This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
File:                     7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft (raw, json)
Hash identifier:          sLX5xOrYuJdUyMvYqa4jn4YIIKZ0XkLd0wXhcTV+ruI=
Subject key identifier:   1E:A2:70:FE:DD:E5:51:87:D5:46:BE:D9:7E:0B:E7:F0:E7:27:5E:E1
Authority key identifier: EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32
Certificate issuer:       /CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32
Certificate serial:       019B578776D7570DA7371FF2799C60129EAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
Manifest number:          179A
Signing time:             Thu 25 Dec 2025 22:00:54 +0000
Manifest this update:     Thu 25 Dec 2025 22:00:54 +0000
Manifest next update:     Fri 26 Dec 2025 22:00:54 +0000
Files and hashes:         1: 7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl (hash: UZMg6UEjEr5qwEE/LDbFfZ0bBV7Y1sH//L8DwQCBNrQ=)
                          2: DPoR4kUwvFP364mIcuQBwqN8-tI.roa (hash: J6AqobDr9MA8WdK/mv+gGWZFgHJa5YpnU/YQyBKG/no=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:57:87:76:d7:57:0d:a7:37:1f:f2:79:9c:60:12:9e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32
        Validity
            Not Before: Dec 25 22:00:54 2025 GMT
            Not After : Dec 26 22:00:54 2025 GMT
        Subject: CN=1ea270fedde55187d546bed97e0be7f0e7275ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:de:36:2e:68:33:ed:19:b6:74:bf:22:c9:a5:
                    fc:da:7b:34:fe:2f:90:47:e6:a9:f1:1c:ab:4b:90:
                    e3:d2:b7:a6:ea:e8:7a:3b:9f:eb:48:a5:6f:7b:08:
                    de:96:1d:55:58:58:ba:10:a3:93:09:49:56:c7:06:
                    dd:a3:c8:8a:63:85:13:76:cb:f1:77:b1:e7:a9:41:
                    a0:e1:e6:f3:f4:4f:a9:ed:ab:bd:a5:81:10:12:1f:
                    d0:cb:8e:dd:e5:eb:bd:b7:f2:d0:55:31:18:89:bd:
                    8a:bc:e2:55:ac:bc:0a:2c:7b:e5:e9:b9:bb:d3:34:
                    f5:44:38:60:fe:1c:eb:77:6a:66:25:40:6a:9a:42:
                    75:7d:93:6b:f8:79:2a:eb:45:63:03:e2:b0:6b:a0:
                    a4:47:ba:f6:65:f1:3f:8d:a0:9c:e7:37:a1:08:6a:
                    99:dc:e3:6f:fa:f3:e0:86:a8:cd:5c:7b:25:46:0e:
                    af:fb:fb:01:ec:d0:10:50:63:35:9e:cc:26:58:18:
                    5e:4a:dc:ed:84:12:d2:91:f9:31:d8:58:ec:75:8f:
                    aa:0a:aa:b7:f7:ed:c8:51:cb:52:8d:51:38:c7:8d:
                    31:37:c7:5b:f8:b0:76:51:1b:8f:cf:cf:e0:84:14:
                    35:73:cc:1f:e4:24:6a:a3:a7:58:da:31:3d:08:50:
                    da:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A2:70:FE:DD:E5:51:87:D5:46:BE:D9:7E:0B:E7:F0:E7:27:5E:E1
            X509v3 Authority Key Identifier:
                keyid:EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:9f:c7:0f:c6:ec:ec:e1:ac:ed:8c:33:ae:20:99:a6:0b:6c:
         2a:6d:7a:a8:9f:08:50:1d:a8:80:31:f3:d6:f2:83:0c:20:b4:
         44:86:03:69:84:e5:16:69:dc:42:99:41:54:33:8f:3d:b7:76:
         34:97:33:b9:96:1d:6d:d4:ea:47:cc:1f:83:3f:49:01:9d:b3:
         fe:c8:3a:b2:1e:df:6b:26:39:85:d5:4e:a6:95:55:71:f8:5f:
         9f:35:17:b4:ff:75:34:8e:ba:35:09:e2:fd:4b:7a:e3:14:e4:
         52:7a:d7:79:3a:e6:b3:3a:23:3c:32:6a:eb:9a:b1:4e:65:ef:
         b7:f3:6e:e2:53:a6:70:d4:bd:d4:16:ef:fc:17:63:c7:96:29:
         1d:cc:c6:c4:64:a0:b5:57:ac:a3:a0:d0:77:11:5a:5f:d7:34:
         14:ec:cf:fb:2d:69:f4:30:f2:fb:bd:28:d0:39:dd:28:2c:df:
         a6:85:84:e1:8e:8c:92:1b:25:cf:8f:4c:33:07:7b:34:a9:94:
         b7:a8:cb:a3:10:a0:b2:72:4f:79:2a:f0:b2:10:d1:da:e1:bf:
         85:67:7d:fc:0b:e8:48:45:86:ae:56:e1:e5:6e:84:60:0c:c9:
         b7:13:e8:b5:09:55:4c:50:b0:c2:0e:df:f2:ec:cd:12:29:19:
         fa:8b:a6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 04:51:19 2025 by rpki-client