This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
File:                     7Sj1d0agBa51qPX56S99ItYcjTQ.mft (raw, json)
Hash identifier:          yC84LiQD5ewsTw2GQ3L0ZQCTkpmwZ48PbkaR9sUQiRU=
Subject key identifier:   DA:9B:18:45:13:A9:21:44:BB:7E:15:99:62:C1:B2:06:DD:3B:98:B1
Authority key identifier: ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
Certificate issuer:       /CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Certificate serial:       019B4693F5BB296226E6D0389A31747B2CE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
Manifest number:          08CB
Signing time:             Mon 22 Dec 2025 15:01:00 +0000
Manifest this update:     Mon 22 Dec 2025 15:01:00 +0000
Manifest next update:     Tue 23 Dec 2025 15:01:00 +0000
Files and hashes:         1: 7Sj1d0agBa51qPX56S99ItYcjTQ.crl (hash: btU75b8643aAnQxSNpKRSZkoJG2RNOLOU5+Ux0EhubU=)
                          2: ULNxJvM-wJGOuJON7ivPOpKjWvM.roa (hash: 4PAm04+UjI196vMzGXZVMv+MQU5u1QViV4G3soVxN0g=)
                          3: qk0RdqiwIc4Pk8WjRSXETbEeD3w.roa (hash: CT5EukhWBYETi8Vaj273DWcEqR9wWanbCPEBswUNZM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 15:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:46:93:f5:bb:29:62:26:e6:d0:38:9a:31:74:7b:2c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
        Validity
            Not Before: Dec 22 15:01:00 2025 GMT
            Not After : Dec 23 15:01:00 2025 GMT
        Subject: CN=da9b184513a92144bb7e159962c1b206dd3b98b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:db:87:47:49:bf:0a:47:bf:05:35:80:e6:c1:
                    b2:a9:7e:85:f1:7d:87:f3:7b:51:77:b8:1c:86:63:
                    ed:cb:41:d8:4a:7f:5b:22:04:97:ad:87:e2:97:a2:
                    fb:1c:1a:ff:43:1b:62:5e:32:fb:49:2e:a1:dc:e3:
                    97:82:23:ea:6e:ab:f7:a6:99:23:9a:72:fd:c3:f8:
                    2f:30:4c:c8:2b:4d:d4:f4:9f:61:5b:37:e1:97:fa:
                    f8:95:67:62:04:e3:c5:45:9c:6d:f8:1d:39:3c:af:
                    c5:d6:dc:8f:ee:cf:e7:9f:e2:9c:33:ad:24:cf:ca:
                    22:d3:fb:b3:cf:a8:ec:8f:cc:b3:83:82:21:26:16:
                    51:70:5f:ba:02:03:ed:27:73:1a:f8:2f:ec:19:99:
                    cc:fe:d8:28:64:62:c0:a4:fd:8d:e7:81:b4:82:83:
                    7c:65:47:89:d0:87:0a:6d:2a:33:80:59:82:ca:f8:
                    57:69:c8:ca:f2:61:7a:dd:89:14:b4:75:35:3f:c3:
                    a8:69:47:65:df:4b:8b:46:41:c4:c9:b1:2b:88:3a:
                    0a:86:ad:05:1e:c1:c5:38:04:d8:93:67:36:7f:d7:
                    7d:a2:26:0e:f7:1b:5f:d5:5e:66:37:2c:9e:cd:b4:
                    07:66:3d:b3:9d:69:e3:7a:28:c6:d3:e9:75:5b:b9:
                    48:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9B:18:45:13:A9:21:44:BB:7E:15:99:62:C1:B2:06:DD:3B:98:B1
