This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/fdcb01-a80c-451f-adb1-ebc224f765a2/1/7W1LV6Wh92F6njYD77ru8DsM-SE.mft
File:                     7W1LV6Wh92F6njYD77ru8DsM-SE.mft (raw, json)
Hash identifier:          6Cvt7u+NwdNp0z9K3FbRkXMPBhYPOm/JQ39jL0CUCzw=
Subject key identifier:   CA:2A:7A:2B:4F:6E:70:E1:74:DA:89:9D:86:4D:3C:25:CB:31:B2:FE
Authority key identifier: ED:6D:4B:57:A5:A1:F7:61:7A:9E:36:03:EF:BA:EE:F0:3B:0C:F9:21
Certificate issuer:       /CN=ed6d4b57a5a1f7617a9e3603efbaeef03b0cf921
Certificate serial:       019B3C7F007B2FA445C2A38A22724F37006D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W1LV6Wh92F6njYD77ru8DsM-SE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/fdcb01-a80c-451f-adb1-ebc224f765a2/1/7W1LV6Wh92F6njYD77ru8DsM-SE.mft
Manifest number:          0225
Signing time:             Sat 20 Dec 2025 16:01:54 +0000
Manifest this update:     Sat 20 Dec 2025 16:01:54 +0000
Manifest next update:     Sun 21 Dec 2025 16:01:54 +0000
Files and hashes:         1: 7W1LV6Wh92F6njYD77ru8DsM-SE.crl (hash: z4RG/yoBIx9PN57jJlBhVEGAgjq6GCJ32XXI8jZWYBo=)
                          2: Ov6Yc_rfnF29LDL468R6Q7PHjd0.roa (hash: +oLQZvjsGV1UxrKj7moqOOLBa/KXbzk5oX2tFPHRRW0=)
                          3: RnqlBqNckemdgMscFPH0Fk7zCrQ.roa (hash: 0kl1KuGhfmZ8KozL0+CoUsR0GiM0aWNfsiuMH0vIrwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/fdcb01-a80c-451f-adb1-ebc224f765a2/1/7W1LV6Wh92F6njYD77ru8DsM-SE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/fdcb01-a80c-451f-adb1-ebc224f765a2/1/7W1LV6Wh92F6njYD77ru8DsM-SE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W1LV6Wh92F6njYD77ru8DsM-SE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:7f:00:7b:2f:a4:45:c2:a3:8a:22:72:4f:37:00:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6d4b57a5a1f7617a9e3603efbaeef03b0cf921
        Validity
            Not Before: Dec 20 16:01:54 2025 GMT
            Not After : Dec 21 16:01:54 2025 GMT
        Subject: CN=ca2a7a2b4f6e70e174da899d864d3c25cb31b2fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a2:e2:fd:4e:1e:e6:14:16:66:da:95:63:23:
                    44:5a:9a:0b:89:37:0b:0d:0a:be:42:17:6f:08:f2:
                    4e:5f:80:9f:21:32:bc:16:0f:29:51:f7:4d:2a:96:
                    f4:00:31:9c:59:2a:2c:6a:80:d2:01:40:06:0f:a2:
                    95:a6:a1:e3:15:e2:79:54:dd:87:ad:c2:39:81:6e:
                    22:7d:51:7e:5c:c5:3b:21:74:e7:51:81:5a:58:76:
                    dc:46:16:2a:ef:f8:7a:b9:ee:98:ac:d8:97:ea:1b:
                    5a:0d:9f:3d:4f:fd:71:c1:d6:a1:00:01:08:d5:83:
                    1d:48:d1:c1:a5:e3:d1:71:ec:64:f3:de:25:2f:35:
                    46:12:a2:d8:2b:0d:ce:80:cb:e7:d3:23:a5:fb:d2:
                    94:90:37:81:66:b8:3c:0d:e6:5e:c1:c8:99:39:86:
                    f3:32:99:05:cf:10:7b:cc:fd:a3:ce:a4:cb:eb:ba:
                    01:e9:8c:f7:b2:2f:ac:78:92:3f:dd:0d:e1:53:a3:
                    a3:d8:77:63:93:1a:9d:c1:db:fd:73:ae:44:ac:a0:
                    99:a8:a3:22:93:63:55:b1:b9:50:07:ef:d4:21:41:
                    2a:a1:91:c3:f9:eb:36:7d:2d:27:f2:1e:33:c2:d7:
                    9b:5f:21:36:ed:8a:3c:9a:f1:57:c0:6f:96:2d:b7:
                    dd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2A:7A:2B:4F:6E:70:E1:74:DA:89:9D:86:4D:3C:25:CB:31:B2:FE
            X509v3 Authority Key Identifier:
                keyid:ED:6D:4B:57:A5:A1:F7:61:7A:9E:36:03:EF:BA:EE:F0:3B:0C:F9:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W1LV6Wh92F6njYD77ru8DsM-SE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fdcb01-a80c-451f-adb1-ebc224f765a2/1/7W1LV6Wh92F6njYD77ru8DsM-SE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fdcb01-a80c-451f-adb1-ebc224f765a2/1/7W1LV6Wh92F6njYD77ru8DsM-SE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:2b:78:80:75:b9:69:7e:f0:0d:79:17:4c:eb:ff:9e:32:61:
         81:c9:45:31:68:6f:2d:65:83:45:20:80:ba:63:c5:3f:d7:1c:
         07:3e:ab:a6:04:2f:f3:31:d8:73:4a:20:54:7b:77:2c:ca:6d:
         46:2c:31:41:cc:54:93:da:fa:44:09:94:3a:20:21:fc:12:9d:
         85:a8:32:0a:95:d8:46:07:e6:da:12:7d:16:02:be:37:82:65:
         60:f2:23:5e:4a:0d:0b:38:db:34:1d:74:eb:1b:26:97:e1:38:
         c1:40:95:4c:dc:53:91:58:46:03:d2:b8:ee:fb:bc:54:c1:02:
         c5:37:a8:e5:34:5d:ee:b5:2d:86:f4:1b:8a:41:75:27:ec:23:
         7f:aa:10:8f:2c:91:38:c5:8c:dd:9f:da:4c:87:09:07:84:0f:
         29:93:5f:9a:b5:2d:ea:81:da:58:4d:8f:b5:25:cd:a5:fd:63:
         64:91:26:cb:c9:0c:97:9b:cf:92:de:4c:76:53:04:a3:a9:53:
         2b:b3:e0:15:60:09:a6:05:aa:5f:91:2c:b2:68:8a:8a:6f:d8:
         56:45:b3:7f:b2:f6:9f:a3:9c:6d:05:70:49:a4:9d:ef:a8:db:
         ff:17:85:15:7e:01:9a:b1:2c:cf:fb:77:9d:1a:12:29:7e:f5:
         38:d6:06:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:16:31 2025 by rpki-client