This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
File:                     fm4uaWbgarJcoOHaZuHj1kJIs6E.mft (raw, json)
Hash identifier:          U0/1jsNMAtJ/HI2Ol6NSIthkxUDmtpFxyTD++kPpl0I=
Subject key identifier:   9E:57:2C:EB:D6:13:63:C6:7F:06:11:D8:77:92:0A:C9:A9:16:16:37
Authority key identifier: 7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
Certificate issuer:       /CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Certificate serial:       019B0F37B772113A88267B23FE00697487C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
Manifest number:          0301
Signing time:             Thu 11 Dec 2025 21:01:08 +0000
Manifest this update:     Thu 11 Dec 2025 21:01:08 +0000
Manifest next update:     Fri 12 Dec 2025 21:01:08 +0000
Files and hashes:         1: BJ7sjp5ibHEtMZwGH8QOSgEVeks.roa (hash: vdUAgWFb0/ninRNnqapYY+qZwNPE4UbocwPx101zVCg=)
                          2: JyAstjJnRnfKpE7boFngTUQKsSI.roa (hash: QeCPc7sTPqsvq1vdnmx1h5/hFMLBuSHfMUEgszAKgAc=)
                          3: fm4uaWbgarJcoOHaZuHj1kJIs6E.crl (hash: ZTlaRFT78fQjMzAWNkPPUOLBVJQQvysKMVnqDhR1qhM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0f:37:b7:72:11:3a:88:26:7b:23:fe:00:69:74:87:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
        Validity
            Not Before: Dec 11 21:01:08 2025 GMT
            Not After : Dec 12 21:01:08 2025 GMT
        Subject: CN=9e572cebd61363c67f0611d877920ac9a9161637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bd:68:a3:8c:4f:af:10:b2:4a:e2:1d:ba:8b:
                    f0:fc:5c:6c:35:e0:f4:b1:81:22:86:b3:7e:6d:f5:
                    cb:7a:78:4f:2a:42:be:63:91:d2:cf:e7:c0:d9:40:
                    e0:71:23:93:60:ff:d6:23:b9:9b:5b:9c:31:68:19:
                    dc:ac:9b:ce:99:37:2b:2b:f6:6c:9c:c5:da:3a:59:
                    5d:2b:20:80:a6:34:6f:eb:5f:5a:83:ee:04:8d:46:
                    65:18:40:d6:f8:cb:03:82:27:af:18:d1:3d:fa:30:
                    29:8e:0f:d7:36:7b:62:5f:55:7b:81:39:45:bf:5a:
                    9e:a0:ad:15:6e:ce:7c:b8:a0:f7:31:1b:57:d2:d9:
                    cc:e3:4c:31:1d:66:59:e7:71:6a:64:26:85:4b:c3:
                    d7:71:c7:a5:c6:42:d5:3b:26:67:0f:e8:4b:c3:9b:
                    db:15:70:3f:1d:e4:fb:cf:ff:0a:e8:90:78:bb:0c:
                    d1:bc:46:c0:dc:77:6f:ae:0d:1a:cf:fc:c8:53:b8:
                    42:b8:6e:7d:f1:eb:23:65:65:85:be:3b:d3:9b:f5:
                    0a:c7:04:a5:be:46:62:85:8d:23:cb:7c:0a:d0:88:
                    f6:bc:61:71:bb:c8:3a:bb:a0:20:19:74:83:b9:2f:
                    9e:ee:fa:3b:39:03:cc:2e:ff:2a:b1:f5:ec:e6:18:
                    24:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:57:2C:EB:D6:13:63:C6:7F:06:11:D8:77:92:0A:C9:A9:16:16:37
            X509v3 Authority Key Identifier:
                keyid:7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:6e:b1:1f:7e:60:14:8c:1c:e5:d6:01:86:ba:48:63:d4:1b:
         d0:bd:b0:6c:d6:06:84:62:d8:d2:3f:9f:bd:3e:2a:d1:0f:15:
         89:a8:b6:51:52:25:7a:68:d9:c3:34:56:02:ea:b9:73:5e:a5:
         e3:61:66:60:ac:d2:84:52:f3:64:35:1f:9f:a4:ed:dd:55:c7:
         fd:a7:76:da:78:4e:74:9b:55:8f:e8:75:60:95:f0:fc:5b:04:
         76:6a:ae:e2:fa:9b:0d:6c:a9:6c:c2:f7:4d:87:eb:26:6d:c0:
         7c:a0:6a:76:c0:66:e9:97:d2:fb:74:60:47:8a:20:27:dd:59:
         60:1e:ec:3e:68:62:07:b1:2d:a0:55:d9:bd:01:b6:da:39:4e:
         ed:39:6e:e2:58:6d:83:af:a3:0a:f3:2c:99:d5:77:2d:f8:d2:
         7b:86:98:c9:66:7b:1d:6b:85:e8:31:e7:6c:75:77:74:66:4d:
         dd:44:2a:e3:48:65:94:45:96:59:fc:5e:b8:5d:cf:f7:35:6c:
         5d:c0:36:07:bb:c6:d9:3d:c7:ca:0a:94:49:8f:e5:b9:43:68:
         81:ae:1c:87:0d:68:cd:cc:5f:dd:d8:b4:79:5c:24:a8:7b:15:
         7b:81:4b:5c:2f:29:8c:f8:3f:54:b6:f4:08:56:8e:c9:f7:04:
         12:53:d4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 23:06:33 2025 by rpki-client