This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/F_V0MLEEipI6idbPoqPLO_wvElg.mft
File:                     F_V0MLEEipI6idbPoqPLO_wvElg.mft (raw, json)
Hash identifier:          q5CnaaqmkFm2W1ZYceOvHVKZZDnbeH42vKbI+BnMHO8=
Subject key identifier:   7A:35:B0:FF:22:6C:DA:2B:8B:05:C0:A4:94:CB:FC:8D:41:9E:1A:8B
Authority key identifier: 17:F5:74:30:B1:04:8A:92:3A:89:D6:CF:A2:A3:CB:3B:FC:2F:12:58
Certificate issuer:       /CN=17f57430b1048a923a89d6cfa2a3cb3bfc2f1258
Certificate serial:       019ABB1A34144774BE1B37B4F075B08A3764
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F_V0MLEEipI6idbPoqPLO_wvElg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/F_V0MLEEipI6idbPoqPLO_wvElg.mft
Manifest number:          059D
Signing time:             Tue 25 Nov 2025 13:00:47 +0000
Manifest this update:     Tue 25 Nov 2025 13:00:47 +0000
Manifest next update:     Wed 26 Nov 2025 13:00:47 +0000
Files and hashes:         1: F_V0MLEEipI6idbPoqPLO_wvElg.crl (hash: jVNHo+EiYgqy0NnstwNohxclaVrC7bWjsUT8K2rDCfs=)
                          2: k4GHX5CM9ME-YpJS46totU42u_s.roa (hash: 17BXAFjVIDmItCUWC+3KOwfQrh8Ih46jiKww9JPT2jM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/F_V0MLEEipI6idbPoqPLO_wvElg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/F_V0MLEEipI6idbPoqPLO_wvElg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F_V0MLEEipI6idbPoqPLO_wvElg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Nov 2025 13:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:bb:1a:34:14:47:74:be:1b:37:b4:f0:75:b0:8a:37:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17f57430b1048a923a89d6cfa2a3cb3bfc2f1258
        Validity
            Not Before: Nov 25 13:00:47 2025 GMT
            Not After : Nov 26 13:00:47 2025 GMT
        Subject: CN=7a35b0ff226cda2b8b05c0a494cbfc8d419e1a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:73:2b:33:e3:a5:8b:46:3c:bf:30:70:02:4d:
                    10:11:68:68:48:e8:18:41:78:7e:80:0d:56:b3:74:
                    5e:92:c2:1d:36:01:11:93:63:48:92:24:f6:6e:1a:
                    e3:99:23:0e:5d:ed:5f:f9:a2:99:3b:bc:8a:e1:ba:
                    2a:2c:23:69:1c:72:0e:c2:91:1b:f1:6f:1f:b9:d6:
                    2b:4c:50:0a:af:53:67:02:9f:4a:6e:cd:e5:c8:fe:
                    ea:75:4b:c4:a9:8a:87:1e:21:0c:e3:f5:20:b2:cd:
                    cf:60:07:5a:7e:0a:a7:95:ff:e3:54:5a:2a:a5:f0:
                    41:b6:c6:12:e8:ca:ca:08:da:d5:6d:37:52:72:ad:
                    e5:b2:51:de:78:61:0c:44:eb:d8:06:bc:e2:46:de:
                    ad:70:4f:97:5c:4f:b1:54:69:6f:89:2b:d6:6f:04:
                    19:ef:0f:23:c9:62:85:14:89:23:ba:7c:4a:2d:8e:
                    f3:22:29:8b:af:14:c4:dc:bf:29:f4:31:77:76:17:
                    92:d0:0e:8d:91:db:2f:5a:90:50:2e:9b:5a:e2:91:
                    91:d5:9b:7b:0c:95:9c:8e:ea:23:f1:db:b4:b9:28:
                    90:26:40:af:4b:2e:8f:7c:4c:16:2a:c2:a7:0e:d2:
                    50:ce:40:cc:18:9e:7b:28:7f:df:e2:5d:dc:70:ca:
                    99:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:35:B0:FF:22:6C:DA:2B:8B:05:C0:A4:94:CB:FC:8D:41:9E:1A:8B
            X509v3 Authority Key Identifier:
                keyid:17:F5:74:30:B1:04:8A:92:3A:89:D6:CF:A2:A3:CB:3B:FC:2F:12:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F_V0MLEEipI6idbPoqPLO_wvElg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/F_V0MLEEipI6idbPoqPLO_wvElg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/F_V0MLEEipI6idbPoqPLO_wvElg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:4f:2c:1e:6e:1d:d2:89:41:e9:fd:4e:21:1b:42:c2:2d:14:
         70:ea:a6:d9:ee:a6:97:0a:46:4c:a2:bd:44:b2:d8:97:25:4c:
         92:c9:5b:6f:ad:4c:03:7d:c9:19:dd:4e:8e:f3:e2:9f:e2:88:
         8f:a3:ec:72:62:f8:8d:ca:3d:57:d8:18:3a:a5:fd:08:2f:b5:
         f2:e4:9e:fc:20:19:a7:f3:79:44:7d:c1:01:71:7e:d3:72:2a:
         6c:1b:de:f4:1c:e7:f3:72:ec:00:56:ee:f3:2d:5d:b6:fe:f0:
         cb:17:dc:16:3c:40:38:9b:17:56:bd:78:b6:41:77:81:63:e8:
         15:70:61:20:2a:99:6f:87:6d:90:99:9c:6c:43:2a:0d:4e:a4:
         26:0c:f3:bc:82:01:79:0f:54:c8:4a:a3:09:2a:3b:aa:09:cf:
         44:d0:19:db:7c:5e:52:57:c5:7b:02:6e:fd:e5:7b:b5:6f:a3:
         b7:b9:4a:41:56:40:99:01:3d:e7:a8:67:b2:72:18:e7:03:6d:
         ad:48:07:07:57:a5:a5:79:17:10:dc:4a:de:14:74:b0:0c:14:
         c3:72:a8:77:02:78:3e:b9:2f:a8:03:7a:7a:c5:87:e8:57:30:
         b4:88:36:3d:5e:ac:91:47:37:0a:15:05:52:cb:5e:0d:1b:5e:
         3a:55:87:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 22:45:03 2025 by rpki-client