This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.mft
File:                     E07-fFQfVAbcfg_yaNBVgrrvyZY.mft (raw, json)
Hash identifier:          6EKqzrRWUInR6lE+bw0q2+wCDq369h2O1ZRJ8Yk8oiM=
Subject key identifier:   CA:7F:B9:45:9C:B6:0C:87:47:3A:C6:06:6B:A1:B7:07:55:CA:0E:19
Authority key identifier: 13:4E:FE:7C:54:1F:54:06:DC:7E:0F:F2:68:D0:55:82:BA:EF:C9:96
Certificate issuer:       /CN=134efe7c541f5406dc7e0ff268d05582baefc996
Certificate serial:       019B66FB66B503D069EE3434BEA881DC73E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.mft
Manifest number:          1003
Signing time:             Sun 28 Dec 2025 22:01:50 +0000
Manifest this update:     Sun 28 Dec 2025 22:01:50 +0000
Manifest next update:     Mon 29 Dec 2025 22:01:50 +0000
Files and hashes:         1: E07-fFQfVAbcfg_yaNBVgrrvyZY.crl (hash: asy8tirWofvaD5qjWeL09ynjUEHRPOkNPeqb054knIY=)
                          2: biqyFypLLQNkv7SioX50S6Sicvg.roa (hash: LF7o3l8/q2c8dQh0AVrayQ/2mZza3ObHjFmvPVVd/nE=)
                          3: jw4-wajYBcUB_lE5D20b-DOh7uo.roa (hash: Kv0+iJW442oWteIb5Sw1ZuADeKbhpqDku8dGA7+CQdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Dec 2025 20:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:66:fb:66:b5:03:d0:69:ee:34:34:be:a8:81:dc:73:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134efe7c541f5406dc7e0ff268d05582baefc996
        Validity
            Not Before: Dec 28 22:01:50 2025 GMT
            Not After : Dec 29 22:01:50 2025 GMT
        Subject: CN=ca7fb9459cb60c87473ac6066ba1b70755ca0e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d0:34:69:0b:39:99:d8:17:33:f1:4a:25:82:
                    d8:17:02:ea:f6:43:dd:04:6e:0c:88:cd:d9:83:3d:
                    1e:ee:40:62:f5:59:99:42:18:23:75:7b:be:37:3f:
                    1f:72:0e:7c:cc:51:de:ae:49:58:f5:8b:00:66:f5:
                    cc:74:43:c2:19:bd:f9:f8:33:2c:78:0e:e9:1b:f1:
                    48:ea:a5:6b:c0:83:16:5d:bf:de:92:60:8c:f8:68:
                    12:14:3c:aa:c0:6d:55:61:f1:6e:8b:81:90:4f:68:
                    36:90:2f:97:dd:77:68:bf:3a:37:4e:6e:84:90:da:
                    9a:de:77:e3:3b:75:35:4c:bd:c0:5d:81:a6:13:d0:
                    17:98:fb:69:8d:e3:d3:e2:7b:7a:ec:89:49:a9:dd:
                    bf:6d:ce:6c:29:d7:55:19:04:33:31:df:7e:53:0a:
                    0d:09:5e:f0:dc:37:a7:66:f5:00:e2:00:b4:a0:7a:
                    f2:64:69:61:f4:08:21:79:69:21:e2:ca:07:f7:96:
                    85:5d:5b:68:23:6c:10:08:82:20:09:62:8d:60:ad:
                    39:ec:d2:4d:bc:15:0e:4a:ce:aa:7a:d8:e8:18:8c:
                    48:c5:7f:1a:5e:f6:3d:fe:82:8f:22:3d:a0:61:5e:
                    ba:32:64:df:d6:1a:22:4d:28:aa:72:c2:9b:58:ea:
                    3e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7F:B9:45:9C:B6:0C:87:47:3A:C6:06:6B:A1:B7:07:55:CA:0E:19
