This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
File:                     FZe51zSAyiLL8x-q8LzL7TCyCV4.mft (raw, json)
Hash identifier:          C9/r0qIVFO2XM07tnNS1yvyL4+KIsDNvzNjO/NYvWUI=
Subject key identifier:   0D:1E:D7:B4:BF:84:DC:96:F9:0A:A8:A5:C9:CA:B5:0A:E4:CB:D2:0B
Authority key identifier: 15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
Certificate issuer:       /CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Certificate serial:       019B41DB9E2B6A870DBC56AB39378D7A23B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
Manifest number:          0819
Signing time:             Sun 21 Dec 2025 17:01:10 +0000
Manifest this update:     Sun 21 Dec 2025 17:01:10 +0000
Manifest next update:     Mon 22 Dec 2025 17:01:10 +0000
Files and hashes:         1: FZe51zSAyiLL8x-q8LzL7TCyCV4.crl (hash: GKmBgPH88FqjwvmNFIoI8ZpqXDetLA4PsNMT32aiAD0=)
                          2: KxRNTvfcdP27-i8KDlCuxj_UX9s.roa (hash: olLk9GQzBEMbkOZCVQ+if+KnQS1x8YbAz2sIcJuFwbg=)
                          3: TTEx5Tf_ryhhBEghXe_juH2H65U.roa (hash: 6yFkwOTsWr11Au8Jovaobg2AJZpMXPDe7vY/stuVAs4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:41:db:9e:2b:6a:87:0d:bc:56:ab:39:37:8d:7a:23:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
        Validity
            Not Before: Dec 21 17:01:10 2025 GMT
            Not After : Dec 22 17:01:10 2025 GMT
        Subject: CN=0d1ed7b4bf84dc96f90aa8a5c9cab50ae4cbd20b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:52:e7:cb:6f:8a:97:29:3b:80:86:72:98:88:
                    35:47:0c:56:a7:50:7f:47:2e:ed:26:ae:e8:cc:d3:
                    79:79:7e:aa:5c:c4:1c:41:eb:dd:e6:ea:1d:8f:b6:
                    dd:58:84:55:87:8c:6e:69:86:60:b8:1b:7b:ad:14:
                    39:f3:65:10:18:43:60:a7:5c:aa:76:54:2b:b1:f0:
                    84:d9:47:13:13:8f:45:3f:04:f2:d4:f5:55:14:11:
                    8a:e5:06:0b:59:56:43:59:fe:e2:54:7e:db:a2:09:
                    20:74:a7:48:66:6e:90:3f:03:0e:23:77:26:50:62:
                    84:7c:8d:dd:b4:0a:d2:74:e5:2a:d9:58:1a:f0:f0:
                    d4:2f:ea:8c:68:ff:a3:53:4e:27:17:5c:2a:33:d5:
                    22:64:7f:52:3c:07:1e:03:d0:ab:dd:4b:13:00:63:
                    f2:22:ed:a1:d1:0a:52:ae:a9:f9:15:d8:b1:32:9f:
                    67:ea:1d:a4:4a:20:89:79:41:2e:40:c0:44:b4:05:
                    f9:7c:ff:5d:6f:ba:f5:5c:c0:0a:50:ce:94:b7:7a:
                    48:a1:b2:6f:b4:46:a1:50:d9:19:0f:e9:26:63:b5:
                    5d:b6:6a:e5:48:9d:cc:10:17:94:a5:2c:2b:13:3c:
                    22:48:e7:7f:50:50:8f:29:88:8d:32:44:fb:9e:c3:
                    a0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1E:D7:B4:BF:84:DC:96:F9:0A:A8:A5:C9:CA:B5:0A:E4:CB:D2:0B
            X509v3 Authority Key Identifier:
                keyid:15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:bc:c7:4f:a7:1a:84:57:21:8d:3d:9a:ae:01:bd:0c:53:cd:
         06:6b:35:38:bd:50:75:19:ab:1e:8e:2d:c1:0c:56:10:12:36:
         3d:fc:35:39:f4:c1:31:4e:1b:d3:63:00:4e:f1:bd:70:6b:6c:
         a0:8f:1e:13:db:00:50:3a:ad:56:fe:59:be:1a:fb:16:fe:10:
         e2:da:80:fd:25:1c:9b:7e:75:89:8f:c0:96:15:e2:db:23:3a:
         e0:4f:b6:d4:9d:ad:b0:3f:b7:1c:55:21:d7:2e:bb:6b:aa:92:
         db:7d:d6:fe:16:32:9e:9a:06:a6:68:fa:83:8a:e4:22:c1:70:
         8c:70:32:b0:33:fd:d2:ff:78:43:2d:a4:ae:81:72:56:84:23:
         ef:07:95:d2:38:20:64:68:14:49:ab:41:ef:c4:c2:8f:01:0e:
         7b:00:75:f1:d5:3b:74:63:c4:a2:21:94:89:68:a1:54:ad:54:
         67:a7:28:48:a7:86:70:c1:52:4b:ac:fd:de:dc:2a:6a:c6:8f:
         43:cf:25:db:ef:01:5f:96:16:f7:dc:58:ed:68:25:b2:c1:a6:
         19:9a:7a:d7:b3:02:12:cf:a7:bc:f9:3e:77:86:3f:cb:1b:b5:
         32:c5:aa:74:6a:b9:0b:1a:9c:04:70:bb:5d:e5:ec:1c:c3:f9:
         59:d8:d6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 22:50:04 2025 by rpki-client