This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft
File:                     n7SouTr56pzxiqyk5z8RbsJus1c.mft (raw, json)
Hash identifier:          sDa3GarioFkKw+ZsVI84k/c26S/FIG0fwNDuH6EvQ5w=
Subject key identifier:   11:96:17:24:67:78:11:E0:19:0D:A3:35:E3:C1:1E:9E:4C:B2:4D:77
Authority key identifier: 9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57
Certificate issuer:       /CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357
Certificate serial:       019B42B73C9F1264E496C4484E9C936A2C96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft
Manifest number:          1795
Signing time:             Sun 21 Dec 2025 21:01:03 +0000
Manifest this update:     Sun 21 Dec 2025 21:01:03 +0000
Manifest next update:     Mon 22 Dec 2025 21:01:03 +0000
Files and hashes:         1: 1PkG4fEwdXoMD-WH6ZRxyY8sELw.roa (hash: a0iYtGmAHDkDdbaG2u7+3yZnQS7AVnDIsCyUz86fNxA=)
                          2: GNiJG3xpkW82o4W1yrImKoG5MJU.roa (hash: BvuebS9Of4HLpNtbxkNjqKwp5lwh+0N5sWdkwgefagE=)
                          3: hqWfNQU94aa67UD14uMEBc6ivzY.roa (hash: vnr5FfmrkEI+u9/SFiQ11TolMxSSlt2O7OtHyllTQ+I=)
                          4: n7SouTr56pzxiqyk5z8RbsJus1c.crl (hash: TenGlwFfJVEwDkbI8B+aWnHlCh4m/ZklgSYUJhNuvtU=)
                          5: obRnA2DOaX1f1N0VaLSK561MsFg.roa (hash: xpha7L01dte1GwtkALu5D1iKZZKGT07iZI/1woD8rMs=)
                          6: tsMi9Spmw9ktRAObPVrMvL_NDfM.roa (hash: vcFMvuKcFVt9l1PFw6awejrlsR9MLAnsGRscDdgFGwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 21:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:42:b7:3c:9f:12:64:e4:96:c4:48:4e:9c:93:6a:2c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357
        Validity
            Not Before: Dec 21 21:01:03 2025 GMT
            Not After : Dec 22 21:01:03 2025 GMT
        Subject: CN=11961724677811e0190da335e3c11e9e4cb24d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bd:0c:2e:31:5b:d8:e3:8c:60:48:3e:14:e0:
                    81:33:3c:b6:c9:cf:ec:50:4b:ea:08:04:5e:06:09:
                    d6:14:65:4d:98:0c:ec:86:6f:be:09:e1:80:7b:52:
                    c2:7e:b6:64:d7:4e:d5:f2:58:9e:49:07:ed:01:90:
                    41:27:70:8b:db:39:a0:85:b7:79:eb:e6:38:7a:b7:
                    f0:dd:92:c5:39:14:59:96:d6:ef:4e:a7:7f:ec:9e:
                    15:48:ce:c0:e2:d6:1d:c6:b4:a6:48:1a:7b:eb:d4:
                    1f:0e:27:e0:a4:43:9c:f2:ac:f8:9c:8b:02:9e:c2:
                    2a:f1:5f:cf:d9:6f:1b:ae:66:f2:93:b5:7b:2c:e6:
                    14:14:77:9a:31:f4:35:3b:f0:ad:03:87:9e:d4:87:
                    5e:c0:3d:a5:4f:77:54:80:f2:9e:df:97:3a:34:e9:
                    6a:e0:d5:9f:55:4b:f4:fd:4f:74:ab:94:ca:d9:a2:
                    fe:85:9c:63:d0:d4:08:5a:fd:b1:d1:5f:29:b6:50:
                    89:3f:12:f4:8b:e4:ba:e4:fd:12:81:0b:bf:27:48:
                    74:6f:8a:12:5c:fe:5e:59:b5:5b:c8:04:4c:40:2d:
                    b0:b9:e3:7a:08:96:6c:f2:0d:5d:d4:51:ab:98:cb:
