This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
File:                     93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft (raw, json)
Hash identifier:          LI6J0LY75E/zcFS9f/qhWN4C2oiZCe714iVf7g7StxM=
Subject key identifier:   74:0A:84:45:24:AD:28:90:DF:FE:20:1B:60:83:0F:DA:91:EB:63:F5
Authority key identifier: F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83
Certificate issuer:       /CN=f77390fc61608c01785d1a80685ae9e56a5b2583
Certificate serial:       019B44DCBD72BD7367DFA2E694DE490A319E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
Manifest number:          178C
Signing time:             Mon 22 Dec 2025 07:01:15 +0000
Manifest this update:     Mon 22 Dec 2025 07:01:15 +0000
Manifest next update:     Tue 23 Dec 2025 07:01:15 +0000
Files and hashes:         1: 93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl (hash: ++wasooWHd+70RAUHqexZy0ffU5PyPGCn+Gt03VhTqQ=)
                          2: J5xD8x8Eiwgy4zGdsrXk1K8DYiA.roa (hash: 7newoFO3EDGu7SMDbRmvP5ZCWRW7z0PexC6y00oZBYU=)
                          3: pzjmaLlAYg1GtB1-BPGxf_97w2k.roa (hash: TucPjnv7DB9fKhYA4FsUC+p2EKxC7XMfjGbXhyo7OXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 07:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:44:dc:bd:72:bd:73:67:df:a2:e6:94:de:49:0a:31:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f77390fc61608c01785d1a80685ae9e56a5b2583
        Validity
            Not Before: Dec 22 07:01:15 2025 GMT
            Not After : Dec 23 07:01:15 2025 GMT
        Subject: CN=740a844524ad2890dffe201b60830fda91eb63f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:63:33:5b:74:61:96:0a:67:7b:5d:41:66:a4:
                    49:20:04:85:5a:94:76:65:d2:d8:9f:fb:26:0c:0f:
                    de:a3:8f:30:71:30:52:42:31:d9:51:aa:b2:ef:42:
                    6d:db:90:ba:6f:f0:6b:c3:36:1d:57:35:9d:54:7f:
                    47:fd:24:a9:fb:df:3c:59:1b:97:c4:00:97:8a:88:
                    45:49:e7:86:e2:72:c5:8d:41:19:f3:e8:18:69:23:
                    09:aa:39:8d:a9:4d:c3:d6:03:5c:e3:b9:72:86:80:
                    30:41:9d:fa:78:c9:b8:89:85:ba:c0:a6:32:13:ab:
                    5d:e2:fc:90:c3:58:93:01:50:3b:f2:fc:d7:81:8a:
                    fb:49:c5:de:0c:72:9a:69:6d:0d:cb:ce:98:fd:93:
                    fb:44:da:ac:31:d9:37:dc:70:e2:d0:99:d6:09:36:
                    fc:4b:36:fa:ad:6c:94:1a:74:43:10:f9:6e:bd:4a:
                    e5:3d:75:ce:c6:09:13:f9:48:f9:b1:8a:67:ff:9d:
                    8c:30:eb:d6:14:67:6a:20:af:ee:b2:17:7b:fe:68:
                    12:b8:0f:24:88:85:89:eb:8f:08:2d:c4:b1:26:dd:
                    73:a7:4a:fd:2e:8d:13:eb:58:16:e1:92:17:b4:17:
                    0b:59:c9:95:36:e5:d6:76:c1:ef:0f:e1:51:4d:e9:
                    bd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0A:84:45:24:AD:28:90:DF:FE:20:1B:60:83:0F:DA:91:EB:63:F5
            X509v3 Authority Key Identifier:
                keyid:F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e7:ff:e4:13:e9:40:14:6e:27:4e:26:b7:52:01:40:07:8e:
         05:b0:e5:6a:57:b7:29:94:8d:13:f0:f9:e8:32:83:92:05:da:
         49:3c:f8:08:ed:46:e1:e7:e2:58:4f:4d:d5:10:c9:91:e2:c7:
         28:b5:28:a9:86:65:c2:1a:95:d7:99:8b:e5:c6:ca:8d:16:8d:
         81:8f:db:0c:8e:73:dc:25:01:c2:25:31:3d:45:67:e1:53:6e:
         28:d4:52:e0:c5:1b:b6:d0:6a:e9:11:9d:d1:56:d4:a2:b2:4a:
         0b:8e:96:01:84:b5:08:45:bb:f6:57:75:ec:b5:4f:cb:04:09:
         0e:8e:68:54:b1:e8:47:8e:73:5c:c5:f4:bf:b1:e7:72:c0:6b:
         13:2d:1a:a2:e1:14:bd:84:6c:37:4f:3b:8c:ae:06:32:7b:9b:
         0d:f4:5c:de:91:9f:0f:ea:6c:67:3b:0f:07:20:83:49:f6:6b:
         a9:11:9e:e0:14:5d:a8:62:cf:c8:49:60:46:99:91:48:0c:2c:
         b1:cf:e2:8f:25:aa:0d:33:bc:2b:74:91:37:02:17:c1:63:e1:
         bb:2a:cc:9d:46:81:0f:b1:10:50:87:99:f5:1e:ad:2a:8f:31:
         19:7e:b6:07:3a:04:1d:fd:59:10:95:c0:f1:a4:8b:2c:58:2c:
         a3:71:97:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:06:45 2025 by rpki-client