This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
File:                     Fi14JJtyG00s6M9t_PvEQiITrJ0.mft (raw, json)
Hash identifier:          iSMskficjQRZjhW4bicVdQlN09Kwm4KoDaNC/PHHSaU=
Subject key identifier:   74:26:56:FA:79:91:67:9C:CB:AD:79:01:8D:F3:D1:EF:A4:37:45:68
Authority key identifier: 16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D
Certificate issuer:       /CN=162d78249b721b4d2ce8cf6dfcfbc4422213ac9d
Certificate serial:       019AF1642B53C652849F803AD1DE141A3A99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
Manifest number:          1760
Signing time:             Sat 06 Dec 2025 02:01:04 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:04 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:04 +0000
Files and hashes:         1: Fi14JJtyG00s6M9t_PvEQiITrJ0.crl (hash: Doih2UReVzX2FI2IouhFHnumS4OOf65Rh4J5a+4sOYY=)
                          2: vYN3fYbPSffdlZL2ecCWPRuF_iU.roa (hash: f7zca1Xa7343zBsVvDmSCYRZch2YTDhkeKKqt6AwzpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:2b:53:c6:52:84:9f:80:3a:d1:de:14:1a:3a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162d78249b721b4d2ce8cf6dfcfbc4422213ac9d
        Validity
            Not Before: Dec  6 02:01:04 2025 GMT
            Not After : Dec  7 02:01:04 2025 GMT
        Subject: CN=742656fa7991679ccbad79018df3d1efa4374568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:f3:0d:c8:bc:2c:fd:f9:4e:d3:f7:7a:cc:
                    47:e8:f1:51:24:cd:83:6c:8d:1a:c2:30:c7:b7:75:
                    70:88:a9:ec:c9:1e:6e:a6:02:1b:43:d0:0e:c5:0d:
                    2c:d0:aa:a7:1d:66:44:2e:93:df:7d:7f:be:4f:d4:
                    5f:53:9b:d6:b3:74:df:1a:08:59:5a:6e:ad:33:a3:
                    df:58:50:6b:33:ae:a5:3d:d1:50:20:ff:ef:43:b2:
                    e8:d9:a7:92:a2:97:ec:c8:1c:d7:96:84:33:aa:13:
                    6c:01:df:2d:2a:d1:6e:ec:f3:2f:87:97:c3:13:0b:
                    48:45:10:fb:63:9f:16:c5:38:5a:fe:c2:a1:24:ae:
                    f6:7a:f1:96:f5:aa:ba:bb:30:1c:f4:0d:19:9c:19:
                    ce:22:2d:39:37:03:b5:30:f9:dc:68:37:be:e5:1c:
                    39:82:b1:a0:bd:69:04:f4:28:8a:b4:4e:28:ae:43:
                    64:9f:59:92:4b:d3:3e:9f:51:03:69:9f:06:3c:b5:
                    6e:d7:4a:83:5d:08:20:f5:3d:39:d8:a6:7b:a7:17:
                    f1:3a:04:8e:cc:99:47:20:f1:2d:47:10:2b:4a:f4:
                    12:e5:c8:b1:ce:2b:d3:c7:7a:6d:5e:38:0b:c0:d2:
                    96:5c:d2:49:2c:2f:99:bb:5e:4c:60:0b:5f:55:ed:
                    ab:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:26:56:FA:79:91:67:9C:CB:AD:79:01:8D:F3:D1:EF:A4:37:45:68
            X509v3 Authority Key Identifier:
                keyid:16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:93:10:b6:63:4d:d7:f5:e4:30:aa:90:b8:1a:65:01:ad:4a:
         f3:68:c6:52:12:2a:91:2e:05:3d:24:d6:ed:4d:45:fb:d2:5a:
         e4:08:1e:47:c0:5b:67:d8:73:27:0e:32:7a:d4:6b:ed:f1:b9:
         6b:68:7a:2f:76:9f:08:2d:63:56:08:de:cc:8b:8c:ff:f7:7e:
         f5:89:9e:3b:00:83:60:95:57:9d:32:ce:7f:5f:c5:0c:ed:f3:
         d8:f6:34:a6:92:90:70:17:34:d3:be:83:32:b3:12:c1:7d:2d:
         9c:1c:4a:50:5d:2d:d1:ab:7f:31:64:75:83:66:13:45:b7:13:
         86:3b:cc:0c:98:dd:81:5f:93:6b:eb:ba:6b:d0:f8:2e:79:92:
         f0:04:ae:1d:39:73:bf:2d:b7:b9:14:34:1e:89:ce:4d:dc:ab:
         62:f6:0e:72:75:f9:ac:95:01:a9:b6:13:d7:a0:ba:ac:22:f4:
         2c:bd:04:4a:d4:ea:47:39:fb:0a:44:ce:7f:d6:b7:d4:1c:d8:
         7e:2f:02:3e:0c:70:ce:2d:44:72:78:0a:2f:98:af:83:59:96:
         7b:eb:5c:76:26:08:a9:b0:40:69:70:77:17:b5:30:a7:17:c1:
         64:0b:77:4c:64:b6:63:01:35:c5:78:43:4a:65:fa:26:6b:72:
         d1:9d:b7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:39:08 2025 by rpki-client