This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft
File:                     7600TrX36x3uS4-ENftbnYdmPp0.mft (raw, json)
Hash identifier:          6OUZQOPBGxICLMbtJ9hVe+sSzR5fSoV1gmwpwVDpeII=
Subject key identifier:   40:B6:3B:22:9F:8B:9A:00:32:7C:7F:31:0C:F7:14:D8:CD:F4:7D:1E
Authority key identifier: EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
Certificate issuer:       /CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Certificate serial:       019B3DC787BD580B2806EAFBD563C75FB6D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft
Manifest number:          0ED9
Signing time:             Sat 20 Dec 2025 22:00:45 +0000
Manifest this update:     Sat 20 Dec 2025 22:00:45 +0000
Manifest next update:     Sun 21 Dec 2025 22:00:45 +0000
Files and hashes:         1: 1-TrxiaNStiTOJfkIfvXSvxKAa8.roa (hash: Sa+TGnkF/Fgr2eI/KHbAOg2b1WIDT95qtx3HLZbkTYQ=)
                          2: 7600TrX36x3uS4-ENftbnYdmPp0.crl (hash: CynPF5pZbDzAqivzvhOI0UrwFvWk6+pOsxKrEQ0vSys=)
                          3: CpsNBPf3z13iAJuT2Uc6xn49v3k.roa (hash: aqK12du8rkPezSSK2zWASPAljBp90XN1tNxFt4RE07M=)
                          4: U_VYKpyLv0RVfRm74yG5a_Vrkf4.roa (hash: el4MUGQYFxb5aJybMsuuruh6kVWrWKqPLvaGeVjGVyY=)
                          5: WywaCMaoX-4Vjd6cVj-u89uGhyI.roa (hash: AYAIVJDWWfRtiSD4573Cq+miJDAAqjH32NCsFxgcKF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:c7:87:bd:58:0b:28:06:ea:fb:d5:63:c7:5f:b6:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
        Validity
            Not Before: Dec 20 22:00:45 2025 GMT
            Not After : Dec 21 22:00:45 2025 GMT
        Subject: CN=40b63b229f8b9a00327c7f310cf714d8cdf47d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:82:f9:f8:02:8e:a7:c6:d6:f4:f4:12:5b:0d:
                    cd:94:3e:24:6d:6c:78:a9:70:56:61:6e:97:ec:7e:
                    b2:46:73:bb:41:53:39:5e:20:bf:a1:2b:03:8e:e4:
                    98:20:5b:47:74:39:73:e3:60:a6:5b:79:4c:6a:bd:
                    03:92:76:a6:91:45:3a:1b:28:53:63:0b:64:11:24:
                    7b:4e:a2:62:0b:6d:2d:1a:1a:ae:12:64:0a:21:4f:
                    26:43:3f:b0:eb:ed:6c:80:68:97:7a:82:d2:de:5b:
                    31:67:c5:2b:5f:95:b2:44:93:3e:56:e5:6f:d4:f2:
                    3d:2e:04:3b:61:1a:b7:8d:ad:ff:c6:17:91:51:47:
                    3a:8d:be:2e:d1:ce:73:0c:00:22:c9:de:ed:c0:71:
                    76:3e:d0:26:0c:b7:f1:99:fe:27:5d:18:56:75:83:
                    d0:2b:6e:ac:df:6e:89:ab:d0:25:52:70:7f:30:cc:
                    74:44:11:ff:8e:3c:df:2b:d6:84:cc:48:76:b6:f4:
                    29:96:60:05:1d:9a:b5:38:4e:36:ea:b2:61:46:f1:
                    45:09:6d:d5:fd:f9:2b:f0:ad:17:62:3a:25:54:39:
                    b0:3b:7d:af:4d:6d:91:a3:df:05:3b:d2:15:4b:b7:
                    e9:29:4e:f6:cc:a3:58:03:de:7a:94:9d:7f:48:fa:
                    55:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B6:3B:22:9F:8B:9A:00:32:7C:7F:31:0C:F7:14:D8:CD:F4:7D:1E
            X509v3 Authority Key Identifier:
                keyid:EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:00:93:28:e1:cd:40:f9:a2:ac:31:d3:a2:36:02:c4:cd:3a:
         e6:cb:95:ef:ae:7c:f3:80:b4:43:e8:b4:0f:b4:b3:07:0e:f8:
         8b:84:b9:1e:98:19:96:92:45:2e:07:0a:aa:bd:d8:9f:8c:88:
         52:15:cc:d2:54:14:1b:34:04:05:75:77:cb:a9:c3:1b:5f:b5:
         87:9f:42:de:77:97:eb:86:08:61:7a:bf:30:a4:c3:65:62:94:
         82:91:60:69:dc:63:df:1f:fd:ea:57:fb:a7:ed:90:af:f6:ca:
         ca:72:90:27:41:60:ef:f7:c7:08:67:26:43:8d:a8:70:89:14:
         75:e4:3d:cc:53:ae:bc:c3:a5:05:76:1c:f9:f2:6f:cb:d1:95:
         a7:db:3c:d5:0d:2b:f6:19:a6:53:ea:33:f2:fc:00:69:22:b2:
         78:f0:d6:0b:70:18:ae:ef:af:73:3e:35:60:1e:23:97:7c:3e:
         18:10:02:8d:a6:d9:71:be:84:40:f9:54:63:7d:43:b3:6c:63:
         47:9c:f7:33:32:c0:f7:2e:3a:cd:e2:9d:17:d6:9b:2b:1f:35:
         aa:28:94:8f:64:0c:f0:1f:83:45:55:86:6b:4f:35:e9:ad:02:
         64:19:84:59:14:b4:60:a2:ee:b6:73:57:aa:b1:83:0f:72:ab:
         ff:10:67:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:20:15 2025 by rpki-client