This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
File:                     FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft (raw, json)
Hash identifier:          d78If8Flx8uKAzju31k10WSIOEbq6pGOW6i5NprgMiM=
Subject key identifier:   FA:23:53:FC:00:B9:F7:1F:4E:A6:E8:EE:3E:87:9C:D3:8E:08:4C:FC
Authority key identifier: 16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
Certificate issuer:       /CN=16e49258dc76546dc595084d2593e181cd47983f
Certificate serial:       019B19166780525B53093CAEE4DA1365CC33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
Manifest number:          1777
Signing time:             Sat 13 Dec 2025 19:00:57 +0000
Manifest this update:     Sat 13 Dec 2025 19:00:57 +0000
Manifest next update:     Sun 14 Dec 2025 19:00:57 +0000
Files and hashes:         1: FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl (hash: Tt4OFLJR7uzjvl/gI1okUEP3HhTD7hVYTkXtxMlXaAY=)
                          2: VUbDzg-9AyYevbePTrpEdiRqwN4.roa (hash: t4/eKGmP5PXlxUDXBzE6y3aXXoUIuyqOs01O0kBzip8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 19:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:19:16:67:80:52:5b:53:09:3c:ae:e4:da:13:65:cc:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e49258dc76546dc595084d2593e181cd47983f
        Validity
            Not Before: Dec 13 19:00:57 2025 GMT
            Not After : Dec 14 19:00:57 2025 GMT
        Subject: CN=fa2353fc00b9f71f4ea6e8ee3e879cd38e084cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:8f:26:b2:4f:17:71:cd:c9:1d:0d:06:91:
                    92:6d:d8:e8:6f:1e:88:65:10:87:dd:4b:f4:6f:3e:
                    08:1e:7a:1e:41:8c:67:11:b7:c4:17:13:e5:ae:70:
                    2b:e2:d5:ad:43:ee:14:ac:62:a4:3c:d3:4d:06:43:
                    61:81:e4:87:da:fd:98:70:fa:41:db:09:e3:83:bb:
                    72:f7:b6:5c:00:e3:23:48:a7:06:02:83:c1:fd:88:
                    85:9e:e2:fa:cf:f0:15:5b:09:66:e3:a8:b4:90:f7:
                    9a:d5:c0:a0:b2:5d:58:2e:83:86:8b:6f:26:b0:5a:
                    b9:57:33:e4:b9:30:1d:7b:a5:91:76:fa:e9:4b:33:
                    8e:e1:be:e6:ba:6f:1b:fa:ab:eb:a7:70:9a:73:8d:
                    50:e6:90:a1:c7:e1:1b:17:17:2c:2e:46:8e:92:73:
                    10:d6:95:de:6d:0d:fe:f1:39:9a:cb:ce:55:7f:4d:
                    79:5a:75:0b:7e:95:ee:ae:38:24:e8:b3:9f:28:51:
                    cf:b3:7f:34:7c:1b:8d:2f:fa:24:99:52:9d:ea:33:
                    a6:ee:0d:3c:3b:c1:14:09:2f:36:e7:0f:99:d2:03:
                    b5:42:5a:a9:ec:29:20:22:ec:53:40:55:61:2d:96:
                    f1:43:5c:29:cf:67:f3:d1:26:0b:91:7c:6b:e4:ce:
                    2b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:23:53:FC:00:B9:F7:1F:4E:A6:E8:EE:3E:87:9C:D3:8E:08:4C:FC
            X509v3 Authority Key Identifier:
                keyid:16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:73:ef:89:1b:7c:9b:93:c9:ee:52:27:ff:85:b7:3a:5e:0c:
         c8:19:b9:0f:33:4f:b4:95:0b:d1:ee:36:c2:bf:ff:c0:54:93:
         2c:47:66:79:97:fb:30:f9:bf:27:19:4f:2f:5f:2c:07:1b:b0:
         3d:12:02:43:13:66:3c:86:64:3a:b7:3d:b5:15:7e:97:14:03:
         c8:f7:45:71:bd:c1:4a:3c:7d:2c:fc:2a:ad:d7:5e:09:b6:f8:
         d6:c7:0e:db:f5:7c:67:9f:90:39:18:9f:4a:8e:a3:d5:39:6c:
         99:9f:2c:15:29:be:9f:65:39:ee:88:cf:b0:78:66:8b:8a:57:
         fe:26:38:2a:0e:90:0a:ca:db:82:7e:3f:91:5c:b8:91:a8:28:
         07:6a:e5:e9:72:08:56:07:88:74:ba:64:62:ea:9a:5f:d1:15:
         6a:b1:60:d3:37:cb:d4:a0:0d:4f:bb:5f:5d:31:f1:a4:77:96:
         41:97:08:e8:1a:50:76:f8:7a:89:3f:db:1e:ac:e6:f4:43:57:
         cf:7a:df:d1:a0:23:e3:5f:2e:84:60:96:7a:a8:8a:36:f1:3e:
         c6:eb:36:57:74:c4:78:84:a3:94:51:9c:7a:f2:05:a1:4c:67:
         99:08:80:86:30:f8:52:4d:b4:a7:33:b9:27:73:3a:13:c4:8b:
         e2:99:92:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 03:46:31 2025 by rpki-client