This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft
File:                     1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft (raw, json)
Hash identifier:          ZYdRbzYwHrvi7JtylxnZBeP+o9ojMgys0/XDw/uOynQ=
Subject key identifier:   C7:BB:60:BB:0C:63:5B:DE:57:E8:33:12:DB:13:65:90:F6:2B:3F:84
Authority key identifier: FB:BE:33:C8:D1:8E:53:BF:D2:48:22:09:8D:C7:48:64:05:50:C5:04
Certificate issuer:       /CN=fbbe33c8d18e53bfd24822098dc748640550c504
Certificate serial:       019BF2AABA422EA9D94B55F97F3CBC75E7D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft
Manifest number:          1796
Signing time:             Sun 25 Jan 2026 01:00:33 +0000
Manifest this update:     Sun 25 Jan 2026 01:00:33 +0000
Manifest next update:     Mon 26 Jan 2026 01:00:33 +0000
Files and hashes:         1: 1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl (hash: 5OUKFcgJAT3+RugPugGBW2JTEjiXDYRYsDt8aK2/Rzs=)
                          2: 5AmdeSUpr_p8lVTQmzql5yx6k_Y.roa (hash: VOpbYZwcGjq2AGhNfie6m5FSbIOir/Hw1DT1zk74eUw=)
                          3: 89HlQnFi1jjgVu3o144zm_i7MVg.roa (hash: pXOl1biYVQ4AeN4FfZGn1CbDkAfN36PG1w9KMqoPa6E=)
                          4: JzI2TwjdG1BoFH-bZaW2U6ge5C0.roa (hash: PeP61WhBh3Xm07uOWaGBiwybkJxvwEn3CCzlNFkkOVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 01:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:aa:ba:42:2e:a9:d9:4b:55:f9:7f:3c:bc:75:e7:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbbe33c8d18e53bfd24822098dc748640550c504
        Validity
            Not Before: Jan 25 01:00:33 2026 GMT
            Not After : Jan 26 01:00:33 2026 GMT
        Subject: CN=c7bb60bb0c635bde57e83312db136590f62b3f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4d:dc:cb:ed:a3:c6:de:d8:6c:b1:88:c2:d3:
                    1d:87:87:17:fa:44:3f:36:22:68:a8:73:2c:4c:f8:
                    b3:d4:ab:7f:5f:3a:5b:6d:e8:3e:0f:27:34:d1:35:
                    38:35:33:4e:79:16:06:54:a3:f6:87:08:15:45:50:
                    78:7d:84:84:33:51:0e:d9:69:9e:4b:ac:20:f3:7a:
                    dc:61:2b:29:e9:c0:7b:12:88:f1:d5:e7:64:60:13:
                    b7:28:6e:5c:ef:b4:cf:79:e2:4b:7a:82:26:2b:71:
                    2a:be:a4:b0:d6:08:76:d7:59:a1:ea:17:4b:d5:6b:
                    c2:9b:38:41:1d:b9:f8:c9:eb:a9:f2:6a:01:93:60:
                    cd:af:38:d0:8d:65:ad:b2:66:c5:9d:5d:3f:7f:7f:
                    46:0d:4f:00:d5:a6:f0:9d:fc:66:17:3d:d2:99:7c:
                    c2:8c:67:7d:50:cf:64:fb:85:c9:29:b9:aa:6d:18:
                    33:b1:74:05:35:b0:db:81:a0:dd:2b:10:0c:35:f4:
                    ef:b7:92:7d:cf:b5:15:de:50:92:a8:f6:df:36:45:
                    42:b3:c7:62:5a:56:ab:a0:7f:52:f3:cb:df:0b:43:
                    c6:37:45:d0:f7:a7:3a:e8:b1:7a:54:36:29:96:98:
                    d0:26:00:1f:8a:02:46:73:7a:4f:46:1a:a2:5a:83:
                    5d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BB:60:BB:0C:63:5B:DE:57:E8:33:12:DB:13:65:90:F6:2B:3F:84
            X509v3 Authority Key Identifier:
                keyid:FB:BE:33:C8:D1:8E:53:BF:D2:48:22:09:8D:C7:48:64:05:50:C5:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:78:f5:80:bf:a2:74:9d:6f:77:3b:50:95:81:4a:ef:f6:ff:
         ee:d3:98:48:f1:17:e6:f4:a7:17:f5:7c:42:bf:54:26:bc:be:
         59:1d:51:33:a3:6a:3c:18:95:40:34:28:12:e9:13:48:52:70:
         e3:04:2a:36:ce:20:ac:73:23:7b:4a:27:05:c8:7c:0b:55:ab:
         ed:de:20:7f:2f:50:fe:0d:ea:b7:32:f8:c0:2a:57:41:ad:9a:
         52:4d:ee:df:5c:32:8d:6a:20:83:cc:a7:a5:09:74:ba:c3:f0:
         d4:da:19:80:b6:df:56:55:40:8a:f8:31:64:06:31:ca:56:ec:
         b4:54:8d:61:7f:62:24:61:f2:b4:97:d9:26:c4:30:d3:46:e5:
         d5:3f:09:30:64:13:d5:c7:98:12:02:79:3f:85:84:03:0c:76:
         20:b1:3e:7d:ac:69:b1:70:fd:91:45:95:ef:e3:26:c6:84:4b:
         ec:7b:ec:da:16:11:17:7d:24:9e:36:6c:da:4a:10:4f:82:5e:
         b2:24:c6:2e:24:a7:8f:2f:96:31:b6:10:15:30:a9:08:52:ed:
         1b:9a:41:27:c4:b5:53:c4:e3:63:40:19:62:28:a4:dc:db:47:
         1e:6a:39:e8:15:bc:6c:01:e8:f0:06:c3:33:49:6f:21:03:8f:
         b8:8f:e1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:46:32 2026 by rpki-client