This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
File:                     _OoI6EId8vJFx8szPudqFKiILUo.mft (raw, json)
Hash identifier:          l1wwJzsjxaO6THvY2CG4+VJ9zFVb3csF06SEPxPHEjE=
Subject key identifier:   AF:AA:36:BA:15:2C:27:C1:AB:D0:25:AD:F7:C8:5B:D5:F8:27:74:20
Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
Certificate issuer:       /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Certificate serial:       019B601D03F1A079A16C9AC87EBFBB612BBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
Manifest number:          179D
Signing time:             Sat 27 Dec 2025 14:01:12 +0000
Manifest this update:     Sat 27 Dec 2025 14:01:12 +0000
Manifest next update:     Sun 28 Dec 2025 14:01:12 +0000
Files and hashes:         1: 6rfSl-YG8Bpw7iFs3OGfejPmBow.roa (hash: xWZc5l9yPZ6h0RVi3qTPSak9kbYfcpqaIIv+IYE4hs0=)
                          2: RjzornIpBpWAVg31mbW6GCIn3FE.roa (hash: 1SRf58fZ7vrCHWvD/MO3Mvx+IEH2+W2jesliOPCnBDw=)
                          3: _OoI6EId8vJFx8szPudqFKiILUo.crl (hash: 6IZus4DBfNefBX7kQXxZ4gzCh26bRLNoJjJmHrnV+uY=)
                          4: qodg_DBnwKRycROmAU-iKcJ4abc.roa (hash: srDO/uSK7u2lQgddrt4UOUxImFrZqcKNDp2zNmpUe54=)
                          5: s7awYrhPujEu-ZRGweV7KC1XVMo.roa (hash: qDjaklj7okGt/N67lpsepn6cM5rI/Einb7VtSwhb734=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Dec 2025 08:42:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:60:1d:03:f1:a0:79:a1:6c:9a:c8:7e:bf:bb:61:2b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
        Validity
            Not Before: Dec 27 14:01:12 2025 GMT
            Not After : Dec 28 14:01:12 2025 GMT
        Subject: CN=afaa36ba152c27c1abd025adf7c85bd5f8277420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7a:78:52:c3:94:99:1a:d2:41:db:7a:2b:1f:
                    f5:e4:53:e4:d6:c7:81:b4:99:63:52:a8:df:03:df:
                    59:e2:77:91:b3:7a:69:6a:1a:52:e0:ed:cf:87:23:
                    47:4a:b8:36:54:9b:9e:35:05:f4:4f:2a:19:4c:d7:
                    0b:cb:50:fd:cc:35:bd:df:7a:3a:9c:a1:0f:af:01:
                    1c:82:b5:57:d0:59:5f:82:5a:57:51:69:95:84:8c:
                    b3:f9:a3:25:fa:f7:6e:de:95:73:76:bf:c1:7c:cf:
                    04:38:d6:a2:91:96:26:99:91:5e:7c:87:83:4d:00:
                    7a:71:9d:0b:d4:02:37:52:31:18:f9:ce:26:46:0d:
                    4d:1b:43:4a:84:e9:9f:de:b6:e7:d1:76:87:f8:88:
                    f4:29:b2:2a:dd:a8:6f:78:48:88:a6:b9:70:12:0d:
                    13:02:ca:72:58:8f:6a:f0:a1:1b:2d:71:00:0b:fc:
                    1f:91:0b:22:36:5a:8b:05:dd:33:90:7b:dd:f1:55:
                    92:88:ed:d4:85:23:fb:2c:41:a2:66:05:4c:5a:d4:
                    b5:27:d2:b6:6a:df:56:6f:bd:56:87:7a:b1:b3:a9:
                    f3:4e:20:dd:5e:80:f9:9e:bc:d6:91:79:8b:dc:9f:
                    50:44:05:53:d3:a9:46:03:19:32:4b:c5:30:0a:c3:
                    5f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AA:36:BA:15:2C:27:C1:AB:D0:25:AD:F7:C8:5B:D5:F8:27:74:20
            X509v3 Authority Key Identifier:
                keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:70:46:08:c3:c2:a3:e7:5c:0b:4d:40:06:55:25:3b:d3:2b:
         76:bb:c9:18:4c:9a:41:2f:0c:b5:d1:49:f8:71:b3:50:67:39:
         20:3f:3d:90:bf:a0:38:ce:1d:7e:1c:f6:a8:f1:dd:f6:5e:62:
         18:c0:c0:2d:f2:4d:7e:fb:26:3d:83:b1:f6:a1:6e:55:0e:b0:
         30:68:c8:87:95:da:3b:3a:32:59:49:3e:e3:b3:4f:f1:51:d5:
         a9:6a:bd:c8:db:7f:62:70:fd:6a:48:48:7a:c6:fe:68:ae:77:
         74:c5:e9:a8:ea:b5:34:0a:7d:29:f2:0b:a7:8d:77:90:59:15:
         d7:3e:96:36:04:82:38:b2:43:1d:2b:f1:b0:e4:d3:9b:e9:22:
         e1:5a:3d:37:9a:ec:e7:f5:3e:33:c9:59:b5:56:a9:b6:c9:d3:
         67:c8:f7:46:60:36:3c:59:70:cf:21:55:13:3f:7e:2b:5e:07:
         e8:ed:60:85:84:20:07:5a:78:0e:30:ee:87:82:2f:33:58:ba:
         26:de:96:05:d9:ef:66:12:49:d5:f5:32:a9:e8:d6:c5:81:16:
         e1:ff:fc:74:9e:24:bc:78:be:e9:9a:1c:75:15:7a:0a:47:71:
         9e:be:58:f4:73:3c:4f:a7:7f:7c:b1:16:32:c0:93:5c:f8:14:
         77:8f:48:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 15:41:48 2025 by rpki-client