This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
File:                     1-3nCbzFXU0UVnIQO0nioeKklZhU.mft (raw, json)
Hash identifier:          8fOm3fP9itwTab7SaxcaopwcILX8ijDqW05b8HMFyy8=
Subject key identifier:   B2:E9:01:F6:83:F2:F3:46:31:99:BC:7F:21:F1:50:B1:84:6D:E5:80
Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
Certificate issuer:       /CN=fb79c26f31575345159c840ed278a878a9256615
Certificate serial:       019AF12DC9696C99C1A9EF6AC10302F9F003
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
Manifest number:          1769
Signing time:             Sat 06 Dec 2025 01:01:40 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:40 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:40 +0000
Files and hashes:         1: 1-3nCbzFXU0UVnIQO0nioeKklZhU.crl (hash: hwrMPMb4FLU5BBqB4XvXwm2gFcXI6em5Dy2YsqX037w=)
                          2: 8BMqVx4B0N35BRy2vE6yMO9RaoM.roa (hash: mitZN8wlhQ8ZKpaaPxfGKHBhDao8dPMdBIQ9VZqQD+g=)
                          3: HlfC9yfvGN7DHKK4tv23ZO2ZzTI.roa (hash: lvbBBqCHLb7K+iy+sLWnMQKI6pl/6vd+wtc46LAcd44=)
                          4: Vxlq2Z39A9F-eaPA57TXXEurwJs.roa (hash: 4xN4zUrQu99FYL0d5xYUEvVHQtyeUZcoIRVpmdGGWqo=)
                          5: wBLhap3qy1Bc5_-udfUtTUhswUE.roa (hash: yKTNsxF+At82L6AqbVZLyPnofD0bf/S3KDHdg52k6Ec=)
                          6: wytxdRZXxEWi72ICxppv0nWaK_g.roa (hash: HLAxZnhzpvrbRLPZ50VaAEF9FMDzhmk4qqTXoJRwuoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:c9:69:6c:99:c1:a9:ef:6a:c1:03:02:f9:f0:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb79c26f31575345159c840ed278a878a9256615
        Validity
            Not Before: Dec  6 01:01:40 2025 GMT
            Not After : Dec  7 01:01:40 2025 GMT
        Subject: CN=b2e901f683f2f3463199bc7f21f150b1846de580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8b:d0:7c:37:2c:c8:06:99:21:fe:12:e1:8e:
                    fe:f4:31:97:77:74:df:09:48:ec:41:85:88:d3:02:
                    56:91:16:10:f3:47:95:4b:e3:72:4d:ab:8f:0c:71:
                    a5:a5:d7:fb:f6:79:ea:e1:46:0a:cf:e3:a2:98:d6:
                    ae:28:45:68:6f:8b:79:b8:2d:e4:0f:99:57:da:71:
                    cd:d7:e1:20:1f:be:88:cf:ca:b5:a0:a1:2a:54:bb:
                    f9:27:8c:62:12:95:25:4e:8d:55:ac:a5:aa:a5:ca:
                    49:1b:d3:9f:26:05:09:95:83:dd:fb:d8:b9:82:42:
                    56:e6:92:38:93:ea:63:e6:6a:f9:be:78:31:c6:8c:
                    ca:39:ef:1d:d3:96:52:37:2e:66:ff:19:10:15:08:
                    42:fc:cb:04:4b:72:7e:6c:17:d0:88:c3:02:62:a1:
                    cd:66:dd:06:14:9d:dc:b6:59:fe:de:97:c0:a0:59:
                    ba:6b:14:b4:70:03:ad:d4:ea:0b:f9:49:77:2d:59:
                    9a:a3:6c:6c:47:3b:13:2b:8a:fd:50:77:37:d2:01:
                    c5:85:40:a6:9d:11:a5:77:d6:28:0b:08:fc:09:87:
                    dd:03:ff:77:69:d6:01:71:3c:e4:69:7c:be:e9:14:
                    e5:be:06:23:cf:8c:c2:3f:49:ca:08:77:af:6a:ee:
                    7f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E9:01:F6:83:F2:F3:46:31:99:BC:7F:21:F1:50:B1:84:6D:E5:80
            X509v3 Authority Key Identifier:
                keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:c7:ca:53:38:eb:71:76:3d:23:12:02:5f:a6:e7:94:78:17:
         15:53:1e:53:cf:c1:80:72:52:a5:15:6e:66:06:34:30:86:91:
         ce:e8:71:de:ad:cd:1c:f5:40:df:43:cb:d4:36:8d:79:5e:ef:
         46:6a:6a:c6:75:ef:12:93:cd:5a:0e:b7:16:d5:ed:d6:0f:62:
         7a:23:96:0c:a9:14:84:5b:28:97:99:f3:53:7d:cb:36:72:31:
         f7:62:bf:02:79:51:66:77:3b:23:ae:64:d3:de:82:2c:58:df:
         73:8d:b8:44:25:7e:16:c4:0a:3b:48:44:b7:05:a7:92:51:d4:
         21:39:93:95:22:90:40:aa:28:27:b2:49:1e:3b:31:e6:e3:46:
         c4:59:68:38:24:34:9f:7b:65:db:32:13:53:dc:ba:fb:46:59:
         83:84:51:b5:a7:27:df:ef:3e:5b:1e:f6:76:d4:48:7e:79:d8:
         77:4e:62:cf:18:b9:a7:73:c9:c0:95:8c:b6:0d:9e:49:4d:cb:
         6b:c9:fd:a6:23:7b:2d:2a:93:e0:59:73:20:0e:4d:79:b8:28:
         7d:a9:99:d3:b2:8c:94:73:a0:4c:f2:c0:fd:31:7a:82:37:45:
         c9:b0:51:2b:63:5e:a5:df:f8:3b:28:40:9a:18:c3:11:71:fe:
         03:c6:ae:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:14:39 2025 by rpki-client