This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
File:                     F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft (raw, json)
Hash identifier:          JJTilWubHZx83u/I+RmrCXL5s3JV7kJyRm4OqAUEe2k=
Subject key identifier:   49:DE:D6:33:D5:A8:EE:F0:B0:5C:DF:BC:EA:5B:4F:B1:2B:A0:71:AF
Authority key identifier: 17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA
Certificate issuer:       /CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
Certificate serial:       019B329EE86505801892CF4BC0CE61E838AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
Manifest number:          1795
Signing time:             Thu 18 Dec 2025 18:00:33 +0000
Manifest this update:     Thu 18 Dec 2025 18:00:33 +0000
Manifest next update:     Fri 19 Dec 2025 18:00:33 +0000
Files and hashes:         1: F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl (hash: G3VdHwkIlYvW+3plXvgDSoRuGcsC3H/8s4IO3HBhw9I=)
                          2: TVFn8SEC2xk2K9kTba56N04TXws.roa (hash: bEjcW9v0b6AFyRx1s5DtJswmBb7q38sD7gnKfblja1c=)
                          3: sT64_r4WthvCyzVyB3E-Psv_afc.roa (hash: JV3KmP839OiGVkSCgS8tVdnI3cJc0KWSQvX/RcZE/68=)
                          4: xSZmjgKKN9mMG3JDQoWyY_2tpzE.roa (hash: J/Ga6J6sfLJW3CEZ/9em1QDzAEf2XIPOwnBQgDlRhhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 18:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:32:9e:e8:65:05:80:18:92:cf:4b:c0:ce:61:e8:38:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
        Validity
            Not Before: Dec 18 18:00:33 2025 GMT
            Not After : Dec 19 18:00:33 2025 GMT
        Subject: CN=49ded633d5a8eef0b05cdfbcea5b4fb12ba071af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c9:a8:fb:dc:fb:ae:74:88:36:a7:06:0f:16:
                    dd:ee:a9:17:69:fe:a3:37:8a:07:88:af:67:b6:17:
                    74:59:b8:51:5c:28:27:4c:d2:aa:47:08:96:33:f1:
                    e7:7a:2c:dc:40:29:6c:6d:7e:e9:43:e1:e3:84:d1:
                    4c:70:39:07:f4:88:47:84:f7:03:29:50:e6:73:58:
                    e1:6b:20:3f:24:da:70:2a:1e:7e:2a:12:2e:1c:99:
                    93:78:6d:95:37:5c:1d:86:ff:dd:86:ca:e8:76:b9:
                    a7:2d:46:3e:86:88:7d:ae:a7:03:f0:f6:ab:4f:e7:
                    2a:a7:e6:d8:dc:e8:1c:62:fd:5d:b5:0a:2e:68:04:
                    98:3a:97:24:13:93:e9:9a:95:44:5f:27:64:90:78:
                    05:79:dd:d0:89:ed:cf:78:57:dc:4d:43:7d:e7:db:
                    e6:36:40:c0:23:01:79:e6:48:56:57:0f:4b:17:e3:
                    0f:35:a2:70:3c:57:9d:30:55:b7:bb:cb:c7:c9:93:
                    20:39:2c:8f:04:88:67:fc:2a:37:5f:d2:d0:78:aa:
                    10:66:df:e8:ca:e9:de:b3:cd:b9:2b:6c:60:26:4f:
                    6c:7d:6f:52:4e:22:01:44:46:1f:ab:4b:cc:c4:8d:
                    46:ee:73:01:dd:e5:7d:59:72:2f:18:6f:ef:42:4b:
                    81:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DE:D6:33:D5:A8:EE:F0:B0:5C:DF:BC:EA:5B:4F:B1:2B:A0:71:AF
            X509v3 Authority Key Identifier:
                keyid:17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a2:c2:96:79:14:f5:86:c7:e5:0d:68:84:20:fc:71:84:31:
         e9:79:0c:1d:a5:0a:39:89:ec:86:a9:01:1b:a2:17:f5:fc:cb:
         05:e9:c7:69:69:92:54:67:ff:8f:be:d5:e4:34:1e:1f:30:c2:
         69:f3:ee:30:3f:26:60:74:92:0f:26:56:8e:d9:db:27:11:b6:
         88:d7:11:5c:ad:e5:93:4e:81:3f:9a:30:b8:4f:3a:43:a5:7d:
         28:0d:6d:0f:ce:e4:df:a0:45:8d:c4:41:1a:09:9b:3f:c3:cc:
         c2:1c:70:74:46:2b:e4:a9:3c:77:bf:27:f4:38:82:15:7f:ce:
         03:c7:79:4e:6f:b3:86:e0:67:6f:bd:53:12:50:e8:c1:75:ca:
         52:26:a4:ba:58:8a:c8:2c:19:88:4c:c0:f8:65:e5:c5:13:2c:
         64:c1:b9:97:f7:54:7e:5c:58:60:5a:ec:39:c9:19:6d:9c:74:
         b1:5d:f6:74:87:5b:ea:a2:5a:04:74:13:41:4b:a5:e1:be:bf:
         fb:ee:86:a8:25:42:b2:79:01:bd:ae:48:48:50:1a:3f:b0:cd:
         6d:c5:35:8c:b3:bf:8f:88:e0:60:a8:ce:ba:1b:50:15:4e:ef:
         f0:6e:1b:fe:11:60:31:b5:58:7f:f9:e8:c5:07:18:82:ab:dc:
         1b:88:f4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:17:19 2025 by rpki-client