This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.mft
File:                     7WJMWQAnpajJ7rNpcm5KYwzfQUw.mft (raw, json)
Hash identifier:          nHfnVAizi00s8Xb0lMjzEif5adQwYJOJfAilxXyGJFA=
Subject key identifier:   E7:6E:4B:97:7F:CF:6D:BA:65:18:3E:72:18:B1:80:0D:98:13:8E:F3
Authority key identifier: ED:62:4C:59:00:27:A5:A8:C9:EE:B3:69:72:6E:4A:63:0C:DF:41:4C
Certificate issuer:       /CN=ed624c590027a5a8c9eeb369726e4a630cdf414c
Certificate serial:       019B3E3565C08344E1DF53ECA28ABA1C951A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.mft
Manifest number:          070F
Signing time:             Sun 21 Dec 2025 00:00:45 +0000
Manifest this update:     Sun 21 Dec 2025 00:00:45 +0000
Manifest next update:     Mon 22 Dec 2025 00:00:45 +0000
Files and hashes:         1: 7WJMWQAnpajJ7rNpcm5KYwzfQUw.crl (hash: Pu/hvL4HkBkKzBiHRWq3bt9PC1+E1Cez4gDJm5Sdktc=)
                          2: 8Mo6g9SFP-NIBZd3NEDkngdSZes.roa (hash: rO3KeiHvbOV2i5W5VXdPAcjCOnY/RKARKqJQlNG3u/Y=)
                          3: X6ONNbrSeOBD3kD76GPFoU9VA9Y.roa (hash: QD4WMSUllUbTUrFaxZU2Uc2vKKDXY/ZvuaWUTTLHo10=)
                          4: YmmMQQPClm4aJNcHY4nqMmKzxKo.roa (hash: t9N6GySKPe1l1d/1ycrJCeRhS1dtKqOZa7fj5PMZRB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:35:65:c0:83:44:e1:df:53:ec:a2:8a:ba:1c:95:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed624c590027a5a8c9eeb369726e4a630cdf414c
        Validity
            Not Before: Dec 21 00:00:45 2025 GMT
            Not After : Dec 22 00:00:45 2025 GMT
        Subject: CN=e76e4b977fcf6dba65183e7218b1800d98138ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fe:10:6a:5b:a1:1f:e4:28:48:f1:83:5f:5b:
                    72:2d:9a:ab:89:cb:53:58:bd:cc:49:1f:ac:d2:47:
                    76:a7:29:2e:92:7c:fc:0f:ad:97:09:24:cd:51:d8:
                    95:f8:ca:43:1d:bb:9d:2c:d2:14:44:5b:90:80:39:
                    ee:69:9c:44:0b:a1:e9:bb:84:93:eb:c1:83:e3:4e:
                    bb:68:66:1d:5d:cc:dd:af:45:a9:3d:eb:fe:42:16:
                    34:8a:32:ea:ff:dd:bc:ec:df:fb:e7:1c:14:0d:63:
                    bd:3d:bf:af:41:55:b5:c1:a8:3e:88:2e:cc:d1:b6:
                    12:fb:44:d9:56:57:5a:0b:54:d7:8a:9e:1c:4e:6d:
                    cb:83:74:68:01:e0:3d:62:1b:ee:73:28:18:35:dc:
                    1c:41:a7:d1:f6:52:b2:f3:03:d3:9c:30:9c:42:f3:
                    b9:2f:83:7d:0d:9f:71:29:ad:37:52:62:7c:88:db:
                    81:ee:a5:e2:de:a1:02:69:82:d9:75:d8:4d:fa:ea:
                    35:32:32:ad:ce:3b:ff:d2:b1:66:c8:ac:33:5e:32:
                    6d:80:c6:a4:12:99:60:90:b3:1a:21:87:58:5f:1e:
                    d3:e9:d6:69:2f:9e:4e:49:8e:b6:3a:05:24:ef:68:
                    ff:28:04:78:1e:3e:01:a7:17:1f:bb:2d:39:e1:ba:
                    e8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6E:4B:97:7F:CF:6D:BA:65:18:3E:72:18:B1:80:0D:98:13:8E:F3
