This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
File:                     fGlngv8SGuWm2dXPo4R5dotr8L0.mft (raw, json)
Hash identifier:          E2NjBpabi36IQizszjfz2ulTIn1iYeG37D4QexwSoYQ=
Subject key identifier:   28:3E:F1:3E:57:44:81:B4:0A:7A:E6:63:E2:1E:9A:A9:DF:1B:73:CB
Authority key identifier: 7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
Certificate issuer:       /CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Certificate serial:       019B1BE087A5B12541D2D06870E9BEAC721B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
Manifest number:          1776
Signing time:             Sun 14 Dec 2025 08:00:58 +0000
Manifest this update:     Sun 14 Dec 2025 08:00:58 +0000
Manifest next update:     Mon 15 Dec 2025 08:00:58 +0000
Files and hashes:         1: CqEll3qj27nC3RPq0fziUJlBCNs.roa (hash: ne9W9a5q+GjzbaXSyhc66nMcJYTTVJvwji8w4P/0Sl4=)
                          2: dPc9m_TH3I35OVg96ErdD-dIFxE.roa (hash: 6rEh+8XVtIQuMK//Hp1XM75izAZwXIaq6ISFlV91ktM=)
                          3: fGlngv8SGuWm2dXPo4R5dotr8L0.crl (hash: /lYTeMAI29rSYyPFOtdZjsL2xbWAtZPwJQFORt1nDPY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1b:e0:87:a5:b1:25:41:d2:d0:68:70:e9:be:ac:72:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
        Validity
            Not Before: Dec 14 08:00:58 2025 GMT
            Not After : Dec 15 08:00:58 2025 GMT
        Subject: CN=283ef13e574481b40a7ae663e21e9aa9df1b73cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9f:9f:bc:69:11:36:c3:c5:93:c8:fd:a9:e5:
                    b7:ff:03:10:e3:7b:9e:7a:94:05:08:64:d8:a1:c9:
                    72:87:d1:9f:87:44:d2:15:f3:35:ad:75:08:64:af:
                    16:b2:53:c3:55:70:bc:26:62:dd:08:d0:29:e8:0b:
                    3c:d4:eb:ab:c2:c9:54:8d:e5:24:5c:75:61:f9:d5:
                    b7:ee:bc:b4:cb:0d:d0:34:0e:ff:08:f3:3b:c6:4d:
                    95:48:98:94:49:ff:10:84:a0:58:7c:87:95:02:8d:
                    4e:1a:96:6a:f6:d2:7c:d8:ae:10:d0:f4:a0:f9:12:
                    50:89:97:78:ac:cc:ae:38:34:f8:5f:b0:46:a2:a9:
                    f4:ad:4b:87:b0:2c:0a:b5:d9:08:f5:97:6c:b4:05:
                    87:00:b8:50:98:b7:f1:b1:a8:b3:88:92:44:bc:06:
                    89:98:03:5a:45:a0:e1:3d:b9:6f:88:d4:09:d5:33:
                    dc:79:68:42:2b:47:27:c5:87:de:44:84:04:17:9d:
                    03:19:95:59:57:cc:fb:d4:33:4a:7d:9a:61:61:0d:
                    9c:fe:78:cd:34:38:5f:39:8d:87:a9:14:30:4f:6d:
                    44:6b:0d:6f:5d:41:41:6e:13:24:d5:ea:77:fb:bb:
                    94:32:f2:19:89:47:8b:3b:66:2d:e0:f9:54:89:9c:
                    9a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3E:F1:3E:57:44:81:B4:0A:7A:E6:63:E2:1E:9A:A9:DF:1B:73:CB
            X509v3 Authority Key Identifier:
                keyid:7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:17:0b:77:f1:5c:4b:b6:a4:75:79:ca:54:fc:04:86:f3:c1:
         6f:91:08:a4:a1:c4:b6:33:95:ac:ab:b1:17:4e:5d:70:5d:d7:
         e3:6c:8a:73:0a:b0:8e:81:5b:97:b9:4f:09:0a:cf:6c:12:c3:
         8f:cd:7b:76:63:fc:2d:ca:06:52:20:f4:b9:a8:38:77:fd:c6:
         ca:81:15:68:47:18:cd:0f:9c:1e:5c:7d:5a:40:a6:ab:db:7e:
         4f:7c:89:d0:d9:32:43:31:96:b1:ef:5b:36:81:56:43:fd:e3:
         fc:f4:51:0e:e7:6a:14:db:c1:51:1e:2b:7c:81:01:e7:67:99:
         ca:9b:5b:e6:da:41:08:ad:6c:fd:f1:de:9f:df:5c:09:a6:3b:
         29:f0:ce:6e:73:bc:1c:d1:39:3f:c7:c8:a9:ab:a7:4f:0d:b3:
         04:28:7f:cd:30:6e:7d:fb:f9:27:95:88:95:fe:cc:ca:e1:16:
         bc:b4:0a:d6:90:01:1c:f6:ef:97:f4:f9:0a:5e:93:f6:c5:20:
         42:86:13:ab:30:1a:e2:20:6c:31:8b:ad:5a:ca:1f:c2:d2:76:
         e8:44:f7:01:c2:11:92:f9:b4:3b:4e:41:30:05:e7:d7:9e:f3:
         85:7a:1d:de:c0:4c:43:d8:71:c8:b5:21:2c:c3:d4:6f:0e:fb:
         fb:7d:f8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 14:06:16 2025 by rpki-client