This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
File:                     1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft (raw, json)
Hash identifier:          QII7B3eEnkhgwtLXEdSnSCOwRskTaqUT/3hsjzfQWqA=
Subject key identifier:   34:FB:38:E9:FF:B0:A6:BF:CF:1B:68:A5:FA:6D:87:67:D1:B3:3D:B3
Authority key identifier: FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF
Certificate issuer:       /CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf
Certificate serial:       019AF19B55BF34C8E0BF6912882FECE8A1E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 03:01:20 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:20 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:20 +0000
Files and hashes:         1: 1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl (hash: 2nWgoS4JbQWjj8/vE/IUCm2bI3G2QPqRxbrzKDA2Bm4=)
                          2: 1-O3-eEOj4WNMKkx6AjJ5BztCQfA.roa (hash: 3XCfpEftkyfw/udAWZHLu6olWarQDCfoueNYZe4wmqM=)
                          3: g9Xis0X9LNCOyDX1kA4xgId4bUU.roa (hash: eAC0STaybazrwMkwNWuW4cD5J/cTK9sETsg7k83JaD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:55:bf:34:c8:e0:bf:69:12:88:2f:ec:e8:a1:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf
        Validity
            Not Before: Dec  6 03:01:20 2025 GMT
            Not After : Dec  7 03:01:20 2025 GMT
        Subject: CN=34fb38e9ffb0a6bfcf1b68a5fa6d8767d1b33db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:31:de:41:e2:88:cc:a9:e2:9b:56:42:ef:aa:
                    9f:29:fc:62:5c:63:39:07:74:b7:33:a2:50:c5:13:
                    b4:c9:1d:d1:57:94:b6:d5:ce:02:99:6a:7c:79:d2:
                    22:96:a9:d6:e7:7a:f5:0c:8d:cf:0e:9b:2d:79:cb:
                    8a:3d:6c:26:af:f5:56:f4:6a:c6:de:c6:f0:76:01:
                    78:c4:e3:50:10:66:0e:29:a8:02:77:de:b0:16:89:
                    ed:ba:bf:90:ba:49:a7:0b:5e:e1:cb:22:b8:64:84:
                    88:d2:8f:9a:21:d0:8c:63:4b:aa:92:26:db:62:36:
                    c0:68:23:02:27:c2:20:58:44:aa:a1:83:61:7a:f2:
                    78:0f:ec:c4:fa:36:72:2b:0d:db:78:34:d3:ea:52:
                    ee:e8:e0:60:3c:51:5a:bd:6e:2e:d9:2e:ba:7a:7c:
                    58:1b:e8:72:c2:69:b5:54:87:cf:25:2f:d2:a9:d8:
                    a0:08:2e:55:9a:d1:53:72:62:fe:4f:6e:44:41:20:
                    44:44:cc:c4:ca:fc:86:90:19:76:de:3b:c4:53:4d:
                    38:ee:bb:85:0f:29:a8:03:3f:44:e8:30:af:32:87:
                    ae:10:a3:98:30:f7:81:5a:4c:fe:34:54:89:a5:fc:
                    12:0d:44:1f:00:03:e9:f1:c6:82:3a:e0:03:7c:11:
                    df:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FB:38:E9:FF:B0:A6:BF:CF:1B:68:A5:FA:6D:87:67:D1:B3:3D:B3
            X509v3 Authority Key Identifier:
                keyid:FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:89:94:a5:1b:ef:10:08:f4:2e:e3:ea:7b:d8:d3:93:a4:bd:
         c4:84:b7:23:cd:16:5b:bf:5b:52:81:50:61:62:88:9f:4f:dc:
         9c:21:e7:51:e9:4a:7c:0b:29:2c:b7:5f:07:e9:15:e6:77:4f:
         af:1b:08:1c:2f:8d:ef:dc:7c:de:cd:c0:4c:55:d9:0f:b0:b7:
         2b:2b:8c:bc:30:56:59:6e:a4:f6:66:71:96:61:0c:e8:6c:5c:
         7b:23:f8:a5:81:cf:19:31:fc:c6:d6:3b:54:55:2c:6e:c1:17:
         09:fb:0e:68:22:ee:9e:53:3b:b8:30:6c:3d:79:3d:1d:dd:04:
         c6:ac:30:1a:04:28:e2:b3:55:6f:89:85:ec:94:f0:01:d8:41:
         96:49:54:1d:25:e8:53:b0:b5:97:7b:fd:4d:98:be:fc:c1:c6:
         d4:9f:fe:a0:f6:b9:4d:ae:d2:a2:f9:d3:d3:91:5c:ab:84:2a:
         eb:45:db:cb:9a:3c:e2:64:ee:ff:0a:f1:a1:2a:0a:3b:e1:2b:
         3b:63:62:f0:2b:90:c9:65:06:20:ae:00:91:db:e1:9f:21:ef:
         95:70:4e:8a:58:f0:07:2d:19:58:45:00:ad:e7:6a:fc:01:ea:
         ad:06:90:42:61:aa:21:b8:4a:3b:b4:65:b4:e0:65:96:1e:51:
         3f:df:51:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:23:58 2025 by rpki-client