This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
File:                     7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft (raw, json)
Hash identifier:          wQrbPrdpMi8L3txPkgKOL9OjxZRmQ/cxvH1GMWJTYXM=
Subject key identifier:   8F:68:35:58:66:E4:85:9E:D6:04:FB:84:72:35:36:F3:43:69:7B:41
Authority key identifier: EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
Certificate issuer:       /CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Certificate serial:       019B69C4C954BC9EAF2D8E2C75B849697D77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
Manifest number:          15E0
Signing time:             Mon 29 Dec 2025 11:01:02 +0000
Manifest this update:     Mon 29 Dec 2025 11:01:02 +0000
Manifest next update:     Tue 30 Dec 2025 11:01:02 +0000
Files and hashes:         1: 2_qB8eFgSy7qYs-cTMDnxVlFBNw.roa (hash: fSrSkbUGiKE2ZlG+ZtKwnFUZkRCDBazw6Ikex7efYic=)
                          2: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl (hash: aZCOFAyiCGlI1JVRLcmUUnggnAnFX4NKJvb8tLgnRbA=)
                          3: keUTzloof1e5LCPNjCM6qrztCW0.roa (hash: 96VfjYTiDayJ8zEZcHUdOWEaY+iQmK9P7tnTsjIikmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Dec 2025 11:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:69:c4:c9:54:bc:9e:af:2d:8e:2c:75:b8:49:69:7d:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
        Validity
            Not Before: Dec 29 11:01:02 2025 GMT
            Not After : Dec 30 11:01:02 2025 GMT
        Subject: CN=8f68355866e4859ed604fb84723536f343697b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:52:a9:10:c2:b3:b3:5e:04:e4:e1:be:a7:5a:
                    60:22:15:bd:04:6b:ba:77:06:a4:f3:90:cc:08:f0:
                    5d:b5:44:56:f5:63:99:71:e1:88:e7:47:19:4c:44:
                    40:17:00:a3:8e:af:bf:59:f3:6e:51:fb:29:65:3f:
                    d8:d2:d7:5d:39:e8:83:d3:16:b0:99:2b:37:c4:81:
                    6a:9b:33:0e:d4:fa:5d:26:78:0f:41:df:85:84:d5:
                    e4:de:39:08:b6:21:d8:db:18:94:af:5b:a2:71:48:
                    db:9f:d5:bd:19:cc:25:3c:cf:44:9e:f9:0c:c4:d9:
                    9f:66:f7:2e:56:72:2c:cd:93:d6:7a:f5:f6:43:99:
                    19:ee:ca:9f:cf:46:aa:25:02:4b:1a:fb:fa:9c:e6:
                    e6:45:c4:bb:04:3d:d0:56:b8:d3:6d:73:e0:73:88:
                    00:c5:ad:fb:7c:30:d2:ed:2f:63:d3:0e:e4:5b:37:
                    80:4c:6c:94:e0:9b:08:e5:e9:e5:64:5f:43:41:b5:
                    fa:df:ad:5e:be:f9:33:36:40:9f:78:75:1b:e6:48:
                    9e:cc:f5:f7:4b:a4:2e:73:42:d3:c2:68:6d:4b:52:
                    a9:20:24:d6:79:a3:04:74:d8:12:93:f7:27:71:b6:
                    9a:42:f8:13:c6:04:7e:d2:fa:26:05:8a:bc:af:11:
                    0e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:68:35:58:66:E4:85:9E:D6:04:FB:84:72:35:36:F3:43:69:7B:41
            X509v3 Authority Key Identifier:
                keyid:EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:05:f4:be:17:8c:b2:81:13:3c:0c:f4:87:21:14:30:25:f6:
         4b:f9:bb:30:bc:e2:25:83:68:98:3a:08:05:5f:a0:0f:1e:57:
         1f:d7:ca:0f:1e:90:4b:5d:7a:84:e3:89:74:fb:f3:91:08:af:
         ab:b6:cd:ae:60:32:cc:60:ac:4e:54:94:2f:0b:aa:05:8d:41:
         18:19:fc:7d:39:87:16:70:ac:62:3b:fc:ea:3f:3f:91:94:68:
         a6:15:0f:5a:e7:a3:4e:05:4c:91:25:5a:96:67:21:c6:9d:02:
         81:de:77:8b:d1:84:38:bf:eb:cf:d6:06:e3:55:08:3a:bd:0b:
         e6:a4:88:2e:29:36:46:89:bc:55:a7:d4:2d:35:aa:be:d9:31:
         70:05:09:07:97:85:5d:8d:36:f7:a4:ec:c7:de:51:87:d1:5c:
         83:f5:2e:1c:61:b4:ab:89:67:0d:88:b5:51:78:d1:70:75:c1:
         3a:a6:ac:f1:e2:2d:6d:a0:c9:1b:32:b1:c1:e4:98:d7:b3:4c:
         7b:77:7f:04:25:0c:12:2e:17:45:44:35:07:a4:10:33:56:fa:
         7d:51:d0:f6:39:72:f8:4a:94:fd:a0:f3:65:56:8c:a9:c6:70:
         73:f0:a9:56:b3:90:ef:41:ea:93:f5:4e:64:9b:a0:aa:c8:b7:
         d1:45:63:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 18:42:51 2025 by rpki-client