This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft
File:                     1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft (raw, json)
Hash identifier:          7NhfauPXqsIfSLZ/OA0Sq19PlVog0Ef9LSS5ndd9YuU=
Subject key identifier:   E4:DF:02:F4:FE:33:F0:AE:C4:68:CE:61:B8:98:97:03:92:0F:C8:48
Authority key identifier: F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57
Certificate issuer:       /CN=f8e826de1070d9d79daa9e415fc432613cc57e57
Certificate serial:       019B120247C97DFEE6ABC63C3E3C47710094
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft
Manifest number:          1772
Signing time:             Fri 12 Dec 2025 10:01:37 +0000
Manifest this update:     Fri 12 Dec 2025 10:01:37 +0000
Manifest next update:     Sat 13 Dec 2025 10:01:37 +0000
Files and hashes:         1: 1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl (hash: JNCSVHxy/QRJcaEtNWLOYxcn1/wfO9g6176MwzJbttM=)
                          2: HpYep1gyuglubkg27rH0_NPEYfk.roa (hash: eknsEEDWFIUmysvI1SqfOomMLn1u1uKJE0YncED6Hxo=)
                          3: P8E9Ou4g1WbTKObdDwcArgBdv5g.roa (hash: jEoo4eK/vJf03qD8uvHcjuGFNdhu1O0hJ9v27A3yEo0=)
                          4: pM8rrfbLw8gBuT9MppMBPtFFKlM.roa (hash: ioCVW6t7ze0VBB3sFaN026IrAp6OLLgUf56gkcAIXz0=)
                          5: qkEX-Kg40A3qQ2kkYyX2gfh1PGs.roa (hash: og5sz8ZyyZWxCY26JVGs9nTzuHebJDo/OXt0OqQcO4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:12:02:47:c9:7d:fe:e6:ab:c6:3c:3e:3c:47:71:00:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e826de1070d9d79daa9e415fc432613cc57e57
        Validity
            Not Before: Dec 12 10:01:37 2025 GMT
            Not After : Dec 13 10:01:37 2025 GMT
        Subject: CN=e4df02f4fe33f0aec468ce61b8989703920fc848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:57:f7:14:b3:8c:d0:ef:59:ea:10:c2:72:22:
                    f1:92:04:6e:cc:13:a1:4b:70:d2:d2:86:19:91:f2:
                    de:80:55:e4:c3:1e:f9:3a:ac:34:f2:a7:db:52:c5:
                    e1:3d:04:d2:e7:35:fd:63:77:e7:87:34:2e:37:5f:
                    63:81:c4:aa:bc:5d:f0:9f:57:7a:7c:41:5c:60:63:
                    07:5f:8d:73:31:b5:0b:66:50:03:d7:dd:ac:e1:68:
                    62:db:aa:01:f9:31:54:ef:ef:b6:22:8a:10:c6:06:
                    80:8f:19:ca:9b:27:14:c5:5b:5b:34:0c:24:22:8a:
                    61:e3:7f:c5:6d:f6:a8:28:98:59:23:7b:dc:f3:08:
                    8c:20:c1:41:ba:bb:aa:4a:0f:c9:7e:8f:f3:4c:03:
                    bc:0a:b8:a4:08:e5:de:d2:5c:c9:f6:12:89:c5:6f:
                    26:9a:55:e8:97:0a:03:c3:2c:b0:77:dd:38:cb:e0:
                    4e:c5:1c:41:13:c0:38:45:9c:68:c6:b1:83:38:93:
                    07:a3:4c:bf:55:59:a1:b5:d2:e5:71:08:e4:20:b7:
                    8d:98:85:e5:74:6d:39:e2:0e:35:ca:69:00:e2:4b:
                    91:5c:24:9b:19:02:b2:3d:80:49:d8:80:05:e9:8d:
                    aa:6f:ac:cc:b5:db:a0:a6:d0:47:9a:12:aa:25:66:
                    c7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DF:02:F4:FE:33:F0:AE:C4:68:CE:61:B8:98:97:03:92:0F:C8:48
            X509v3 Authority Key Identifier:
                keyid:F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:61:a1:f3:09:c6:3c:f9:89:de:ef:9a:29:ad:01:0e:d6:b1:
         e6:aa:90:98:f5:cc:55:2f:62:f2:04:25:1a:7c:58:ad:16:50:
         7c:74:f1:25:83:8a:3b:a5:23:e4:07:0a:17:21:64:9b:1b:24:
         4a:d2:4e:9a:33:3c:c1:80:c9:70:86:13:4f:3c:f4:29:a3:f2:
         bd:d1:9c:8c:30:30:c7:26:f3:ae:96:e0:c1:88:be:a3:c6:7a:
         56:27:d0:25:49:63:38:2a:7a:27:d9:f5:f4:6e:a6:bd:b2:5a:
         2d:34:90:ff:be:d4:84:84:31:80:3f:6b:d5:3f:08:57:4b:61:
         b1:d5:8d:39:12:eb:77:52:7b:d8:07:9c:28:5a:6c:6e:47:7e:
         f9:55:25:0f:04:c3:ad:93:ab:ab:68:5b:44:db:73:11:0d:f4:
         d8:f1:62:54:ea:9c:5e:a1:43:93:36:49:c1:48:c9:13:55:a4:
         82:1b:e2:cc:fd:41:ed:c6:ea:c5:d9:6a:f3:18:63:31:36:29:
         96:bd:6b:4b:4a:da:91:22:3a:44:20:a5:01:66:fd:d8:e3:65:
         5f:b1:3b:86:3e:7a:6c:62:75:29:43:39:a3:b3:d4:51:3a:fa:
         2d:f4:46:b6:b7:7d:c7:d8:36:32:7d:95:1a:25:f2:4d:88:dc:
         ce:94:b4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 18:10:08 2025 by rpki-client