This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
File:                     fGc9qtbZMX8BAdQaBCph5XaJRTo.mft (raw, json)
Hash identifier:          BLLa40xMc9YH5rIgYBNopx+UBNi3VEohrYjfPPWjZFo=
Subject key identifier:   B2:17:75:97:62:2B:AA:E9:07:5D:73:58:51:E1:19:7F:86:AC:7F:14
Authority key identifier: 7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A
Certificate issuer:       /CN=7c673daad6d9317f0101d41a042a61e57689453a
Certificate serial:       019B24E3BF6948DB5E8E15C490B10B92EB26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
Manifest number:          11DD
Signing time:             Tue 16 Dec 2025 02:01:04 +0000
Manifest this update:     Tue 16 Dec 2025 02:01:04 +0000
Manifest next update:     Wed 17 Dec 2025 02:01:04 +0000
Files and hashes:         1: 7GFUUPQe5X4o8br9pIJdHkkRXtg.roa (hash: 4KUOaFluZqET8tORnDH6HMaQ2V49mBLgUsZvrKGZ4Yk=)
                          2: QruSm__TwUr_yHAYXjuNZoojNTM.roa (hash: 3QNaGA7ZG6uoQs8cjkKS1muqAr2cgCC2owbsQ1FitJQ=)
                          3: fGc9qtbZMX8BAdQaBCph5XaJRTo.crl (hash: MFMGRq490YEharJaBmdjzRzKeYP4Qz4uMofFBzA7LI8=)
                          4: qQ7iOR4Ssn9YuOR2RGcWRIhX7kw.roa (hash: wQiE3t4T6OAM43VIDSTCvTQoMR/uz5WRMJgjbw+3Glg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:24:e3:bf:69:48:db:5e:8e:15:c4:90:b1:0b:92:eb:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c673daad6d9317f0101d41a042a61e57689453a
        Validity
            Not Before: Dec 16 02:01:04 2025 GMT
            Not After : Dec 17 02:01:04 2025 GMT
        Subject: CN=b2177597622baae9075d735851e1197f86ac7f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4e:c3:28:2c:27:12:bd:1d:e7:e8:66:d4:a0:
                    c6:ac:0a:9c:21:9f:05:5f:bd:9b:19:d2:c8:35:1f:
                    c3:06:01:6f:54:2c:0a:3a:9f:52:6c:b3:34:45:f8:
                    b0:0f:d7:34:42:5d:e8:68:7e:47:88:00:9f:f7:bf:
                    65:a9:9e:85:ad:9d:b6:0f:3d:d0:f3:cd:ce:10:3e:
                    40:7e:55:25:aa:a9:ec:0d:b9:52:eb:04:70:a5:07:
                    e8:6f:8e:9b:02:23:87:72:46:30:05:5b:1e:f8:d4:
                    5b:31:e5:ad:78:d2:97:ee:78:86:ae:eb:0f:df:3b:
                    ea:c8:9c:4e:3f:4a:50:ae:ec:dc:a0:6e:8a:5f:09:
                    35:78:06:44:da:a7:07:2d:78:4d:b6:46:4c:a7:af:
                    e1:26:90:97:a9:e4:c7:f0:45:d9:59:a6:53:af:a2:
                    1c:bb:d1:ac:19:96:f3:87:10:b6:a1:17:9f:11:74:
                    fd:aa:5d:2f:0b:bc:fe:83:d9:70:e3:93:d3:e8:82:
                    1f:db:b0:5a:4c:a5:c3:ba:6a:5d:77:9a:4b:0d:7c:
                    f2:01:d0:d3:38:f8:7e:98:66:2f:eb:84:35:b4:93:
                    3a:3b:85:50:3d:48:86:d9:e4:1b:32:5e:71:14:f0:
                    03:ed:0d:a1:c6:88:ca:89:2f:38:b3:c1:b0:b1:f2:
                    b0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:17:75:97:62:2B:AA:E9:07:5D:73:58:51:E1:19:7F:86:AC:7F:14
            X509v3 Authority Key Identifier:
                keyid:7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ce:16:5f:bc:48:d1:02:c9:8c:0d:14:79:f7:9f:dc:88:99:
         26:84:ff:25:ab:6f:ad:ae:31:07:d6:b2:25:62:c1:da:f7:95:
         ff:02:74:92:70:ea:42:51:2b:05:a0:e7:53:d1:e9:38:80:a8:
         4c:e2:e5:71:c1:bb:b5:f4:11:03:db:15:ab:0b:71:f0:05:bb:
         bb:13:f5:44:30:c7:3a:65:fc:62:50:af:ca:af:57:e7:50:52:
         c8:5e:25:12:84:af:02:64:7a:a9:7c:51:48:4f:d3:87:59:e5:
         5d:98:99:60:b1:c8:bd:9d:2a:3f:c1:cb:2f:6f:0c:09:e1:7c:
         33:50:e8:fa:e4:d0:2b:ba:a0:62:1b:b8:d9:12:a9:69:3c:c8:
         b7:2a:29:24:a4:e5:83:18:d6:dd:66:e8:0f:e6:c5:d8:12:fd:
         3c:8e:1d:85:78:4f:3a:d1:37:67:aa:c3:1d:1b:0d:96:94:9e:
         cf:d3:6f:39:86:df:54:6a:a7:4a:47:c2:45:ac:89:76:9f:a0:
         d1:c9:ee:65:8e:99:97:39:d3:d3:5a:9c:24:89:02:de:4a:00:
         5c:7c:a2:ca:b5:2e:df:44:ca:85:8e:43:cb:e8:e3:59:8f:44:
         fb:c3:6c:8f:b9:13:8b:06:73:89:93:2f:8b:fc:38:62:39:52:
         b1:2d:23:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 06:26:49 2025 by rpki-client