This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
File:                     1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft (raw, json)
Hash identifier:          sHBA6tC1izYqTQHITseNYhI+iUICSiBU7cFEy4N63VU=
Subject key identifier:   FC:88:9D:14:85:43:C1:B6:B5:DD:D0:87:6B:0D:42:B5:98:06:DD:2E
Authority key identifier: D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F
Certificate issuer:       /CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
Certificate serial:       019AF389F7350158AA14F9674FB458789593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 12:01:36 +0000
Manifest this update:     Sat 06 Dec 2025 12:01:36 +0000
Manifest next update:     Sun 07 Dec 2025 12:01:36 +0000
Files and hashes:         1: 1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl (hash: ovaiinK5NNGT/1R6FtI6Zp64YsN9dLvkPR59cGhkZ38=)
                          2: DEgfILmdqt9WOK0Ss2u9swrxwIQ.roa (hash: CPWB4WNXgBrN2XbsNeobPvgMpGNxH4sIm1wHWj5pBrM=)
                          3: Ow9-1popY8awsgXf2GNA95SUDT0.roa (hash: VV75kE6L9UJcAH7/vX99k0BbRR6uwoTqG3wp/AEMXlA=)
                          4: qFWMItDWl1Jum13M8uyWAtZgPxI.roa (hash: ulclJf7s+eMnTN7KGqSCmRwy1emYo05IB8k/ir7oKts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:89:f7:35:01:58:aa:14:f9:67:4f:b4:58:78:95:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
        Validity
            Not Before: Dec  6 12:01:36 2025 GMT
            Not After : Dec  7 12:01:36 2025 GMT
        Subject: CN=fc889d148543c1b6b5ddd0876b0d42b59806dd2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:16:56:88:cd:41:a5:1e:03:e3:2e:ad:f1:54:
                    98:66:54:7a:41:cc:ff:dc:74:64:b0:97:fe:7a:72:
                    2a:98:ca:95:02:ba:7b:a8:39:4e:a2:85:bc:ee:9b:
                    78:f7:89:92:31:ff:52:8a:f6:60:7c:c5:d3:73:a1:
                    6d:7b:47:2f:7b:5b:07:c9:76:85:c3:64:dd:05:35:
                    c3:b6:f2:e2:0f:82:a9:7c:28:18:a0:b8:45:c9:db:
                    54:bf:7b:61:f4:3f:f3:58:3a:db:3c:5a:8f:48:78:
                    80:08:df:a6:c5:45:21:75:c6:63:85:97:c2:c1:8b:
                    5e:f3:58:9a:73:91:ba:b6:bd:ae:b6:ec:0a:e9:39:
                    6e:8e:ed:b4:9b:5f:df:a7:d1:88:2d:9f:3e:23:ac:
                    d0:d5:38:5c:4e:97:f7:00:2b:3f:a8:5e:63:d1:c3:
                    a3:75:a8:92:67:1c:29:21:8c:8b:41:0a:e8:5a:88:
                    0a:b7:dd:3c:ca:97:47:69:66:bd:d0:f5:36:e9:bf:
                    de:2b:24:96:7c:0f:5e:01:fd:8d:cc:c6:dc:54:37:
                    5c:96:f5:1d:cc:ad:df:c5:68:f9:50:fa:93:10:a7:
                    e0:d9:03:54:bb:77:78:95:5d:a9:4b:96:7c:44:25:
                    e3:b1:b6:5a:cf:86:46:68:ba:ab:b8:77:28:8f:82:
                    d4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:88:9D:14:85:43:C1:B6:B5:DD:D0:87:6B:0D:42:B5:98:06:DD:2E
            X509v3 Authority Key Identifier:
                keyid:D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:bb:10:c8:3f:ac:89:48:9f:e4:04:2c:92:82:6c:8c:c4:fe:
         14:de:95:4e:4f:72:4b:12:cc:a3:37:32:7b:22:61:11:35:76:
         f6:47:92:70:af:94:54:a7:5c:21:c4:8b:6b:83:41:f4:bd:b6:
         3c:8a:d7:78:6f:fe:7a:9c:52:7a:a4:8f:e7:d2:6d:39:ad:89:
         3e:f3:e0:2a:98:10:98:b5:7e:b5:5d:43:a9:ff:f7:8e:f1:29:
         ce:85:aa:d7:89:45:3e:cc:b9:86:3e:d1:97:3f:24:5f:35:fd:
         6f:6b:40:a5:3f:f0:2a:c2:95:40:66:9a:cc:34:19:3b:09:cd:
         d6:7e:43:5b:a8:b4:ff:f0:4c:57:60:b9:04:91:be:01:8a:8f:
         37:9e:f7:04:fe:2d:a9:ac:b7:00:a2:7a:71:7b:d8:0d:b8:d7:
         ee:95:7a:59:2e:6b:42:98:42:57:95:02:06:4e:c6:01:e3:2d:
         f1:a6:3b:54:c0:6c:31:1d:4d:62:52:5f:ac:f0:4c:8c:ea:5f:
         44:9a:ca:34:38:f7:bb:04:e6:4e:c4:fd:95:71:0c:e8:3a:f7:
         53:14:7b:e7:b9:0a:90:e7:6e:a6:7f:eb:9c:71:b7:37:34:63:
         6c:ca:72:a8:5d:a8:17:77:39:5a:69:eb:40:98:d3:20:b0:93:
         7b:c6:82:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:17:38 2025 by rpki-client