This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.mft
File:                     Fjndvg_zoYcM20VQmNxC-s_VSfU.mft (raw, json)
Hash identifier:          9lMhQ/bps4TXKWqHgMTfa0Dy8rxX5crfKiYbzew+YGk=
Subject key identifier:   E0:A7:16:9D:F5:AA:51:F2:6B:7C:F3:7F:D4:30:5D:3F:C9:CA:27:9D
Authority key identifier: 16:39:DD:BE:0F:F3:A1:87:0C:DB:45:50:98:DC:42:FA:CF:D5:49:F5
Certificate issuer:       /CN=1639ddbe0ff3a1870cdb455098dc42facfd549f5
Certificate serial:       019B3C7E87002BE6BE3646223288664208A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fjndvg_zoYcM20VQmNxC-s_VSfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.mft
Manifest number:          0BF2
Signing time:             Sat 20 Dec 2025 16:01:23 +0000
Manifest this update:     Sat 20 Dec 2025 16:01:23 +0000
Manifest next update:     Sun 21 Dec 2025 16:01:23 +0000
Files and hashes:         1: Fjndvg_zoYcM20VQmNxC-s_VSfU.crl (hash: sV8hjTPsRJyY6I0rQr9CCwz8RfHDf8jNWWaWWSWB9gA=)
                          2: _AaogpvsZ_kHaJAoO7eUxP8H-zY.roa (hash: a3qZI1EQuEaQg0ZHFbrz5Ccf6fiwQDzr5b8C2ZRATT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fjndvg_zoYcM20VQmNxC-s_VSfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:7e:87:00:2b:e6:be:36:46:22:32:88:66:42:08:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1639ddbe0ff3a1870cdb455098dc42facfd549f5
        Validity
            Not Before: Dec 20 16:01:23 2025 GMT
            Not After : Dec 21 16:01:23 2025 GMT
        Subject: CN=e0a7169df5aa51f26b7cf37fd4305d3fc9ca279d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e6:a4:68:c4:61:2b:b1:43:b7:44:85:11:4a:
                    d3:64:ee:54:63:47:0b:8b:f8:41:46:74:78:47:4e:
                    0c:9b:25:b0:9b:60:2d:bc:0f:96:38:fe:36:9c:0a:
                    d3:4f:f3:0f:40:c2:d6:9d:bb:92:28:74:23:95:60:
                    48:89:55:48:af:e0:cd:fe:d6:f9:56:8c:98:3a:42:
                    2a:43:ce:ab:74:7c:85:7b:56:bc:83:b4:1b:1e:4d:
                    63:ef:6b:70:0b:a4:f8:82:8a:13:aa:85:a2:a2:e2:
                    d7:3f:0f:0a:1b:64:ef:88:be:af:15:32:e9:8c:ac:
                    a0:30:9e:28:87:3a:44:b8:91:29:68:04:71:bd:9e:
                    cb:23:6c:9c:75:b6:d1:3d:4e:44:69:61:27:fb:88:
                    1d:a0:11:49:7e:29:46:ec:37:f9:b6:8a:db:b0:75:
                    52:4d:fd:ac:7e:d2:d9:7d:f4:2c:e4:2f:e2:2e:c3:
                    57:08:cd:00:aa:89:29:1c:6b:0b:42:a8:e3:ad:ad:
                    17:be:87:a4:68:d7:d6:9a:8b:f6:f5:92:a1:98:ee:
                    63:87:24:d8:44:f2:41:d4:82:83:ef:b5:62:d3:82:
                    39:f9:65:a8:59:91:ea:eb:bb:ba:e6:06:25:66:9c:
                    ad:69:da:a9:0a:64:36:95:2c:f3:c4:38:62:b0:86:
                    a4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A7:16:9D:F5:AA:51:F2:6B:7C:F3:7F:D4:30:5D:3F:C9:CA:27:9D
            X509v3 Authority Key Identifier:
                keyid:16:39:DD:BE:0F:F3:A1:87:0C:DB:45:50:98:DC:42:FA:CF:D5:49:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fjndvg_zoYcM20VQmNxC-s_VSfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:69:7d:84:53:77:ba:fb:4f:08:1e:35:c1:37:f7:12:f4:23:
         25:e7:31:28:8e:32:19:23:a2:d6:ea:0e:ce:0c:40:81:b8:2d:
         5d:56:70:50:90:da:9c:41:10:39:0c:61:1c:4d:3c:d8:5b:27:
         00:d1:a6:32:2a:23:e8:e3:04:db:e1:46:7c:15:b0:a9:79:dd:
         70:da:5b:e1:1e:29:63:41:2d:f6:91:f7:15:1d:b1:bf:ef:a6:
         79:12:cc:45:30:53:c0:04:42:1f:c8:93:8b:b4:43:fd:62:88:
         3d:d2:a4:c4:12:f7:da:f7:0f:78:dc:6e:6d:b6:44:f5:ae:ad:
         6d:13:e4:b0:1b:aa:dc:6d:6f:28:29:5f:e0:91:a7:8a:66:24:
         71:42:e5:a2:00:f3:6c:a9:02:07:64:5c:63:7f:f0:c1:e1:89:
         d4:20:94:9e:ba:e2:69:6f:aa:dc:a8:21:59:02:d5:1b:8e:2f:
         eb:da:92:e2:47:31:eb:d9:5c:84:55:78:af:18:67:6d:0e:97:
         48:25:9a:d1:fe:a7:b9:d4:0e:97:40:a1:16:a4:0d:e7:7b:7a:
         7d:bb:82:d9:34:50:b1:ca:4b:b9:26:84:71:52:a3:24:fd:18:
         02:e0:b8:36:54:53:ef:a7:9a:4f:9b:dc:e0:eb:8f:1e:3f:5b:
         4e:a7:d9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:05:55 2025 by rpki-client