This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
File:                     7m9CHCUwligDR9wuksoQzDmME08.mft (raw, json)
Hash identifier:          mTA1obJzJCcs0raA5NhXWUUPar4/WJadzKx0ZVFc4/8=
Subject key identifier:   B0:97:1A:33:DA:35:69:60:E4:54:AF:27:F2:60:FE:F0:CD:4D:73:BD
Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Certificate issuer:       /CN=ee6f421c253096280347dc2e92ca10cc398c134f
Certificate serial:       019B4B831B052CCC50F2424392048D33B059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
Manifest number:          0F5D
Signing time:             Tue 23 Dec 2025 14:00:41 +0000
Manifest this update:     Tue 23 Dec 2025 14:00:41 +0000
Manifest next update:     Wed 24 Dec 2025 14:00:41 +0000
Files and hashes:         1: 5YlDtF7Ig5TmbuS_NoCvq0dSUvM.roa (hash: O5AF3h5GUvVjXi+fdnM5KUl9Mafj4SPh9elj1bhbK30=)
                          2: 7m9CHCUwligDR9wuksoQzDmME08.crl (hash: F8PFsZGT/OPeUd84fU8IevrUpEUurDV2ZXwjnniV8uI=)
                          3: jAeBGrf8BFIRbqKfW6MMAFHsAAY.roa (hash: XkntMpJexF4yO1fbtCkxhPtOe5hHQjbro7XU8mxBw50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 14:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4b:83:1b:05:2c:cc:50:f2:42:43:92:04:8d:33:b0:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f
        Validity
            Not Before: Dec 23 14:00:41 2025 GMT
            Not After : Dec 24 14:00:41 2025 GMT
        Subject: CN=b0971a33da356960e454af27f260fef0cd4d73bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:35:9a:79:ae:ca:77:80:7f:dd:3d:d8:97:02:
                    84:2d:8b:50:3f:e1:1f:0c:4b:c4:b4:f6:4e:de:39:
                    4f:fb:fb:1d:fc:db:6a:13:01:bf:4b:16:95:7d:32:
                    b6:db:0c:f9:52:89:6f:79:92:0c:dc:60:5b:f6:96:
                    55:da:cb:34:ac:84:8c:c6:80:a1:e1:2d:f6:98:9b:
                    48:dd:b4:49:40:44:55:53:28:59:e8:4d:1d:96:7e:
                    7e:c2:b6:3a:4b:a1:4d:57:c8:08:e4:35:4a:0e:85:
                    ce:d7:33:d3:99:d6:87:eb:1a:e2:c5:7f:94:17:ae:
                    fc:53:fe:62:35:31:94:15:c3:35:56:46:90:bb:13:
                    43:b3:1c:d0:14:bf:9c:03:78:eb:fa:fb:1c:5d:80:
                    f9:45:d3:67:82:ba:85:01:00:c2:25:d5:c6:00:d9:
                    b0:b0:9c:8c:bb:d8:83:81:cf:80:83:93:f2:01:38:
                    b7:8c:82:da:da:5b:28:8f:72:1b:a9:10:06:21:9d:
                    d4:07:6e:c9:5c:22:95:06:36:ce:b5:72:6b:e4:d5:
                    3a:8d:3f:8e:1d:fc:cf:ee:36:db:ce:5b:27:a2:10:
                    7b:f5:d5:b2:39:ba:46:e7:48:ab:84:ba:24:68:29:
                    37:79:71:31:3e:70:07:1c:20:0f:e8:84:eb:dc:aa:
                    43:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:97:1A:33:DA:35:69:60:E4:54:AF:27:F2:60:FE:F0:CD:4D:73:BD
            X509v3 Authority Key Identifier:
                keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:6c:fc:75:fb:b0:15:91:c4:ca:f8:53:9d:0c:5e:60:e7:59:
         ae:2d:bb:c2:34:4d:2e:e4:dc:f5:c3:ce:b9:e9:80:e6:8b:62:
         9c:9d:03:fa:79:0a:15:4c:79:83:0f:6f:d2:76:24:4d:9e:2a:
         49:71:2d:58:96:ae:ce:47:8c:ef:9c:8e:c7:40:e2:1f:a4:9b:
         8c:8c:66:6d:aa:30:7f:28:13:64:0f:9d:e9:3c:08:8f:00:bb:
         f7:87:09:45:07:5c:6c:20:68:15:ec:44:61:45:42:93:19:c2:
         5c:08:27:fe:96:6f:a1:f6:b4:5f:ee:a4:7d:0e:e0:e3:17:4e:
         26:b0:f5:dc:12:59:ea:f1:ee:f0:4d:25:7d:f0:1b:03:04:9c:
         7d:93:12:f4:36:39:d2:c4:bd:87:8c:a8:cc:f4:7f:69:15:51:
         db:6a:5e:31:44:73:04:5e:02:3f:34:a5:32:81:63:b0:66:ea:
         63:58:70:b3:54:b4:62:a3:e8:17:ab:0a:29:0f:e0:fa:df:f0:
         07:ab:75:9c:25:ca:52:27:8a:a2:d8:55:39:f9:49:71:a7:55:
         fd:c5:c4:ed:51:73:0e:c9:78:13:e8:87:89:04:e0:19:93:5d:
         bb:72:89:6b:32:44:65:bb:dd:6c:2c:a4:93:e7:e2:01:e0:55:
         53:29:a7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 17:16:00 2025 by rpki-client