This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
File:                     1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft (raw, json)
Hash identifier:          VufzGP3MgwQntxPceiVwHvxRiCLsoREI9VsRn+91du8=
Subject key identifier:   93:0A:BE:73:03:B0:9E:B3:1A:9E:E4:9A:D1:AC:AF:5A:F6:DA:FD:0D
Authority key identifier: FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
Certificate issuer:       /CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Certificate serial:       019B2B53E2FB10564C59FED2D8E3DAE9534B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
Manifest number:          1784
Signing time:             Wed 17 Dec 2025 08:01:16 +0000
Manifest this update:     Wed 17 Dec 2025 08:01:16 +0000
Manifest next update:     Thu 18 Dec 2025 08:01:16 +0000
Files and hashes:         1: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl (hash: usFXuQl3uBkceVgd/A3yX3BJ4NjwALtjGXqnlXuiOA8=)
                          2: b1EekpPHczR9SbF16iWNQ3damig.roa (hash: Fw8tFU/rOTZrNv9R1o3/Px5yWIdWmaPwzJuJsuMKmH0=)
                          3: eADzDJE6P-qH0r5TYUNn_ncYKzA.roa (hash: PxBgbfMtKG6Jth9+kbRfrbslcA+mMm5JhYaaugK0nGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 08:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2b:53:e2:fb:10:56:4c:59:fe:d2:d8:e3:da:e9:53:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
        Validity
            Not Before: Dec 17 08:01:16 2025 GMT
            Not After : Dec 18 08:01:16 2025 GMT
        Subject: CN=930abe7303b09eb31a9ee49ad1acaf5af6dafd0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:9f:84:e7:88:d6:b7:47:bb:58:e0:49:16:
                    2b:45:b8:c3:f3:31:48:32:5b:21:13:e6:b2:1b:d8:
                    d1:ac:42:37:c9:92:ff:c0:5e:fe:c4:3c:38:e2:44:
                    36:d4:ee:55:91:a5:65:dc:d6:86:e4:e9:b9:44:85:
                    0c:02:10:ef:3a:8d:b0:a9:b5:ac:09:6a:c4:ef:80:
                    19:a7:69:b3:4e:4e:9d:6c:ab:43:81:8c:98:b3:a9:
                    19:62:e6:4b:56:56:47:cd:93:e1:a3:61:54:70:aa:
                    48:81:ad:60:cf:dc:0f:be:a3:8a:72:e7:46:f7:f2:
                    20:3a:14:c6:0b:0a:9c:37:d1:64:04:ac:4b:04:5d:
                    32:ac:1d:d1:b8:9a:85:f5:73:99:55:2a:dd:15:61:
                    62:4e:00:5d:d5:cd:d9:68:35:71:00:40:c9:af:87:
                    0c:79:ff:6e:cb:36:c1:98:0b:da:a2:5a:6a:72:20:
                    30:d2:0c:a7:d9:1c:33:91:3f:7d:d1:4e:bd:8b:52:
                    a1:f1:5c:2e:f6:09:b4:52:47:b7:38:2d:be:3a:b9:
                    5a:55:1d:6c:5e:a5:4b:e1:23:af:28:5c:7d:93:9d:
                    ac:30:eb:19:7b:7b:6b:2f:52:97:0b:f9:cf:92:29:
                    4b:85:20:9a:e2:39:04:70:eb:81:36:dd:55:16:d0:
                    24:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0A:BE:73:03:B0:9E:B3:1A:9E:E4:9A:D1:AC:AF:5A:F6:DA:FD:0D
            X509v3 Authority Key Identifier:
                keyid:FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:2d:a1:5c:80:e3:dc:ba:3c:a1:d6:2b:26:20:3b:70:ac:51:
         18:f2:75:54:b7:e2:6c:94:33:43:8b:f9:2b:fe:f6:06:89:e9:
         75:3c:85:09:d6:bd:24:2d:b8:58:6b:97:f6:f8:38:26:9d:e6:
         80:b0:d2:f0:24:94:fb:e9:fe:d1:3e:17:00:e3:02:da:b1:f2:
         45:0a:da:5a:0e:14:2c:a8:83:89:1e:18:c4:e3:d1:f2:1c:0e:
         98:c8:17:1e:be:d4:68:c7:48:71:27:05:85:30:11:b8:69:f4:
         d4:bc:ae:4e:48:c3:b0:76:66:88:62:a3:56:ed:db:94:65:36:
         fb:f8:54:68:dd:24:f8:2c:de:76:ff:15:5d:b4:cb:27:58:f2:
         bc:e2:40:ef:60:d1:3c:f7:6c:d5:f9:68:68:9c:10:e6:84:81:
         17:c2:85:06:2e:28:4a:47:15:7b:1d:b3:f2:2b:f2:22:f3:30:
         57:cb:51:08:88:f9:9c:1c:5a:14:85:cf:e5:84:bf:81:cf:68:
         0c:e0:66:e8:7f:50:78:bf:00:37:b1:aa:13:54:dd:aa:9c:ff:
         6f:d3:f0:5d:24:17:3c:26:d9:db:d2:6b:f7:51:64:42:ed:16:
         63:aa:2a:6b:e9:14:9a:7a:91:43:8c:e2:ba:04:e4:4c:b4:67:
         84:4d:2b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 16:38:40 2025 by rpki-client