This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
File:                     7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json)
Hash identifier:          DPU1/B4SFf7fHwnwgkoOmJUjlW0aHingy5/G0283Af4=
Subject key identifier:   09:01:42:87:5F:52:AD:E3:A3:A5:7C:4B:12:6C:95:F7:7E:42:89:41
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Certificate issuer:       /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial:       019AE6A9716FB07418201C36A5CECA60E635
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
Manifest number:          107D
Signing time:             Thu 04 Dec 2025 00:00:55 +0000
Manifest this update:     Thu 04 Dec 2025 00:00:55 +0000
Manifest next update:     Fri 05 Dec 2025 00:00:55 +0000
Files and hashes:         1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=)
                          2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=)
                          3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: sjvMIXAYQ3fpX2Wdzhgj5bourHIIoqpa2XvAWgXeVf8=)
                          4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=)
                          5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=)
                          6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=)
                          7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=)
                          8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=)
                          9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=)
                          10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=)
                          11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=)
                          12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=)
                          13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=)
                          14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=)
                          15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=)
                          16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=)
                          17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=)
                          18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=)
                          19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Dec 2025 17:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e6:a9:71:6f:b0:74:18:20:1c:36:a5:ce:ca:60:e6:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
        Validity
            Not Before: Dec  4 00:00:55 2025 GMT
            Not After : Dec  5 00:00:55 2025 GMT
        Subject: CN=090142875f52ade3a3a57c4b126c95f77e428941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:41:39:6e:1f:06:07:f1:3a:0a:de:d7:74:6a:
                    7a:ec:e4:d0:2c:ab:cb:2c:e5:ac:8a:e5:7f:84:d0:
                    a6:0a:fd:dd:c9:72:32:b5:72:1e:2a:35:9b:57:91:
                    85:dd:41:9e:6f:42:a8:1f:3e:40:b2:4d:7f:f6:92:
                    79:bb:ea:d9:ec:22:2d:50:ba:a7:f6:62:31:17:d0:
                    9d:bc:2b:fc:c6:15:99:5a:ba:01:3e:56:b8:a4:96:
                    41:83:96:6a:64:52:bd:df:cd:74:3a:52:98:c8:b5:
                    77:cb:23:45:a2:e3:d6:38:18:43:d0:d3:24:ea:94:
                    c7:09:ad:3b:b6:a5:7c:07:df:15:55:6f:f0:3e:1b:
                    e8:9d:fb:14:64:30:05:f7:00:5b:4e:17:f8:cd:46:
                    eb:c9:6a:af:c6:04:28:e8:41:79:07:8a:83:fe:eb:
                    89:a4:2c:2c:b4:03:4d:2b:17:93:c5:75:4c:05:9b:
                    65:67:81:5a:2c:1f:3d:9f:2c:ac:fd:25:e3:87:fb:
                    5a:e7:21:85:d6:17:9b:5d:2d:16:c6:ee:63:73:18:
                    13:f4:7a:2d:80:72:58:97:ce:4d:48:e1:56:4e:52:
                    25:6a:2d:19:83:39:2c:4c:86:34:1c:90:26:52:ab:
                    04:ac:4f:65:ca:33:13:74:1c:61:46:d6:02:34:1f:
                    f6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:01:42:87:5F:52:AD:E3:A3:A5:7C:4B:12:6C:95:F7:7E:42:89:41
            X509v3 Authority Key Identifier:
                keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:0e:4b:af:b8:4a:24:ab:37:e8:71:c0:b5:9a:63:0f:f4:2f:
         b6:7d:d9:f4:71:b2:69:f9:7d:65:07:6b:7c:cb:9f:0e:49:4e:
         cb:b1:e5:a8:32:79:4a:46:97:32:35:19:05:b1:fb:1d:46:c6:
         34:06:84:f5:73:97:18:f1:bb:0d:57:f5:2c:8a:f7:8e:bf:ce:
         c2:23:1e:b3:4e:f9:70:76:df:38:3d:33:24:b4:51:89:fc:97:
         d6:a3:54:a7:3f:eb:a4:f9:9c:bc:71:41:3a:ac:a2:28:74:16:
         fc:00:7d:11:e4:b2:a4:3e:f2:4d:4c:58:21:e8:32:23:cf:9b:
         47:7c:fe:78:84:f5:c8:ce:ad:17:6f:7c:de:a2:39:94:6c:7d:
         9b:09:e0:80:ff:63:d4:63:da:d4:2d:79:8d:13:06:43:0e:af:
         e6:2b:a0:e0:07:1c:17:4b:98:b9:43:5c:cc:1a:6c:ee:8c:e4:
         cf:19:2a:6f:65:d5:06:6c:36:d2:d9:e7:24:2b:12:59:e8:a2:
         e8:57:59:29:cd:42:b5:c9:00:7a:e8:c3:da:8c:a0:0f:bd:c8:
         85:07:b7:bd:04:fd:98:74:ae:6d:8b:9c:67:43:d7:c9:a0:61:
         62:83:12:ad:85:16:0a:5e:0f:bd:44:76:11:66:2f:0a:74:f1:
         f2:10:66:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 03:17:18 2025 by rpki-client