This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
File:                     _OoI6EId8vJFx8szPudqFKiILUo.mft (raw, json)
Hash identifier:          ZBN6bvy0vAeEhV/eZetlxAYxlwGEZMSuKEmkJ4ZzSrE=
Subject key identifier:   C8:3F:8F:0B:B7:72:32:45:BC:81:F7:AF:9C:97:70:E5:86:A7:36:90
Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
Certificate issuer:       /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Certificate serial:       019B262D71D92590861BD45C2311A4175B73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
Manifest number:          177F
Signing time:             Tue 16 Dec 2025 08:01:10 +0000
Manifest this update:     Tue 16 Dec 2025 08:01:10 +0000
Manifest next update:     Wed 17 Dec 2025 08:01:10 +0000
Files and hashes:         1: 6rfSl-YG8Bpw7iFs3OGfejPmBow.roa (hash: xWZc5l9yPZ6h0RVi3qTPSak9kbYfcpqaIIv+IYE4hs0=)
                          2: RjzornIpBpWAVg31mbW6GCIn3FE.roa (hash: 1SRf58fZ7vrCHWvD/MO3Mvx+IEH2+W2jesliOPCnBDw=)
                          3: _OoI6EId8vJFx8szPudqFKiILUo.crl (hash: 5XQtqv19R+srFjEIcIn2a6Xvhnltrmm1HExM7FHOV34=)
                          4: qodg_DBnwKRycROmAU-iKcJ4abc.roa (hash: srDO/uSK7u2lQgddrt4UOUxImFrZqcKNDp2zNmpUe54=)
                          5: s7awYrhPujEu-ZRGweV7KC1XVMo.roa (hash: qDjaklj7okGt/N67lpsepn6cM5rI/Einb7VtSwhb734=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 08:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:26:2d:71:d9:25:90:86:1b:d4:5c:23:11:a4:17:5b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
        Validity
            Not Before: Dec 16 08:01:10 2025 GMT
            Not After : Dec 17 08:01:10 2025 GMT
        Subject: CN=c83f8f0bb7723245bc81f7af9c9770e586a73690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:97:c0:0d:d6:6a:6a:e9:62:38:b2:f3:35:96:
                    ac:9d:2c:b3:9b:c0:a4:99:72:5b:3c:72:73:e4:b6:
                    80:d3:a8:bc:b6:09:3c:82:ee:bb:40:74:b9:ce:7b:
                    c6:99:d9:6a:4e:c1:a9:d0:44:19:9b:db:b1:07:3c:
                    0a:d0:d9:27:89:0d:4c:e8:72:92:3d:35:8b:89:2d:
                    70:98:e5:d9:ed:22:30:c2:78:69:c5:6d:61:6a:53:
                    3e:d2:d1:31:c4:e7:1f:8f:a1:10:01:85:ee:52:4d:
                    43:83:5d:cc:26:2a:f8:c8:c6:d7:d9:4c:8b:5a:3a:
                    70:55:19:10:c7:db:e3:d0:33:bc:8c:c9:c2:6d:f9:
                    6f:f9:73:96:60:9f:f2:ae:48:64:c3:71:86:8a:cf:
                    12:6a:33:8e:2d:de:0a:36:fd:d0:22:89:3f:89:86:
                    6c:92:ff:8d:67:9f:58:47:6e:33:33:fd:25:63:13:
                    09:09:dc:ac:50:2d:f5:12:3b:d2:02:f6:0e:8f:d5:
                    a8:aa:b8:bd:43:d4:d7:0f:e7:05:f5:ef:4c:9e:93:
                    33:b9:f9:25:89:a2:43:1c:fe:9c:5c:70:13:f3:bb:
                    95:ce:8e:4e:38:68:79:56:b8:23:f2:05:0b:ee:f6:
                    36:56:2a:60:b0:2e:d3:a7:29:e3:a3:8c:ff:b3:c4:
                    bb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3F:8F:0B:B7:72:32:45:BC:81:F7:AF:9C:97:70:E5:86:A7:36:90
            X509v3 Authority Key Identifier:
                keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:cf:f5:b5:26:13:31:a7:a5:54:df:de:6f:30:60:63:44:a5:
         2d:a2:2c:3a:a0:8e:46:a1:d3:b4:51:eb:5a:0d:5b:67:54:fb:
         e3:43:a6:35:74:5e:70:28:bd:e6:5c:e1:b4:a9:75:f9:1d:0c:
         91:1a:47:b6:40:f7:e8:4c:33:79:d5:eb:e7:bf:9d:2a:68:b3:
         d9:74:b6:91:b7:90:1a:eb:cb:aa:f0:51:d6:d2:67:5b:8d:da:
         33:f4:70:29:9b:15:5f:21:63:d3:06:d9:8e:36:7e:fd:c3:d7:
         12:4f:0f:8d:88:1d:7c:97:3d:d1:07:7e:d2:a4:13:1a:ae:5b:
         02:44:02:64:a0:76:69:60:30:02:2d:64:f0:a9:ab:2a:de:61:
         37:b3:ab:c4:6e:ef:2c:b0:86:e1:5e:41:03:ce:a7:48:d5:6f:
         9c:c7:41:eb:40:8e:d8:5f:7d:11:9f:4d:b0:56:99:f2:1d:fa:
         40:79:91:27:a5:3e:07:44:02:c0:c7:83:4f:16:65:6b:5a:ec:
         08:f8:fd:ee:02:3b:c6:12:7c:1b:00:13:5c:e6:36:8a:8d:13:
         2c:f1:25:9b:26:b4:08:7c:9f:af:cf:b4:14:bc:56:b3:4b:d2:
         f1:d4:41:1c:12:7f:0a:64:c0:f6:05:05:69:62:d3:fe:99:be:
         4f:8b:76:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 13:44:55 2025 by rpki-client