            X509v3 Authority Key Identifier:
                keyid:ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:16:9d:2c:23:6b:52:ca:31:ea:0c:5c:c7:17:d7:a1:8c:fb:
         a3:76:7b:33:b0:f9:34:33:05:10:a9:52:0f:9c:97:ff:aa:d5:
         8b:10:c3:ae:90:ab:81:b2:d9:6b:80:1a:13:05:6d:c5:11:4e:
         fc:b7:da:b4:d9:af:35:02:3c:00:24:d6:41:60:8b:ea:bf:15:
         34:2d:66:e3:da:fb:c0:74:37:ba:39:da:c0:3f:9d:f1:a8:e4:
         be:06:da:af:8c:a0:41:f6:a6:5f:38:44:dd:5d:4f:6a:bc:f7:
         ef:16:33:f4:e6:34:b7:e7:8e:70:63:7b:57:95:5d:ef:08:f9:
         3e:a1:07:9f:96:54:0b:54:fa:f1:d1:a5:2b:33:0e:cd:c2:85:
         c9:1d:a6:0b:66:41:6f:19:54:6e:2b:88:e1:dd:07:87:72:b0:
         8c:78:da:00:a2:95:2a:21:d2:5c:4e:91:01:1e:20:e8:76:f9:
         32:27:75:01:85:1e:1e:48:72:04:2c:45:1f:05:4f:29:d2:58:
         de:5d:66:9a:fa:e4:02:cb:53:87:5e:d3:05:d3:f5:03:ae:3b:
         eb:d6:e7:9d:4b:33:b8:c8:6c:8b:34:0a:3f:0b:f3:e0:a4:37:
         cc:bc:47:c2:ab:61:32:3f:ad:1a:37:09:65:cf:ac:a2:4e:2e:
         58:6f:6c:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtGk/W7KWIm5tA4mjF0eyziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkMjhmNTc3NDZhMDA1YWU3NWE4ZjVmOWU5MmY3ZDIyZDYx
YzhkMzQwHhcNMjUxMjIyMTUwMTAwWhcNMjUxMjIzMTUwMTAwWjAzMTEwLwYDVQQD
EyhkYTliMTg0NTEzYTkyMTQ0YmI3ZTE1OTk2MmMxYjIwNmRkM2I5OGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuduHR0m/Cke/BTWA5sGyqX6F8X2H
83tRd7gchmPty0HYSn9bIgSXrYfil6L7HBr/QxtiXjL7SS6h3OOXgiPqbqv3ppkj
mnL9w/gvMEzIK03U9J9hWzfhl/r4lWdiBOPFRZxt+B05PK/F1tyP7s/nn+KcM60k
z8oi0/uzz6jsj8yzg4IhJhZRcF+6AgPtJ3Ma+C/sGZnM/tgoZGLApP2N54G0goN8
ZUeJ0IcKbSozgFmCyvhXacjK8mF63YkUtHU1P8OoaUdl30uLRkHEybEriDoKhq0F
HsHFOATYk2c2f9d9oiYO9xtf1V5mNyyezbQHZj2znWnjeijG0+l1W7lIzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqbGEUTqSFEu34VmWLBsgbdO5ixMB8GA1UdIwQY
MBaAFO0o9XdGoAWudaj1+ekvfSLWHI00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1NqMWQwYWdCYTUxcVBYNTZTOTlJdFljalRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83NTMyMDgtYTVhNC00YjcxLThlNzQt
YTdlYjM4ZDQ4Yzc4LzEvN1NqMWQwYWdCYTUxcVBYNTZTOTlJdFljalRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS83NTMyMDgtYTVhNC00YjcxLThlNzQtYTdlYjM4ZDQ4Yzc4
LzEvN1NqMWQwYWdCYTUxcVBYNTZTOTlJdFljalRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxadLCNr
Usox6gxcxxfXoYz7o3Z7M7D5NDMFEKlSD5yX/6rVixDDrpCrgbLZa4AaEwVtxRFO
/LfatNmvNQI8ACTWQWCL6r8VNC1m49r7wHQ3ujnawD+d8ajkvgbar4ygQfamXzhE
3V1Parz37xYz9OY0t+eOcGN7V5Vd7wj5PqEHn5ZUC1T68dGlKzMOzcKFyR2mC2ZB
bxlUbiuI4d0Hh3KwjHjaAKKVKiHSXE6RAR4g6Hb5Mid1AYUeHkhyBCxFHwVPKdJY
3l1mmvrkAstTh17TBdP1A64769bnnUszuMhsizQKPwvz4KQ3zLxHwqthMj+tGjcJ
Zc+sok4uWG9sXg==
-----END CERTIFICATE-----
Generated at Mon Dec 22 23:01:07 2025 by rpki-client