rOOa7DSQ==
-----END CERTIFICATE-----
Generated at Tue Dec 23 17:40:56 2025 by rpki-client