This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
File:                     n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft (raw, json)
Hash identifier:          1HjMWt1joye1WtRJ5QYs71JWyCfPeLyYiHkfmlADygw=
Subject key identifier:   2D:FC:0E:F0:1F:23:DB:4F:56:0D:EA:7D:01:5F:23:7A:FE:C2:6F:B3
Authority key identifier: 9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9
Certificate issuer:       /CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
Certificate serial:       019B4BF236AF59DED1803C01971AFF238302
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
Manifest number:          070F
Signing time:             Tue 23 Dec 2025 16:02:03 +0000
Manifest this update:     Tue 23 Dec 2025 16:02:03 +0000
Manifest next update:     Wed 24 Dec 2025 16:02:03 +0000
Files and hashes:         1: n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl (hash: i/p+Gd+hcOgG9gp+nu94R8KN1sBhMp0fyxe43Ta05R4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 15:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4b:f2:36:af:59:de:d1:80:3c:01:97:1a:ff:23:83:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
        Validity
            Not Before: Dec 23 16:02:03 2025 GMT
            Not After : Dec 24 16:02:03 2025 GMT
        Subject: CN=2dfc0ef01f23db4f560dea7d015f237afec26fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:54:1e:38:2f:06:19:e0:44:c8:6a:f9:6d:c7:
                    2e:dd:c4:4b:e8:f1:da:38:8b:88:5c:4e:7d:54:cb:
                    92:32:27:c1:bc:81:23:ac:66:4f:6d:38:56:d1:0e:
                    a9:b7:2e:ea:0e:d8:2d:ab:9c:a5:42:48:f2:ad:46:
                    dc:0f:00:41:cc:75:02:c0:f8:31:f7:36:47:b6:de:
                    85:8a:99:27:d1:2f:25:f1:f1:43:5b:40:02:bb:4f:
                    5c:ff:45:e9:bc:c7:da:8d:6f:d0:2a:a5:15:4d:c2:
                    21:54:46:ab:7c:a1:6f:02:45:5b:a8:6c:9f:1c:3d:
                    16:c4:e9:80:a8:37:c4:d8:a8:64:4d:6f:70:bb:1e:
                    f0:f6:96:95:a9:73:ff:0e:35:99:bf:7b:b0:cb:94:
                    c6:31:a0:42:78:9e:c1:8f:74:1b:44:f6:6c:67:e8:
                    0a:24:55:63:bc:e6:0e:6d:73:e8:9b:70:81:c6:7c:
                    0a:a3:2d:79:5f:99:b5:88:fb:a9:22:eb:ce:00:b4:
                    3b:48:6d:cf:ee:de:fc:87:ad:d1:09:fb:41:ef:be:
                    d8:39:2a:07:8d:f5:66:66:0a:b6:ed:55:db:e3:9e:
                    cb:9b:79:54:b5:d9:f3:9e:c1:7a:d7:b9:f4:d7:23:
                    3a:60:a9:c0:66:7d:50:f1:5b:92:35:8b:df:a0:13:
                    76:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FC:0E:F0:1F:23:DB:4F:56:0D:EA:7D:01:5F:23:7A:FE:C2:6F:B3
            X509v3 Authority Key Identifier:
                keyid:9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:fa:64:e1:de:79:75:21:b7:75:5a:d8:81:2b:24:21:7d:f1:
         7d:63:5e:b9:c6:a2:55:f4:6e:28:47:12:47:84:48:29:9b:b5:
         63:ca:c4:ec:d6:5d:71:71:e0:78:12:87:f1:54:71:a5:1d:39:
         f6:e0:14:9f:61:a2:8d:e9:01:52:77:aa:e8:37:e4:9f:4b:cd:
         12:fb:49:03:11:79:5b:06:f9:93:1f:cf:53:aa:a2:a0:2a:cd:
         90:c9:10:5f:b2:c4:4e:a7:fe:2e:7c:1e:38:95:d3:d2:65:f4:
         e5:ae:19:79:09:3d:93:e0:cb:0a:88:fa:69:b7:ac:2b:bd:ff:
         3e:c0:5f:8f:4d:ee:a5:da:3c:e1:73:b3:5e:37:1a:1d:91:4f:
         b7:2d:e7:4f:a7:3d:6a:ae:6f:d2:02:55:fa:c8:19:d3:ec:3b:
         78:69:47:d1:b3:36:a4:9c:29:f2:5f:bc:47:5b:0e:b6:3d:a9:
         41:df:54:bc:df:30:23:f4:94:0a:99:69:b8:19:c0:86:14:4c:
         52:95:79:e9:bd:ac:2c:8e:07:6a:7c:22:25:3d:97:5a:02:b1:
         38:dd:39:90:3f:63:d7:2f:7d:ac:30:f8:b5:82:8d:f8:1c:ba:
         70:4e:7f:c1:42:86:d4:ca:0d:ea:8f:52:f6:3a:d7:54:f5:2d:
         b0:42:ac:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 20:38:10 2025 by rpki-client