This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
File:                     F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft (raw, json)
Hash identifier:          vykEeV7kxp2pGkU1eHzLtfFi2Le43KV2mWQEwxfuAP0=
Subject key identifier:   BE:B0:9F:B0:20:5A:25:9E:81:E7:32:F9:22:22:DE:A4:5F:1A:92:92
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Certificate issuer:       /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial:       019AF8E7E7E358191B03B40F3C0D56ACC5F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
Manifest number:          1168
Signing time:             Sun 07 Dec 2025 13:02:18 +0000
Manifest this update:     Sun 07 Dec 2025 13:02:18 +0000
Manifest next update:     Mon 08 Dec 2025 13:02:18 +0000
Files and hashes:         1: A-cG9_VLTkbphCfs69AUhiirqHg.roa (hash: t1BknoTJdcFpSWtNoZoHuIOq9kUcPBsqmM7WgqQbhUw=)
                          2: F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl (hash: AegvOsYe8T22EgHfYCEVy8ftBjwa8MdAzC9/kqMmNow=)
                          3: jeCOpRVOfzPdKHCJg5VaAG2ZU-0.roa (hash: gfvmY5Jw7/jL3ve93eYFDmKDfaFU9R+FgRyjOHRXXxo=)
                          4: nzFdzlxDGl-0gzUpnpUFUkIIuzM.roa (hash: PxAEcSL4+pjTKWciNNPj/S1u+RcprIkbVvq5ujpcIuY=)
                          5: wNwz-CEyZ2UgBaszV0ucixDH2J8.roa (hash: 7MrpT4CLu6mRCHE7ngg+YWwTFHL1zoVwcmT3KvmQWLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f8:e7:e7:e3:58:19:1b:03:b4:0f:3c:0d:56:ac:c5:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
        Validity
            Not Before: Dec  7 13:02:18 2025 GMT
            Not After : Dec  8 13:02:18 2025 GMT
        Subject: CN=beb09fb0205a259e81e732f92222dea45f1a9292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6d:e1:ea:94:d7:7c:d3:ae:04:92:44:88:fe:
                    30:a1:79:5f:e8:b6:cd:e8:7c:5c:62:2d:f8:3c:d5:
                    70:3d:3a:1c:99:ea:d2:eb:50:63:ef:30:20:6b:74:
                    17:c0:f5:fc:c3:da:42:03:f5:36:e0:fc:61:9f:60:
                    22:58:54:0e:18:0b:95:20:84:3c:c2:c1:b6:b9:e2:
                    2a:0d:dd:50:96:9e:d1:ec:a5:b6:b8:b2:0e:7b:1d:
                    5c:6a:c5:00:90:e1:07:6f:26:b5:9d:fe:a3:91:db:
                    96:34:71:76:b6:80:8a:56:a1:ec:8e:d3:42:8e:bb:
                    22:03:4d:7e:10:42:33:97:45:d7:81:0d:9f:fc:77:
                    98:47:44:b9:ae:10:95:fd:9d:2a:ef:b8:45:a0:b4:
                    db:ed:f3:6e:c3:9c:9b:80:38:e1:93:50:40:df:31:
                    10:b2:13:d8:9d:1a:90:0b:4f:6b:68:cf:05:b7:49:
                    7d:d5:01:30:a5:e2:af:37:32:f9:40:a8:ab:1c:02:
                    11:d1:57:38:d4:30:c5:4e:8d:c7:4e:d8:5d:66:59:
                    35:b4:a5:27:be:cd:1a:7c:fd:d0:ad:6c:32:2a:a5:
                    08:22:3b:db:b7:9b:d8:a7:84:d3:c1:9a:4e:13:d9:
                    89:a1:8f:57:18:78:4d:cc:3b:dc:29:63:6a:48:ae:
                    6d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B0:9F:B0:20:5A:25:9E:81:E7:32:F9:22:22:DE:A4:5F:1A:92:92
            X509v3 Authority Key Identifier:
                keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:54:35:a7:15:a0:5b:85:99:85:01:33:7c:09:c0:83:03:fb:
         f6:dc:7f:02:cf:26:f4:95:75:60:16:9d:d6:47:87:38:15:72:
         3d:1a:1a:cf:c1:93:a5:15:ac:1b:62:ab:02:a1:11:18:f2:27:
         63:d9:ac:c4:87:2e:6f:22:7d:3f:bf:78:92:53:da:85:97:94:
         88:18:10:d7:f2:88:60:17:7e:0d:1e:87:7b:0e:df:30:12:6b:
         e7:c1:e1:07:28:59:03:d1:5d:39:86:fd:45:63:4b:ca:84:12:
         9a:32:41:1d:bc:ab:57:c1:e1:95:59:e7:83:a6:ef:f0:9d:78:
         a5:1b:e7:b7:da:ce:44:4e:b6:c8:e3:0f:77:49:7b:25:ce:c7:
         28:c3:da:2a:69:fc:96:6a:fa:fc:b4:bc:c8:49:8d:fc:6f:12:
         f9:60:90:01:d4:9d:ee:8b:ed:5c:8d:29:20:e6:02:45:3e:e6:
         ee:4e:6e:73:98:ef:7d:48:5b:a2:93:16:78:f1:68:10:9d:34:
         3a:af:09:ab:28:44:75:9b:3e:6e:fe:c2:d0:54:04:fa:8e:41:
         b0:f1:26:4a:94:c9:22:a4:71:71:80:17:12:3a:2e:76:99:6b:
         1a:a2:eb:26:42:4b:a4:a4:fa:bf:56:64:2d:39:7e:21:18:6b:
         af:be:24:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 14:44:28 2025 by rpki-client