This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
File:                     R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft (raw, json)
Hash identifier:          gC2ZOrAbYgDj9+HWuIQLkixB0pBoBsCTOHif9ALgzi4=
Subject key identifier:   8D:74:9F:C0:BA:C6:6D:46:F8:23:40:F9:50:B3:84:E0:25:41:44:D0
Authority key identifier: 47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D
Certificate issuer:       /CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
Certificate serial:       019B38A271EB8757FE1B5206BEFE1536159E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
Manifest number:          1228
Signing time:             Fri 19 Dec 2025 22:02:08 +0000
Manifest this update:     Fri 19 Dec 2025 22:02:08 +0000
Manifest next update:     Sat 20 Dec 2025 22:02:08 +0000
Files and hashes:         1: R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl (hash: x7pOOG8eSCtmobOC3njYR9WeH4w5iIoGJZuNImWnCbY=)
                          2: eHF54uKQrEeekWWH_bk3xsW-Htc.roa (hash: GCtfeaQZsRf+af6PmTpPG0z7r0Odgf6s1wYbvYbHxOo=)
                          3: ploZ02rlnfRi7ZfIa7yOIhfkagI.roa (hash: R6taM/cNraH8uQShx/CW4Jm1BZ928c9xtETqvasyMTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 17:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:a2:71:eb:87:57:fe:1b:52:06:be:fe:15:36:15:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
        Validity
            Not Before: Dec 19 22:02:08 2025 GMT
            Not After : Dec 20 22:02:08 2025 GMT
        Subject: CN=8d749fc0bac66d46f82340f950b384e0254144d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:42:93:93:f2:49:fe:52:bd:40:16:4d:42:4c:
                    c5:21:ee:a3:79:59:4b:85:36:9f:bf:33:b9:18:79:
                    7d:41:60:87:df:5c:6a:58:d9:2f:07:0d:18:e4:2f:
                    76:aa:5c:33:81:66:d2:9f:7d:fd:a2:d4:b8:e2:b2:
                    89:b1:91:63:4c:93:48:30:0c:13:25:8d:de:d5:ed:
                    ec:20:8c:23:67:65:04:23:9c:54:b7:fa:7f:5d:4d:
                    eb:a4:7d:78:a4:50:4e:8e:68:5b:3d:e7:a9:68:62:
                    01:54:cf:c4:04:08:87:f2:98:04:eb:3d:5d:27:6d:
                    ef:69:15:45:59:30:08:ca:2a:b1:bf:78:13:af:0c:
                    4f:ae:75:84:97:dd:eb:f5:fa:92:c8:c8:fd:e9:74:
                    5b:ce:c0:0e:b9:61:0c:bd:f2:40:fb:42:76:51:49:
                    b8:25:7a:45:ac:1f:43:b9:29:e0:a3:47:e3:6f:23:
                    cc:f9:86:9f:b5:4c:41:c1:ad:d7:35:c9:98:3f:78:
                    2b:ec:34:bf:b7:dc:b9:be:d6:85:40:6b:5a:8e:bf:
                    2b:62:88:51:35:ff:2d:53:df:2e:1a:af:bc:4e:e1:
                    73:1d:37:92:df:07:26:01:3f:3e:29:d1:16:dc:52:
                    f5:d4:a8:ce:de:2b:da:ea:97:3d:b4:e9:a5:41:97:
                    66:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:74:9F:C0:BA:C6:6D:46:F8:23:40:F9:50:B3:84:E0:25:41:44:D0
            X509v3 Authority Key Identifier:
                keyid:47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:bd:39:aa:ac:11:32:0d:28:c6:66:94:ff:12:07:cd:80:19:
         8f:11:ec:b2:3d:11:d8:9d:3d:bb:4a:4e:3e:a9:d1:bf:0e:15:
         05:67:41:2e:8c:16:1a:6f:bf:ce:81:dd:7d:6d:97:cd:3b:2b:
         5e:da:02:1c:88:7f:91:0d:13:77:05:f4:e8:c2:5e:a8:f5:dd:
         3b:f4:77:9f:7d:db:51:05:c2:8d:63:19:88:ba:d8:6e:50:24:
         61:ea:67:a2:1a:c7:1b:9a:fe:cf:3e:af:89:70:ac:0b:9f:05:
         05:1c:99:5c:9f:3a:68:4d:2f:66:aa:07:be:d1:e3:0a:86:5f:
         51:14:63:53:10:8c:19:f2:5b:ea:83:54:58:e2:c0:d3:b3:4a:
         9e:4c:06:d9:09:60:ec:2c:a4:ff:1f:8b:f8:e1:2d:30:49:d6:
         57:6a:89:7d:d8:70:87:50:68:1a:ea:51:d0:e6:34:a2:6c:26:
         1a:c0:c4:83:9c:25:78:a0:83:3d:93:22:ac:6e:47:8b:c2:c4:
         62:f6:aa:ba:31:b0:88:ed:57:75:5b:c4:88:ff:1a:fb:bd:79:
         e3:3b:91:71:9f:74:74:51:72:36:4b:52:e3:97:8f:d1:7a:33:
         fd:00:4a:4d:1e:52:3d:65:8f:21:c5:2f:b1:f2:25:e4:e8:47:
         89:77:c0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:29:27 2025 by rpki-client