                    79:82:6b:3e:d8:c3:d8:e8:ff:19:8b:93:0b:46:70:
                    ba:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:96:17:24:67:78:11:E0:19:0D:A3:35:E3:C1:1E:9E:4C:B2:4D:77
            X509v3 Authority Key Identifier:
                keyid:9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:70:35:47:49:d4:b4:30:08:c0:03:7c:01:25:4e:94:ed:00:
         df:31:36:a2:66:53:fe:6b:3c:ea:55:41:31:48:e1:87:79:3b:
         8f:84:2c:ff:db:47:61:65:1b:a7:a4:3f:af:75:4a:87:11:41:
         e4:66:8e:3a:f1:06:40:b7:66:c1:ee:d7:5f:7b:9a:fd:10:92:
         84:49:a2:68:bc:e4:9e:7a:77:d2:0a:d6:aa:00:29:7a:50:95:
         67:9c:cc:1a:fd:a7:df:9e:27:30:03:bc:4e:2a:7d:7c:ac:64:
         57:f6:52:66:05:ba:31:fa:7c:72:a2:59:8b:00:6c:9f:8d:0a:
         e8:5e:68:80:19:44:0b:51:12:c3:0e:17:66:09:f5:57:bd:49:
         d5:04:5c:90:a9:56:53:e4:04:74:61:48:26:8e:35:5d:e4:fb:
         16:e6:fe:75:a0:7b:6f:59:8a:a8:2c:30:77:c7:f3:48:5d:4c:
         aa:25:88:d4:a6:ae:84:4b:94:31:9c:99:5b:56:00:9c:00:d6:
         fc:47:ca:4e:87:20:b7:73:e9:89:99:33:62:f6:2d:f3:1f:ab:
         ab:3e:d7:52:c2:cb:68:c5:99:ea:82:5b:2d:be:44:b4:4d:d6:
         11:7d:4c:65:50:53:45:0b:f0:3b:a9:d7:7b:85:74:04:a1:9b:
         d5:86:88:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtCtzyfEmTklsRITpyTaiyWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYjRhOGI5M2FmOWVhOWNmMThhYWNhNGU3M2YxMTZlYzI2
ZWIzNTcwHhcNMjUxMjIxMjEwMTAzWhcNMjUxMjIyMjEwMTAzWjAzMTEwLwYDVQQD
EygxMTk2MTcyNDY3NzgxMWUwMTkwZGEzMzVlM2MxMWU5ZTRjYjI0ZDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb0MLjFb2OOMYEg+FOCBMzy2yc/s
UEvqCAReBgnWFGVNmAzshm++CeGAe1LCfrZk107V8lieSQftAZBBJ3CL2zmghbd5
6+Y4erfw3ZLFORRZltbvTqd/7J4VSM7A4tYdxrSmSBp769QfDifgpEOc8qz4nIsC
nsIq8V/P2W8brmbyk7V7LOYUFHeaMfQ1O/CtA4ee1IdewD2lT3dUgPKe35c6NOlq
4NWfVUv0/U90q5TK2aL+hZxj0NQIWv2x0V8ptlCJPxL0i+S65P0SgQu/J0h0b4oS
XP5eWbVbyARMQC2wueN6CJZs8g1d1FGrmMt5gms+2MPY6P8Zi5MLRnC6KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGWFyRneBHgGQ2jNePBHp5Msk13MB8GA1UdIwQY
MBaAFJ+0qLk6+eqc8YqspOc/EW7CbrNXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjdTb3VUcjU2cHp4aXF5azV6OFJic0p1czFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84OTg3NDEtZWRhNC00YzVkLWFmOWYt
OGQ2OGViMjBmYmRkLzEvbjdTb3VUcjU2cHp4aXF5azV6OFJic0p1czFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC84OTg3NDEtZWRhNC00YzVkLWFmOWYtOGQ2OGViMjBmYmRk
LzEvbjdTb3VUcjU2cHp4aXF5azV6OFJic0p1czFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWnA1R0nU
tDAIwAN8ASVOlO0A3zE2omZT/ms86lVBMUjhh3k7j4Qs/9tHYWUbp6Q/r3VKhxFB
5GaOOvEGQLdmwe7XX3ua/RCShEmiaLzknnp30grWqgApelCVZ5zMGv2n354nMAO8
Tip9fKxkV/ZSZgW6Mfp8cqJZiwBsn40K6F5ogBlEC1ESww4XZgn1V71J1QRckKlW
U+QEdGFIJo41XeT7Fub+daB7b1mKqCwwd8fzSF1MqiWI1KauhEuUMZyZW1YAnADW
/EfKTocgt3PpiZkzYvYt8x+rqz7XUsLLaMWZ6oJbLb5EtE3WEX1MZVBTRQvwO6nX
e4V0BKGb1YaIUg==
-----END CERTIFICATE-----
Generated at Mon Dec 22 02:52:01 2025 by rpki-client