This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
File:                     FIa0oIrOYOZw7c2J-tslQBFWL1M.mft (raw, json)
Hash identifier:          RGlWToD8m81ty6v2sgnGxQsJ0wCrOWooUVfxIm1nUoE=
Subject key identifier:   7C:15:7F:86:01:74:91:21:4A:5A:F9:D1:43:C6:54:AC:D5:10:35:FD
Authority key identifier: 14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
Certificate issuer:       /CN=1486b4a08ace60e670edcd89fadb254011562f53
Certificate serial:       019B5A51D83484A0B0B194EE6DBBEFE07BFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
Manifest number:          0626
Signing time:             Fri 26 Dec 2025 11:01:11 +0000
Manifest this update:     Fri 26 Dec 2025 11:01:11 +0000
Manifest next update:     Sat 27 Dec 2025 11:01:11 +0000
Files and hashes:         1: 0hE7yQkOsQYY1LQEos4wbxzkfnM.roa (hash: 70ia36yz/7UQliy+dQ5lEepwXI+ufgIzVRbaE7lLztM=)
                          2: FIa0oIrOYOZw7c2J-tslQBFWL1M.crl (hash: +wDUJYTY5rAH/EvJMwV4TkCynNdV1ljEDQ9YKdExx9s=)
                          3: YQdnp2VC261uNxqE4Oc-a1f9tGg.roa (hash: XivO/rYxkKb4OFfhsRiFIwL10Nr1ukhnz5M4clOZFnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5a:51:d8:34:84:a0:b0:b1:94:ee:6d:bb:ef:e0:7b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1486b4a08ace60e670edcd89fadb254011562f53
        Validity
            Not Before: Dec 26 11:01:11 2025 GMT
            Not After : Dec 27 11:01:11 2025 GMT
        Subject: CN=7c157f86017491214a5af9d143c654acd51035fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b0:53:df:f2:d3:19:67:fc:89:67:de:dc:6b:
                    79:fa:ea:c9:49:44:22:14:b3:0c:e0:47:69:80:de:
                    98:d9:3d:f6:c4:b9:51:8f:5b:e0:bc:69:cc:c0:5d:
                    cf:3a:1f:5d:2c:32:af:9a:3e:06:de:56:b0:00:b4:
                    ec:b1:69:6b:74:74:ea:5f:7a:86:86:30:59:1f:5f:
                    32:f5:6c:dd:d2:4a:2d:f7:eb:67:28:05:79:fd:00:
                    94:4d:1c:3e:6c:d5:1b:45:75:3e:d7:67:62:94:5f:
                    51:c3:ea:da:a9:56:2b:c1:16:50:82:5a:17:27:17:
                    55:e8:6d:12:3d:d2:54:28:ce:ab:e9:07:1e:5c:ef:
                    3d:bb:b0:b8:d6:e4:aa:cf:0b:57:88:fa:51:0b:9f:
                    b6:a2:5c:43:ad:cd:e1:84:94:04:50:de:63:ca:46:
                    c1:b4:4e:31:07:b3:72:60:a7:d3:ac:a1:3a:96:c0:
                    df:cc:bb:98:94:ae:a4:b5:5a:5a:16:d0:18:13:c8:
                    39:2d:21:29:71:a2:3d:94:9e:69:54:7c:12:aa:73:
                    b0:67:ce:7e:b6:ff:b8:e9:ad:10:5d:29:c2:67:04:
                    15:c4:07:21:c3:17:0e:7e:62:28:66:da:f3:7f:b5:
                    78:f9:60:f0:93:54:05:73:e4:52:a8:8e:02:97:04:
                    ff:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:15:7F:86:01:74:91:21:4A:5A:F9:D1:43:C6:54:AC:D5:10:35:FD
            X509v3 Authority Key Identifier:
                keyid:14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:08:cf:f6:19:d6:71:3a:b7:9f:88:34:63:25:d5:f6:6c:12:
         b6:a6:1d:48:b3:93:4d:b7:15:84:15:3f:c3:ca:a8:aa:dc:dc:
         c3:c6:4f:5b:47:80:05:ae:77:9b:9f:f7:d4:b8:60:63:5c:7a:
         db:e7:9a:5b:7b:65:4f:ca:17:eb:6e:ab:fe:5b:20:ba:db:17:
         f1:bb:f7:a5:85:c6:ff:52:2b:07:64:4e:d4:1f:47:aa:f0:53:
         eb:16:22:45:fd:0e:f3:6b:72:91:8f:79:af:17:44:60:66:dd:
         a9:1b:b3:09:c4:a6:9c:7a:18:da:e6:56:0e:f5:66:f6:f8:e3:
         97:11:47:f3:57:39:61:fe:4b:25:c3:9b:53:a1:1b:e7:83:cb:
         6c:a1:ef:e4:17:48:91:63:82:ef:2e:93:69:ac:7b:2f:d7:62:
         5f:0c:ad:31:dc:5e:68:26:eb:43:8a:eb:6e:30:4c:35:5e:26:
         25:8b:bf:00:b6:fc:e3:e0:36:67:ad:ba:b3:93:91:73:c8:09:
         24:16:a7:fb:08:83:77:34:97:4c:aa:63:80:d9:ee:fa:c8:08:
         04:a4:71:e2:50:bc:7c:48:f7:78:4b:82:d2:c6:a1:64:f5:64:
         e1:49:86:40:a0:6e:59:87:88:34:33:c9:1d:b4:67:58:e7:b2:
         6b:c6:3c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 15:47:21 2025 by rpki-client