This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
File:                     7ouogkxcjSBzJqSjq4k-u49Qlq0.mft (raw, json)
Hash identifier:          FWzuBmMjg7drvZ9wZze997Wu1IcAU+wccqXf1R7jvEQ=
Subject key identifier:   0B:D6:77:7A:A5:F3:64:75:98:57:59:B6:D3:19:D7:33:50:3A:20:FF
Authority key identifier: EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
Certificate issuer:       /CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Certificate serial:       019B36458F82AE98FF97157C9C1C7C86CA53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
Manifest number:          185E
Signing time:             Fri 19 Dec 2025 11:01:26 +0000
Manifest this update:     Fri 19 Dec 2025 11:01:26 +0000
Manifest next update:     Sat 20 Dec 2025 11:01:26 +0000
Files and hashes:         1: 2sRit1HkpegSVZ93lQZh_r4sGH8.roa (hash: WjR0xWj31dChbabct4M4jjr+gsq2p4cJ6G9KZptb3BE=)
                          2: 7ouogkxcjSBzJqSjq4k-u49Qlq0.crl (hash: gpCEw/kKZ4BbnDsyikqXLjkNpVqXkpASLieRsep2szY=)
                          3: HLNbdsiEi9zrEX9bhrS_IVl3jtc.roa (hash: 1y6Fi/ztp5kH8MZMJE7AZCFbRxNUTgcF8S0cn+hAm74=)
                          4: VSEL2iQWB7y3te4btwgqQzATX5A.roa (hash: 79Tuaq+JTT2My5Dv4Q6xrae9R7vcxQ2hnGbV3yFOdeI=)
                          5: p1JXjb2LczYltKrE1SbLNgCFh1Y.roa (hash: JZ2SLRHUBb7DNCppha0qhaA/9Yund2DleZbSFcq4A2U=)
                          6: wA6W-GpxlB3i30QJ1-yV0iMJSuQ.roa (hash: GMyQK8PY9PuZx6ZGXpUajFi5ixbXMnnchK+Ab4O55xg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 11:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:45:8f:82:ae:98:ff:97:15:7c:9c:1c:7c:86:ca:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
        Validity
            Not Before: Dec 19 11:01:26 2025 GMT
            Not After : Dec 20 11:01:26 2025 GMT
        Subject: CN=0bd6777aa5f36475985759b6d319d733503a20ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:05:59:5f:89:6d:cf:52:56:2e:9c:1c:f5:b9:
                    e1:f4:49:8d:6f:9b:11:0a:84:b0:44:fc:0d:25:20:
                    89:21:9e:f8:e2:a1:69:e0:89:2d:00:09:52:ff:99:
                    88:4a:61:d4:15:6f:df:b5:87:6b:60:3b:63:1e:3a:
                    2a:43:9f:64:dd:fd:e7:93:4e:05:4d:7f:b2:33:3c:
                    f3:29:37:c8:a5:8a:17:2b:72:f7:92:7c:b7:a6:86:
                    97:4d:a1:b6:13:8c:f3:83:57:35:76:ae:75:5c:35:
                    fc:05:31:ea:39:7e:9e:22:73:90:ca:e2:f5:85:f0:
                    2f:30:ba:a7:d8:cb:44:00:83:d7:4a:f8:61:92:50:
                    db:f2:ba:63:0f:8d:de:2a:bf:b0:8b:7a:c8:f5:ed:
                    b1:f0:f4:5b:d7:be:eb:41:5d:6a:25:c4:78:92:12:
                    a3:e6:15:4a:56:40:da:e7:26:d9:ad:c1:09:62:a8:
                    06:cd:c1:6c:94:53:1b:01:a2:55:7f:ec:0f:f2:3b:
                    22:5a:03:75:13:d8:d7:f4:f0:3b:fd:aa:1f:2e:3b:
                    35:97:6d:94:9f:0b:92:6a:86:88:c0:2a:99:88:ef:
                    0e:b1:4b:be:cf:6d:49:30:bf:9f:36:5d:5a:79:24:
                    64:ee:dc:e2:98:3c:44:2f:82:c9:be:97:28:c7:20:
                    9c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D6:77:7A:A5:F3:64:75:98:57:59:B6:D3:19:D7:33:50:3A:20:FF
            X509v3 Authority Key Identifier:
                keyid:EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:12:fd:27:ca:11:b3:a4:23:e8:e8:29:a1:6d:89:86:9c:7a:
         78:0c:86:7c:e6:c8:ee:a5:1b:aa:b8:39:87:e1:b2:4f:f5:60:
         a3:b1:88:61:2c:60:de:59:e8:06:e6:06:be:1c:a9:d2:ad:aa:
         39:03:44:2b:a1:9f:8b:d5:a9:49:3e:17:22:aa:64:53:3d:ff:
         99:59:05:d6:8a:1e:b6:94:eb:22:52:0f:57:11:02:63:3b:64:
         55:2c:22:fe:46:8d:ca:cd:be:02:39:bc:f9:77:89:ef:58:10:
         4f:23:0c:73:09:fd:8b:70:33:eb:f9:dd:0f:3f:45:a6:70:90:
         38:1a:9d:d5:f4:76:07:b6:ff:bf:ad:4b:b9:4f:96:58:49:1f:
         e3:27:c2:54:f9:45:17:38:fe:02:95:5a:2e:5d:57:c9:7c:5b:
         91:ee:f0:cb:1c:46:00:87:d4:98:ca:35:bf:72:da:42:41:0f:
         80:1e:d5:54:a2:38:2a:02:ad:2c:de:17:af:80:b2:6a:fb:81:
         98:e8:ae:8b:95:b9:f4:2a:a0:45:87:0a:33:96:8f:61:78:15:
         2d:ae:08:00:e3:a8:a5:ed:e2:64:bb:f3:e4:e3:41:50:30:53:
         c2:9e:13:37:98:2b:59:eb:92:66:e7:56:28:2d:b3:32:0a:a7:
         5e:9e:b9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:15:38 2025 by rpki-client