This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft
File:                     1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft (raw, json)
Hash identifier:          +AI6PlF8CmvFcSACTAoXPjMGGsRCmDFhH59xhU99MxQ=
Subject key identifier:   42:ED:CB:41:52:B6:6B:1E:F5:2C:DB:10:F7:4F:4E:E7:69:8B:C5:03
Authority key identifier: FB:BE:33:C8:D1:8E:53:BF:D2:48:22:09:8D:C7:48:64:05:50:C5:04
Certificate issuer:       /CN=fbbe33c8d18e53bfd24822098dc748640550c504
Certificate serial:       019B2BF8F23FD41041CAE82BECED381751F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft
Manifest number:          172F
Signing time:             Wed 17 Dec 2025 11:01:33 +0000
Manifest this update:     Wed 17 Dec 2025 11:01:33 +0000
Manifest next update:     Thu 18 Dec 2025 11:01:33 +0000
Files and hashes:         1: 1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl (hash: bzS3bAQ9YSRTk44zOpI79LuO26gKrbYq0K4jWOT/TvQ=)
                          2: 1LPXXVcn8YcrOhINi57GGnN80Vc.roa (hash: EuzggDd0CDcAYZ0FKfuRQi6JcLt5k3MGrLBckBR8HEg=)
                          3: Rxqhs05VJgswf5IagYYVduWK4dw.roa (hash: 9jWiYjM3BCeOeN51O2+mgMeypqqwXkFllajBFOOYBzI=)
                          4: XavjocBFIutlJdfL1sKuNImyrMg.roa (hash: oh/q69e5+eXgvcKp0NEmx4+imfE5MSwLrZ5wZjvugUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2b:f8:f2:3f:d4:10:41:ca:e8:2b:ec:ed:38:17:51:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbbe33c8d18e53bfd24822098dc748640550c504
        Validity
            Not Before: Dec 17 11:01:33 2025 GMT
            Not After : Dec 18 11:01:33 2025 GMT
        Subject: CN=42edcb4152b66b1ef52cdb10f74f4ee7698bc503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:06:fd:15:43:5b:9d:d4:4e:df:a9:aa:1c:9b:
                    bf:c1:5d:18:ba:71:bb:c2:85:b3:72:5e:e4:d6:44:
                    ac:24:f2:66:61:b0:74:14:0e:15:4b:06:60:ca:6d:
                    85:27:25:80:76:ca:f5:4b:88:83:00:91:f0:25:b0:
                    64:43:2e:9b:fb:b5:02:41:cf:6a:d7:37:48:98:68:
                    da:db:6d:71:6e:3f:45:ad:52:59:6c:a0:1c:3a:a8:
                    6c:e0:45:b8:5d:20:6c:9b:ba:4e:c1:88:6a:5b:2e:
                    56:46:66:93:c4:8c:f2:77:f7:64:53:d2:b8:24:4c:
                    8d:69:a8:15:5f:8f:fd:4c:29:a2:83:0e:7d:86:90:
                    52:45:f9:bb:4a:58:10:b8:8f:3f:df:ab:79:10:58:
                    2a:56:2c:26:a3:35:25:41:3b:b6:6e:ae:54:21:3b:
                    b1:e9:6c:f7:75:3a:78:e3:c8:e1:f8:34:df:40:b4:
                    70:86:6e:40:1a:e8:52:73:b2:e3:7e:12:cb:08:ec:
                    91:60:0c:da:95:07:cc:fe:91:72:fd:48:98:73:ce:
                    07:c8:48:e5:6a:a3:da:cd:a8:bd:e5:b9:33:9d:50:
                    f6:89:36:f5:a2:a8:d5:41:95:a5:f8:4e:46:eb:85:
                    b5:db:c9:33:77:7f:a8:eb:3b:c9:cd:39:ce:ec:f8:
                    d4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:ED:CB:41:52:B6:6B:1E:F5:2C:DB:10:F7:4F:4E:E7:69:8B:C5:03
            X509v3 Authority Key Identifier:
                keyid:FB:BE:33:C8:D1:8E:53:BF:D2:48:22:09:8D:C7:48:64:05:50:C5:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:2a:93:32:6d:6e:ea:3e:ea:ae:9c:f8:65:43:09:b4:8a:58:
         fa:5e:10:1e:e7:29:99:fa:73:e8:74:33:ea:72:03:d3:b2:fe:
         5b:4c:a6:17:3a:98:f9:d2:e4:4b:50:97:dc:22:b1:21:d2:fa:
         4c:ff:3b:cc:ff:c6:ce:6b:d3:f8:89:b0:2f:b9:d5:43:c8:c2:
         cd:fe:d5:80:a8:bd:87:93:1a:96:73:c5:40:86:a3:c1:9b:9a:
         22:f7:e9:19:aa:40:88:48:53:e0:57:19:6b:25:4f:20:dc:53:
         e6:c3:c9:28:2e:30:a6:45:a5:ce:a1:bc:8d:c1:2b:68:14:e3:
         e1:38:66:9f:db:1c:77:29:2f:25:f1:32:04:e9:86:1b:5d:b5:
         ea:df:73:a2:4a:01:ae:e2:db:f3:6e:59:cf:89:de:2e:b3:68:
         b6:93:02:a4:37:db:8a:66:ae:6c:41:5c:f8:15:ed:0c:ab:b2:
         2f:6b:bd:e6:d0:a3:ed:e6:7c:28:66:3f:4d:20:41:1a:a7:0d:
         6e:7a:b2:1a:2a:5a:44:2f:fc:75:03:e3:38:14:61:4e:0b:83:
         dc:d0:0b:b6:cc:19:4c:35:dd:fb:05:a0:13:e8:6f:4b:f4:df:
         2b:3c:e8:f0:c7:c6:70:d1:54:e8:f7:f0:64:69:99:25:d4:04:
         ab:58:60:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:02:13 2025 by rpki-client