This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
File:                     7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft (raw, json)
Hash identifier:          M5z7zmmDlMGnb2bQqcCpcv0HGoZMyIlCEAxK50vueTc=
Subject key identifier:   7E:6E:C5:A0:4B:ED:D9:A0:E9:78:29:59:AE:0F:58:64:4F:E6:FC:D8
Authority key identifier: EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
Certificate issuer:       /CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Certificate serial:       019B2F3011C4ED30CC2567FE403984CA420B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
Manifest number:          11A8
Signing time:             Thu 18 Dec 2025 02:00:37 +0000
Manifest this update:     Thu 18 Dec 2025 02:00:37 +0000
Manifest next update:     Fri 19 Dec 2025 02:00:37 +0000
Files and hashes:         1: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl (hash: qr/rgGBY3+xhpRINOCICLSitUZczs6HCptPdvwZNw+I=)
                          2: KrFqFiDpj3KTLxxAsjJyiKgAjFA.roa (hash: 1PmMv3UcI9fAXjZSi6jxq86mVNekWxeQeV4OVG0h5eY=)
                          3: QEP4j9JVsbgw6u0dNGwjp_dEBOM.roa (hash: cfwWMXWNZBAAjCKALqzpLbct9a8WBHygXbGOplIqMXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 02:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2f:30:11:c4:ed:30:cc:25:67:fe:40:39:84:ca:42:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
        Validity
            Not Before: Dec 18 02:00:37 2025 GMT
            Not After : Dec 19 02:00:37 2025 GMT
        Subject: CN=7e6ec5a04bedd9a0e9782959ae0f58644fe6fcd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1a:f1:d3:80:5a:dd:17:38:69:82:f8:89:92:
                    ac:ba:c5:ac:ce:bb:f1:08:68:ad:47:21:d2:b3:65:
                    59:c8:8e:6d:b6:47:b7:43:c2:5e:40:60:9c:85:86:
                    2f:34:62:3e:c1:35:a9:78:c1:47:c3:14:e3:b6:0b:
                    94:58:da:55:e0:9c:82:fc:48:18:92:e3:d5:e0:07:
                    6e:07:3a:73:b2:40:84:2b:6c:a0:27:4c:46:34:d7:
                    b6:6d:84:6c:dd:67:5f:c3:e6:a7:d5:34:6e:95:fb:
                    98:03:f4:fc:8a:de:ea:46:5f:bb:3d:6c:92:2b:78:
                    41:98:75:e0:cf:e0:e4:18:04:f6:c1:85:2c:54:dc:
                    3d:47:48:f8:06:33:f3:75:60:ff:a4:52:e8:90:f9:
                    59:5a:40:1a:3a:45:10:97:6f:ae:19:a8:b5:87:d1:
                    58:cc:ed:0f:d2:38:ad:da:76:a7:0c:25:c6:9d:4a:
                    99:78:29:73:c2:1f:63:93:a4:8f:9a:b1:c0:4e:97:
                    74:5c:de:6a:d9:63:d1:41:32:aa:36:14:1f:e6:7d:
                    c5:55:77:cc:7c:2a:9d:f7:d9:dd:61:42:ea:67:f0:
                    49:0c:7e:c5:b8:85:bf:14:dc:3c:d7:64:91:f3:1e:
                    f9:d9:8d:42:2f:16:07:1e:db:b3:23:53:b3:94:2f:
                    73:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6E:C5:A0:4B:ED:D9:A0:E9:78:29:59:AE:0F:58:64:4F:E6:FC:D8
            X509v3 Authority Key Identifier:
                keyid:EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ef:74:e0:0c:14:6c:db:a1:45:31:64:87:21:a1:a9:59:2e:
         5e:91:61:f4:2c:50:1b:b9:df:60:67:bd:1c:5a:9a:f0:74:d7:
         32:cd:a7:d7:54:8c:97:cf:36:d7:fd:75:3b:15:07:c4:df:4a:
         60:07:0e:40:4b:74:70:2b:45:3e:6d:e0:21:40:03:cf:fc:8e:
         af:32:7b:0f:aa:31:d3:53:d1:d1:36:8a:2b:fb:ef:dd:c1:9c:
         bf:73:3d:0e:1c:21:37:40:b9:7f:a4:db:d0:61:c7:6b:ed:8e:
         90:e0:66:03:67:cf:7b:d8:1a:4e:12:e8:f4:7c:ab:08:d1:25:
         d5:26:61:dc:60:e0:a5:b3:20:3f:e7:e1:31:1a:91:dc:04:45:
         af:67:5f:e3:e1:3d:ea:a2:97:01:ae:85:21:f4:fa:fc:c6:be:
         de:84:aa:a9:5b:9a:42:8a:be:b3:a3:92:b1:9f:e0:a5:6a:4b:
         0a:82:20:2c:21:42:3a:b4:a7:77:6f:5a:4c:49:96:aa:f1:3d:
         dd:04:0f:d7:84:cc:ed:8e:24:9d:74:a7:4f:47:77:f3:e2:d2:
         b5:9b:52:c0:a4:80:d7:6e:0b:8c:c3:74:da:e8:98:e3:04:69:
         87:70:02:b5:fa:dc:05:70:d4:fd:ee:bd:3e:d1:ad:f8:c6:98:
         a8:62:5a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 10:30:47 2025 by rpki-client