            X509v3 Authority Key Identifier:
                keyid:13:4E:FE:7C:54:1F:54:06:DC:7E:0F:F2:68:D0:55:82:BA:EF:C9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:9b:1d:c8:c1:73:c7:94:04:09:05:d3:6d:c0:ea:6f:82:ef:
         b9:57:b1:ca:f4:59:2a:05:c9:8b:43:34:20:ab:de:04:39:51:
         49:d5:c9:a6:1a:37:f7:b8:69:6f:5e:6d:c5:b3:af:2f:37:2c:
         04:0d:88:83:9e:86:56:91:8a:57:1d:ba:2b:66:ec:42:a5:ca:
         21:82:29:2a:07:37:32:b5:c8:65:b2:d4:ec:89:a7:84:2f:ad:
         a3:ee:0e:96:59:78:e7:6e:1f:d6:e1:8e:83:db:f0:a6:33:a6:
         4c:28:7a:62:08:3f:e0:9d:d8:1a:b5:d4:e7:9d:8e:55:7e:43:
         e7:51:95:00:bc:69:5f:97:bb:22:95:13:b7:8c:5b:41:63:11:
         84:f2:23:ed:dc:0a:3f:cb:ae:66:aa:03:28:d8:a9:a6:c2:46:
         58:8a:dd:93:cf:01:11:37:41:69:58:ce:a3:d4:51:86:25:5f:
         41:db:47:f3:38:ea:d3:51:6d:35:55:a5:4d:8c:ef:34:9d:a7:
         cf:30:86:37:72:a8:c0:19:ba:a2:0c:db:64:e9:65:d6:03:c8:
         b5:22:df:03:25:d1:25:30:8b:97:79:41:49:01:22:97:66:b4:
         86:71:1f:05:8c:72:52:45:6a:67:ef:ee:8c:70:dc:89:61:83:
         e2:4d:3b:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtm+2a1A9Bp7jQ0vqiB3HPmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNGVmZTdjNTQxZjU0MDZkYzdlMGZmMjY4ZDA1NTgyYmFl
ZmM5OTYwHhcNMjUxMjI4MjIwMTUwWhcNMjUxMjI5MjIwMTUwWjAzMTEwLwYDVQQD
EyhjYTdmYjk0NTljYjYwYzg3NDczYWM2MDY2YmExYjcwNzU1Y2EwZTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdA0aQs5mdgXM/FKJYLYFwLq9kPd
BG4MiM3Zgz0e7kBi9VmZQhgjdXu+Nz8fcg58zFHerklY9YsAZvXMdEPCGb35+DMs
eA7pG/FI6qVrwIMWXb/ekmCM+GgSFDyqwG1VYfFui4GQT2g2kC+X3Xdovzo3Tm6E
kNqa3nfjO3U1TL3AXYGmE9AXmPtpjePT4nt67IlJqd2/bc5sKddVGQQzMd9+UwoN
CV7w3DenZvUA4gC0oHryZGlh9AgheWkh4soH95aFXVtoI2wQCIIgCWKNYK057NJN
vBUOSs6qetjoGIxIxX8aXvY9/oKPIj2gYV66MmTf1hoiTSiqcsKbWOo+oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMp/uUWctgyHRzrGBmuhtwdVyg4ZMB8GA1UdIwQY
MBaAFBNO/nxUH1QG3H4P8mjQVYK678mWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTA3LWZGUWZWQWJjZmdfeWFOQlZncnJ2eVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85M2QyOTctODAzOC00YjlhLThmN2It
YjM2NDkxZWU2ZWU0LzEvRTA3LWZGUWZWQWJjZmdfeWFOQlZncnJ2eVpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi85M2QyOTctODAzOC00YjlhLThmN2ItYjM2NDkxZWU2ZWU0
LzEvRTA3LWZGUWZWQWJjZmdfeWFOQlZncnJ2eVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZsdyMFz
x5QECQXTbcDqb4LvuVexyvRZKgXJi0M0IKveBDlRSdXJpho397hpb15txbOvLzcs
BA2Ig56GVpGKVx26K2bsQqXKIYIpKgc3MrXIZbLU7ImnhC+to+4Olll4524f1uGO
g9vwpjOmTCh6Ygg/4J3YGrXU552OVX5D51GVALxpX5e7IpUTt4xbQWMRhPIj7dwK
P8uuZqoDKNippsJGWIrdk88BETdBaVjOo9RRhiVfQdtH8zjq01FtNVWlTYzvNJ2n
zzCGN3KowBm6ogzbZOll1gPItSLfAyXRJTCLl3lBSQEil2a0hnEfBYxyUkVqZ+/u
jHDciWGD4k07PQ==
-----END CERTIFICATE-----
Generated at Sun Dec 28 23:38:58 2025 by rpki-client