This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.mft
File:                     7BZ7trBh__pindKoTM99tExxo1E.mft (raw, json)
Hash identifier:          Hiz2jnIQmHQVqszgisckQQWY9otHjYqlClwdlrXKNRc=
Subject key identifier:   84:F4:70:B1:AD:E2:2E:DD:D9:E6:37:AA:14:FA:33:98:CF:42:12:51
Authority key identifier: EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51
Certificate issuer:       /CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
Certificate serial:       019B3CB4DA493EC2E8C7FB17356EDAFF2B3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.mft
Manifest number:          1789
Signing time:             Sat 20 Dec 2025 17:00:43 +0000
Manifest this update:     Sat 20 Dec 2025 17:00:43 +0000
Manifest next update:     Sun 21 Dec 2025 17:00:43 +0000
Files and hashes:         1: 3gdjx6-jXCWlE99Kf_MNliJ4_3o.roa (hash: VzMyOOl9cEYPtCPqPtsMwQYZihpi1TJveh2D21Agtjw=)
                          2: 7BZ7trBh__pindKoTM99tExxo1E.crl (hash: FHKwGHXy6dEv+3iRsZLWMDht6G3vLktFOV27+qkIVXk=)
                          3: eMXlE66gMRsDFMLRrkzGyL9uy6I.roa (hash: 7g7g30yz/1pDKwuKxy4CYQAz4mI13ODOfpJW3kKSKA4=)
                          4: zP7I_99KOzw-K2C5FfXk3yHXz-w.roa (hash: T5aWKttVvr+9VLqxXTSB6NNBr8xz1g39FEsAQB4Qzc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:b4:da:49:3e:c2:e8:c7:fb:17:35:6e:da:ff:2b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
        Validity
            Not Before: Dec 20 17:00:43 2025 GMT
            Not After : Dec 21 17:00:43 2025 GMT
        Subject: CN=84f470b1ade22eddd9e637aa14fa3398cf421251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:27:48:51:af:61:97:ec:73:71:cb:14:72:01:
                    80:ab:ea:2d:f6:2a:f4:ee:b3:15:3c:49:46:da:16:
                    c3:b4:d2:86:b6:b3:25:90:01:ea:66:56:00:41:70:
                    dc:27:d3:3e:b5:19:44:dd:5a:31:37:b1:25:ce:84:
                    75:67:24:df:8a:8d:ff:07:65:02:75:35:2b:8f:20:
                    40:6d:5c:e9:53:c7:b3:cf:ba:07:10:ca:b2:4b:1c:
                    b8:e9:70:be:d7:5f:6d:df:96:0f:49:ef:3d:30:e1:
                    cb:79:d1:f2:ad:23:da:29:6f:89:ff:24:09:a8:df:
                    b7:36:19:d4:0e:57:e5:3b:b2:8d:30:31:6f:31:6d:
                    d0:f5:0b:96:ed:ae:6b:80:a8:33:a5:c5:ae:47:58:
                    d1:1f:87:a4:91:7c:93:05:c9:7c:54:6f:d4:12:a9:
                    26:1a:e3:59:eb:a6:a0:2f:1a:3c:c2:39:ee:d6:26:
                    cc:27:86:c3:0d:2e:76:a3:23:75:3a:af:6b:58:82:
                    56:0a:62:55:03:27:ec:f8:63:5a:17:8b:93:46:ea:
                    36:bc:51:75:1b:46:a2:a9:ef:f4:fd:54:74:e3:f7:
                    87:ff:38:c8:4e:00:c1:d9:44:cd:a7:c6:d3:a3:c5:
                    90:95:bf:7c:d9:77:c4:f4:87:f9:64:0b:2a:66:07:
                    f0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F4:70:B1:AD:E2:2E:DD:D9:E6:37:AA:14:FA:33:98:CF:42:12:51
            X509v3 Authority Key Identifier:
                keyid:EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:50:f8:ed:01:5a:fa:c2:15:6c:bc:eb:12:b3:86:78:a9:a3:
         f9:c5:5f:44:a3:7a:78:1c:da:ff:e1:0e:3f:a7:8b:e8:74:b3:
         cf:12:be:ab:d6:f2:3a:f1:91:9f:14:0f:50:b4:b6:ee:ed:3f:
         2f:cb:8b:75:49:ad:d6:80:15:ca:21:ec:a5:ff:d0:a8:cf:15:
         31:83:1a:69:51:48:08:e5:8e:a7:77:59:8b:01:c6:78:26:72:
         04:90:4d:24:58:21:3b:60:88:ed:34:cb:eb:ae:60:3f:0e:0a:
         b8:1f:7c:1f:0c:98:f0:c7:dc:46:9d:7b:e4:e3:ab:55:f8:88:
         d8:b6:ee:f0:b5:07:f2:18:4f:1f:58:c3:f3:59:37:0b:94:d7:
         c4:fa:31:34:10:c2:da:7c:a7:f2:41:95:b7:44:3f:cd:15:2b:
         01:54:18:41:da:fe:f8:c6:77:c7:15:4c:55:7a:5f:da:6d:b4:
         b5:0d:d2:56:95:40:ae:b6:ba:e1:c3:51:2a:59:20:3d:5c:ab:
         42:4f:6c:01:17:f8:77:c8:8c:7d:9b:0b:c5:8d:74:4b:a5:27:
         81:23:1c:b4:b6:9d:2c:7c:42:a2:4a:b3:26:24:f6:65:e8:a6:
         99:e6:68:d3:a2:e4:03:97:0b:5d:99:22:2d:2f:9f:3e:e5:ad:
         3b:bf:48:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:20:28 2025 by rpki-client