This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
File:                     fIwTcd1q_V_XnqmE2j-9oblK_iM.mft (raw, json)
Hash identifier:          pIAJSWBHPHbLdvD7bdCeWJTIuR1zP+UU133z5qrB/yE=
Subject key identifier:   75:D5:38:55:6C:DA:2B:4F:1E:04:5E:DA:FE:C0:55:06:2B:90:FF:0F
Authority key identifier: 7C:8C:13:71:DD:6A:FD:5F:D7:9E:A9:84:DA:3F:BD:A1:B9:4A:FE:23
Certificate issuer:       /CN=7c8c1371dd6afd5fd79ea984da3fbda1b94afe23
Certificate serial:       019B1014A074177D02526BC07857FEA32D6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
Manifest number:          1771
Signing time:             Fri 12 Dec 2025 01:02:25 +0000
Manifest this update:     Fri 12 Dec 2025 01:02:25 +0000
Manifest next update:     Sat 13 Dec 2025 01:02:25 +0000
Files and hashes:         1: 4Ze6fHS1CDDIrfDprEE1yu2W5uY.roa (hash: To0AiaOH9TsCon/TYTwvzw2Mel3lXf3uulB0tRaKWIc=)
                          2: fIwTcd1q_V_XnqmE2j-9oblK_iM.crl (hash: 7N5yMP5mR3OoCKl9+WH/nqeLamCYEVDkQ52Nn2PprVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:10:14:a0:74:17:7d:02:52:6b:c0:78:57:fe:a3:2d:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c8c1371dd6afd5fd79ea984da3fbda1b94afe23
        Validity
            Not Before: Dec 12 01:02:25 2025 GMT
            Not After : Dec 13 01:02:25 2025 GMT
        Subject: CN=75d538556cda2b4f1e045edafec055062b90ff0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:93:c0:29:56:ab:09:68:92:7d:ec:87:83:d9:
                    4d:0f:20:31:58:91:14:c6:29:56:a1:9d:2b:fd:b0:
                    a2:c3:84:22:d2:86:db:bb:e6:17:07:67:67:83:33:
                    2a:5f:c6:fa:0d:29:d2:c3:35:fd:43:51:61:17:e2:
                    85:ba:8a:87:53:8d:77:15:11:8e:f9:86:47:61:61:
                    65:ef:7e:de:ac:44:bc:ec:ce:09:82:cc:b3:ca:0e:
                    ef:0c:e7:da:19:63:1b:d2:fb:4c:22:cf:13:1a:29:
                    ef:2f:e0:0f:0e:ac:3f:9b:13:21:33:94:86:b8:92:
                    10:48:c7:3f:39:9d:69:1e:b2:ba:a6:30:ec:79:b4:
                    c8:e1:b9:c3:72:78:cf:86:85:b5:46:f1:f8:92:7c:
                    19:7a:31:12:17:6b:2d:c1:5d:a0:f5:37:40:98:b4:
                    f2:7e:eb:f8:bf:d0:93:b7:98:73:b9:46:a1:79:39:
                    c9:54:89:1e:2f:24:cf:8e:18:ce:a3:d0:1f:14:af:
                    4b:8b:2d:3a:b6:7c:62:1d:2f:44:0a:c3:29:90:1f:
                    ef:00:ed:ca:4a:2b:e8:ad:4b:b5:40:8b:97:59:d2:
                    52:97:29:6a:c9:a9:96:3f:2e:d8:41:43:9b:9c:19:
                    65:fb:c3:1b:ae:3e:50:bb:36:fe:c6:23:ac:91:e8:
                    7a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D5:38:55:6C:DA:2B:4F:1E:04:5E:DA:FE:C0:55:06:2B:90:FF:0F
            X509v3 Authority Key Identifier:
                keyid:7C:8C:13:71:DD:6A:FD:5F:D7:9E:A9:84:DA:3F:BD:A1:B9:4A:FE:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:2c:12:11:a1:89:f8:b8:48:5a:39:19:a4:99:73:4f:0b:92:
         88:26:80:e2:72:3d:8e:15:6d:4c:3c:5c:86:87:a6:e4:e3:53:
         4d:35:cc:7a:4c:92:c8:f8:e1:38:83:bb:9f:10:59:0f:3f:3b:
         26:63:07:49:9b:cb:83:8f:3e:95:b1:dc:36:e5:8e:2a:d4:96:
         e6:59:d6:68:9e:eb:32:0f:4d:b4:e9:3e:f3:fc:1e:43:df:43:
         ae:26:87:6b:51:86:96:ad:28:5e:11:64:e5:76:f6:f5:f0:66:
         64:af:c9:85:9f:d2:42:62:39:a3:0f:6e:aa:f8:e0:70:ad:81:
         0d:b4:7a:ae:ad:a7:69:4d:5f:2b:cc:12:1b:1b:c7:3a:14:60:
         98:e8:ed:db:8b:40:00:8e:76:7a:28:89:69:a6:a8:bb:c8:d2:
         56:b6:8c:7f:23:b5:a7:57:37:f7:ce:5e:0a:6b:43:44:fa:15:
         ed:97:d6:d9:c8:56:56:b2:51:2f:63:50:b6:64:24:11:49:6a:
         39:36:8a:f6:7d:6a:85:24:50:16:59:b2:5f:2c:63:19:a7:8a:
         6f:65:5e:f7:45:5e:ca:57:73:14:c2:b1:3e:1b:cd:ed:8f:74:
         6f:e3:5c:a5:dd:9a:e6:f8:7a:d5:4a:58:34:f7:e1:eb:22:11:
         68:7e:6e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 07:02:11 2025 by rpki-client