This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
File:                     Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft (raw, json)
Hash identifier:          2ue2hERM3xve3d9vvZsOOPlSUp9+LEt/jdrWDYUzrNU=
Subject key identifier:   CE:AA:4B:7B:FA:3A:2C:98:E4:56:03:67:28:66:00:21:97:52:16:EB
Authority key identifier: 16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
Certificate issuer:       /CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Certificate serial:       019B597608C82331F30309CC7C6F7FC4FB5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
Manifest number:          0353
Signing time:             Fri 26 Dec 2025 07:01:06 +0000
Manifest this update:     Fri 26 Dec 2025 07:01:06 +0000
Manifest next update:     Sat 27 Dec 2025 07:01:06 +0000
Files and hashes:         1: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl (hash: OCW0wN9KIOYkP8+GYCB94P28Jip3kU8S4SQhB5tWpGY=)
                          2: VjoP5kM-KwhZcj01jM3hl-6r6UA.roa (hash: vqqeCugYqbCnSBb7Wp1fy/fzybkRWWHMWjjnU8HbuEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:76:08:c8:23:31:f3:03:09:cc:7c:6f:7f:c4:fb:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
        Validity
            Not Before: Dec 26 07:01:06 2025 GMT
            Not After : Dec 27 07:01:06 2025 GMT
        Subject: CN=ceaa4b7bfa3a2c98e456036728660021975216eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1a:c4:73:a9:62:3c:c1:58:78:61:48:73:5f:
                    e4:cb:2a:7a:9e:ba:ad:43:f6:cb:cf:3d:4f:1f:91:
                    8e:57:d3:57:2b:c0:94:8d:cd:81:ec:16:a0:8d:75:
                    ab:23:6a:b9:93:aa:e7:92:a5:e8:b4:2e:c7:9a:e2:
                    56:a7:11:d9:0b:81:cb:bc:72:f0:4a:d4:2f:63:fd:
                    fd:36:28:4f:8d:fb:54:f3:5f:e5:bb:63:4d:3b:5d:
                    61:59:e8:81:66:9e:6e:c0:97:2e:da:63:d9:8f:d3:
                    cf:b8:3a:bb:7a:d1:40:f7:e5:08:a9:93:4e:f7:a4:
                    83:24:88:98:cb:f9:59:c5:db:56:d3:22:34:98:af:
                    82:09:cc:11:df:e2:a9:c5:0e:f4:ad:8a:46:b3:6b:
                    df:d3:fb:0d:5a:bf:b8:bb:ef:92:b7:e5:49:fe:94:
                    19:5c:2f:ac:ef:be:56:ac:a3:a4:bb:aa:4e:de:1b:
                    9b:ef:90:fa:82:21:be:7a:d7:54:b5:43:c4:db:f9:
                    a2:f7:12:91:0e:ba:34:7b:2c:bb:b1:c2:1c:3f:b4:
                    0f:53:14:38:60:ae:fc:56:66:48:9a:e0:47:fd:ae:
                    1e:af:cd:75:d8:3d:dc:85:dc:79:cb:1a:57:c3:8f:
                    ac:da:d8:16:3e:53:f0:45:56:5b:0c:4f:d1:f2:b5:
                    a0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AA:4B:7B:FA:3A:2C:98:E4:56:03:67:28:66:00:21:97:52:16:EB
            X509v3 Authority Key Identifier:
                keyid:16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:ec:4e:20:64:9a:e6:a8:47:5c:0d:54:b1:ba:54:fc:38:82:
         76:67:2d:82:6a:ab:b1:b8:39:f0:fd:84:e9:14:bd:d9:97:0b:
         21:be:8a:65:15:14:07:4b:ff:7a:2e:df:aa:8e:52:9a:2f:f9:
         24:7b:da:dd:1c:e7:dc:eb:63:3e:47:64:47:04:b4:e9:d9:b6:
         13:de:01:f1:c2:de:d7:a5:d8:de:f6:64:ca:1f:90:5a:91:7b:
         74:1b:68:b8:b2:54:f4:b6:59:16:5e:14:9e:c9:13:ac:d6:ac:
         2b:7d:6c:53:5a:a9:3f:0c:b2:84:4f:48:38:b5:2b:31:fd:38:
         ff:bc:de:54:32:6a:8f:26:0a:02:c9:e4:f8:a7:28:10:4e:3d:
         99:06:71:84:48:9a:7a:22:92:a1:b6:00:92:75:79:3d:3e:90:
         61:26:39:fc:ff:7f:3a:d9:92:a6:1e:4a:09:35:7e:38:b8:bc:
         85:5a:81:8b:0e:63:bd:fb:f6:6e:9b:4f:72:9a:a1:9c:e8:19:
         fe:ff:84:ff:6f:8b:a2:5a:76:85:32:17:1a:31:68:82:05:2b:
         d0:6b:56:2e:8f:4f:52:57:7b:a8:cc:fe:32:b8:08:2e:33:8a:
         3a:1d:8b:01:ad:de:4b:29:28:4d:ce:dc:7d:fb:52:e4:eb:3e:
         d9:a6:62:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 15:45:40 2025 by rpki-client