            X509v3 Authority Key Identifier:
                keyid:ED:62:4C:59:00:27:A5:A8:C9:EE:B3:69:72:6E:4A:63:0C:DF:41:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:db:e2:fc:89:30:25:3e:6f:57:85:09:d3:73:be:47:1c:de:
         31:5d:8e:78:26:65:d8:b9:c5:2c:d3:42:a8:cf:86:c1:7b:68:
         50:85:f3:a0:cf:fd:fe:f0:0e:f5:3d:c0:ad:c2:83:76:65:2d:
         e0:25:fd:7c:34:db:70:c8:dd:3f:b0:ed:88:80:7d:13:69:00:
         5e:76:68:01:1a:0c:6a:dc:fb:57:64:49:e1:ee:c6:d2:16:40:
         1e:59:5b:53:d4:37:9e:e0:85:2f:52:d2:20:95:80:44:de:67:
         59:4e:d8:b6:a8:0f:17:ff:0d:10:5b:67:5e:71:ea:9c:05:cc:
         ff:1b:4e:73:f1:e0:69:99:14:06:03:c8:dd:13:42:79:6d:67:
         b0:e7:f6:38:ae:88:65:d3:71:80:6d:72:90:9a:cc:64:bf:11:
         95:54:f4:98:18:76:6f:a4:33:92:95:fc:4e:01:c3:da:ad:b7:
         36:84:0b:eb:20:32:bd:00:20:4d:86:b0:79:c1:c1:2a:11:7d:
         f5:47:a1:13:9c:ef:ef:22:8e:b4:cc:62:02:a4:b7:4e:76:7a:
         8d:2f:9e:b6:14:4b:82:d7:f8:fa:a9:fc:e8:7f:37:b0:c7:e5:
         0f:b3:79:17:9c:b4:aa:8f:fb:f1:10:09:38:13:70:f3:07:75:
         a5:56:8b:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs+NWXAg0Th31Psooq6HJUaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNjI0YzU5MDAyN2E1YThjOWVlYjM2OTcyNmU0YTYzMGNk
ZjQxNGMwHhcNMjUxMjIxMDAwMDQ1WhcNMjUxMjIyMDAwMDQ1WjAzMTEwLwYDVQQD
EyhlNzZlNGI5NzdmY2Y2ZGJhNjUxODNlNzIxOGIxODAwZDk4MTM4ZWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/4QaluhH+QoSPGDX1tyLZqrictT
WL3MSR+s0kd2pykuknz8D62XCSTNUdiV+MpDHbudLNIURFuQgDnuaZxEC6Hpu4ST
68GD4067aGYdXczdr0WpPev+QhY0ijLq/9287N/75xwUDWO9Pb+vQVW1wag+iC7M
0bYS+0TZVldaC1TXip4cTm3Lg3RoAeA9YhvucygYNdwcQafR9lKy8wPTnDCcQvO5
L4N9DZ9xKa03UmJ8iNuB7qXi3qECaYLZddhN+uo1MjKtzjv/0rFmyKwzXjJtgMak
EplgkLMaIYdYXx7T6dZpL55OSY62OgUk72j/KAR4Hj4Bpxcfuy054bro3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOduS5d/z226ZRg+chixgA2YE47zMB8GA1UdIwQY
MBaAFO1iTFkAJ6Woye6zaXJuSmMM30FMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1dKTVdRQW5wYWpKN3JOcGNtNUtZd3pmUVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy84ZGI2N2EtYzRmYy00YzJjLTk5Nzgt
YTdiZTVmYTBmZjY1LzEvN1dKTVdRQW5wYWpKN3JOcGNtNUtZd3pmUVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy84ZGI2N2EtYzRmYy00YzJjLTk5NzgtYTdiZTVmYTBmZjY1
LzEvN1dKTVdRQW5wYWpKN3JOcGNtNUtZd3pmUVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAstvi/Ikw
JT5vV4UJ03O+RxzeMV2OeCZl2LnFLNNCqM+GwXtoUIXzoM/9/vAO9T3ArcKDdmUt
4CX9fDTbcMjdP7DtiIB9E2kAXnZoARoMatz7V2RJ4e7G0hZAHllbU9Q3nuCFL1LS
IJWARN5nWU7YtqgPF/8NEFtnXnHqnAXM/xtOc/HgaZkUBgPI3RNCeW1nsOf2OK6I
ZdNxgG1ykJrMZL8RlVT0mBh2b6QzkpX8TgHD2q23NoQL6yAyvQAgTYawecHBKhF9
9UehE5zv7yKOtMxiAqS3TnZ6jS+ethRLgtf4+qn86H83sMflD7N5F5y0qo/78RAJ
OBNw8wd1pVaLVw==
-----END CERTIFICATE-----
Generated at Sun Dec 21 02:01:55 2025 by rpki-client