This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
File:                     fIbxOptyHNGGn7uXTuU9kAIuqiw.mft (raw, json)
Hash identifier:          KSdLgYPgkO7Gki+Ms5JhI+UFJbx+FRvVxc5VAOFvVqM=
Subject key identifier:   94:32:36:0B:10:7F:A8:0E:BF:62:57:E8:97:FD:FE:87:0E:48:4E:56
Authority key identifier: 7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
Certificate issuer:       /CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Certificate serial:       019B239A3A7F69997311092A8C6939DF17EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
Manifest number:          0807
Signing time:             Mon 15 Dec 2025 20:01:08 +0000
Manifest this update:     Mon 15 Dec 2025 20:01:08 +0000
Manifest next update:     Tue 16 Dec 2025 20:01:08 +0000
Files and hashes:         1: 9HC-dVjnSoiBjTI-wFW5Aqlq_oY.roa (hash: mG2Ma2dDqG+dXSsvT9OJk25xVpUl5+N3IsrwQpPJXsQ=)
                          2: DsE5_TUYYo0BXf2JDy40SB8tAVY.roa (hash: MUCKDFIZgUo4hnT7lKbmN/TrcbbCDZIEWfPYHOszsj4=)
                          3: fIbxOptyHNGGn7uXTuU9kAIuqiw.crl (hash: 5tzbfrBxxXmN/WbYUfrVK3WEME/iywJzQDm/hNqw1wk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 15:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:23:9a:3a:7f:69:99:73:11:09:2a:8c:69:39:df:17:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
        Validity
            Not Before: Dec 15 20:01:08 2025 GMT
            Not After : Dec 16 20:01:08 2025 GMT
        Subject: CN=9432360b107fa80ebf6257e897fdfe870e484e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:36:a6:f8:c4:57:3d:65:7b:b5:2f:86:20:42:
                    e0:11:ca:17:a9:e7:c9:36:e4:2d:ca:aa:5b:79:b3:
                    b6:ff:4b:b7:0b:dd:64:37:fa:b6:11:7a:12:b7:f5:
                    09:1d:3e:dd:21:39:4f:b4:e0:36:ea:82:e5:4e:03:
                    cb:44:a5:41:40:85:0e:a0:e2:ef:cb:4e:1f:56:90:
                    a3:31:99:38:80:65:b6:59:84:9f:81:4d:c1:75:45:
                    a4:2b:6c:e4:bd:95:66:f4:8d:27:33:20:37:3c:1f:
                    26:49:17:73:b6:56:87:3a:68:f6:0d:6e:fe:e5:2f:
                    aa:9a:bf:80:32:71:ca:b0:f6:30:cb:7f:11:7c:a7:
                    e8:7a:58:8c:9c:d2:48:3c:a8:dc:41:2e:c6:c4:fe:
                    37:e8:10:82:32:67:da:2b:cf:1f:3b:89:9d:f7:48:
                    c1:5d:4b:df:31:41:d0:8d:34:d8:63:59:47:db:c1:
                    8d:a2:3e:3a:7e:09:52:dc:d4:84:57:e8:15:a3:12:
                    dd:e9:fc:a2:3f:28:bb:b6:17:9b:f5:8f:f4:c3:4a:
                    20:07:5a:fc:a5:ec:a6:c8:99:10:a5:a4:40:b4:15:
                    39:fc:53:d4:35:ed:5e:19:01:cd:bb:f5:18:c2:40:
                    09:ec:31:10:b3:83:50:5c:b9:77:59:73:32:50:c3:
                    9a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:32:36:0B:10:7F:A8:0E:BF:62:57:E8:97:FD:FE:87:0E:48:4E:56
            X509v3 Authority Key Identifier:
                keyid:7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:a7:15:2a:4f:15:15:92:a6:c0:a9:62:74:e8:4a:bf:f0:d1:
         20:53:58:ef:62:a0:29:df:28:79:03:f6:db:74:31:d5:4c:d1:
         d3:36:db:d8:5d:9c:1f:05:9a:05:cb:43:94:16:84:4f:7a:26:
         27:37:1c:25:2d:94:79:82:a5:da:fe:2d:00:69:c7:c8:8a:18:
         2f:74:05:2b:5b:27:a5:93:28:fc:a5:1a:78:b8:40:55:e1:bb:
         88:9c:29:8f:d1:80:66:72:39:5c:5d:09:ea:ff:ea:4a:d6:3c:
         a8:2a:9b:75:1c:0e:5e:d0:b2:89:c3:ee:ef:e9:46:90:f7:d4:
         17:a9:aa:f6:bc:59:f3:82:5f:08:b8:07:99:87:ab:cb:d7:f6:
         31:29:d9:c1:f0:26:81:2f:84:8e:76:4b:47:1c:d3:2e:3c:42:
         37:c1:ca:18:4f:fc:65:a6:fa:0b:26:c6:92:32:7e:1c:76:ff:
         8a:a7:83:94:d8:47:17:0f:de:85:69:86:73:41:cd:a7:d6:0b:
         92:a6:33:cf:b1:ea:66:b6:a8:98:d8:18:8f:b9:b1:83:e7:f4:
         01:d7:15:de:5e:33:45:36:bf:d0:4b:6e:25:8f:43:39:99:fd:
         01:fe:59:9f:08:54:69:84:30:7e:7d:b6:4c:1f:f2:93:04:81:
         8e:94:e4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 22:32:33 2025 by rpki-client