This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
File:                     FpfEbq-hDsXZB7sF43EjtpKrSUw.mft (raw, json)
Hash identifier:          PJQsoTuqU1w7L2I/eNOOGHy/IT/c2ey/N1I6dKy5YCs=
Subject key identifier:   F3:D3:CC:F0:8C:48:DE:D2:6D:37:BD:4C:AA:B4:04:73:08:0C:13:0C
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Certificate issuer:       /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial:       019B1C857BAA8BCE63E32D1B50A303508CDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
Manifest number:          1725
Signing time:             Sun 14 Dec 2025 11:01:08 +0000
Manifest this update:     Sun 14 Dec 2025 11:01:08 +0000
Manifest next update:     Mon 15 Dec 2025 11:01:08 +0000
Files and hashes:         1: FpfEbq-hDsXZB7sF43EjtpKrSUw.crl (hash: YIFZ2210hUt7P4NNg6QrYLTwuto+r0r9GCNWlX9WOjk=)
                          2: XWiker2v7GIlhkuZZtR48lVm108.roa (hash: NhUbFkPuOTxAHiVlHIvGiCnLEnSRvJwEzL+UojBb8qg=)
                          3: zJ5MYEMzWfucEDGxLfmRzsaSeEg.roa (hash: 13et8HkfUmrO0+ptVe41OzMBwG62Ru5G13R9afNJkP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 11:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1c:85:7b:aa:8b:ce:63:e3:2d:1b:50:a3:03:50:8c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
        Validity
            Not Before: Dec 14 11:01:08 2025 GMT
            Not After : Dec 15 11:01:08 2025 GMT
        Subject: CN=f3d3ccf08c48ded26d37bd4caab40473080c130c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e7:bf:36:4b:13:f6:9d:c9:08:7b:a9:a9:41:
                    24:71:65:c4:5f:4d:07:9d:56:4c:25:d2:a0:b4:13:
                    b2:24:eb:a0:04:6a:c1:d0:5a:88:2d:25:91:8b:90:
                    3a:b8:e6:f4:d6:cd:c4:c1:58:66:a7:4f:53:f5:72:
                    ae:e8:5b:e6:1a:17:84:0a:dc:1b:2d:de:75:3b:21:
                    00:bd:ed:46:ef:a5:3b:30:c1:06:89:a9:b6:d2:ca:
                    76:42:cb:cb:72:f7:b9:ab:78:6f:78:7b:d0:2b:d0:
                    b3:84:d4:39:78:9e:fd:95:85:85:38:38:c8:9c:14:
                    89:10:3a:69:40:69:b9:16:50:e0:43:bb:79:ed:c4:
                    bb:71:fe:f2:8d:59:c1:b8:d1:69:1a:7b:5f:c3:5d:
                    80:ac:95:8c:29:ed:47:b7:d6:02:8c:b0:bf:38:68:
                    f4:d7:b9:8d:43:cb:e7:5d:65:ae:78:62:51:28:12:
                    6e:c3:49:db:1c:ca:e3:aa:17:1a:27:fa:8a:f6:19:
                    13:8b:5c:3c:52:1c:fe:8c:28:4b:a6:24:da:8c:fd:
                    c5:6f:46:56:0a:50:e1:7e:ff:df:36:f0:21:9b:fe:
                    98:8f:df:ea:aa:24:ec:a7:c8:0a:46:af:20:a2:8f:
                    f2:14:51:6c:ab:04:85:7a:67:e7:e7:87:7a:88:5e:
                    f3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D3:CC:F0:8C:48:DE:D2:6D:37:BD:4C:AA:B4:04:73:08:0C:13:0C
            X509v3 Authority Key Identifier:
                keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:30:5e:6f:20:e8:b9:1b:d6:44:3e:1b:ec:a8:be:d4:2f:77:
         92:be:b4:eb:9a:32:1c:14:8a:4b:11:fa:b1:26:62:30:8e:dd:
         b1:26:65:a8:f4:92:ae:f6:cc:23:11:e3:dc:9a:1d:25:fe:ab:
         fc:9e:30:ad:63:3b:a3:ba:9e:b5:f9:52:f3:b1:67:35:5d:19:
         97:aa:83:10:c6:d0:c6:33:1f:32:6b:32:77:1a:2a:3c:1a:ed:
         84:8b:f8:c0:bb:30:51:65:a2:29:f6:c7:43:dd:4d:00:44:f0:
         2b:01:9f:85:23:f0:9e:f1:20:59:fa:ac:f1:78:8c:d7:4d:27:
         83:d4:da:eb:5c:fd:97:fd:d2:d6:4a:29:53:4d:b5:6f:61:41:
         dd:01:6c:2a:33:06:09:b4:3b:59:38:cc:aa:f5:63:40:00:f0:
         f0:81:30:3b:cf:f8:ae:af:55:fb:20:9a:01:71:83:1e:5d:06:
         49:41:58:fb:ea:e5:e9:1a:f2:4e:25:bd:45:e3:b2:e8:42:d2:
         f0:f7:7a:c2:8e:f1:03:3f:84:46:12:ae:3b:79:00:73:21:e8:
         de:1a:e2:4a:8d:fe:c7:95:85:5e:c1:f0:87:68:93:70:3b:15:
         50:bb:3a:a4:2f:81:7c:9c:d0:de:5e:54:89:97:2f:88:17:2a:
         51:f6:ac:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 19:30:10 2025 by rpki-client