This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
File:                     7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json)
Hash identifier:          1B+jn+njcIU6LUmbU4wiIYpSV6+b2MEUBjapbMHKO4c=
Subject key identifier:   5E:AB:D3:96:5E:94:62:66:43:B4:2B:28:D5:4A:5A:82:8D:BB:D6:3E
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Certificate issuer:       /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial:       019B2E1DE7E3348496D86F4259E9E06BE70E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
Manifest number:          10A2
Signing time:             Wed 17 Dec 2025 21:01:10 +0000
Manifest this update:     Wed 17 Dec 2025 21:01:10 +0000
Manifest next update:     Thu 18 Dec 2025 21:01:10 +0000
Files and hashes:         1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=)
                          2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=)
                          3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: 9AYzrcYewYjtoOHUPn9bALQjbmd8StIrreTza0hXNkg=)
                          4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=)
                          5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=)
                          6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=)
                          7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=)
                          8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=)
                          9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=)
                          10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=)
                          11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=)
                          12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=)
                          13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=)
                          14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=)
                          15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=)
                          16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=)
                          17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=)
                          18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=)
                          19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 19:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2e:1d:e7:e3:34:84:96:d8:6f:42:59:e9:e0:6b:e7:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
        Validity
            Not Before: Dec 17 21:01:10 2025 GMT
            Not After : Dec 18 21:01:10 2025 GMT
        Subject: CN=5eabd3965e94626643b42b28d54a5a828dbbd63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d9:f3:5a:ed:bf:b2:9f:6d:b4:dc:bc:f7:b2:
                    08:e1:f0:a7:1f:ff:c2:32:2f:88:0d:5b:3d:f4:cf:
                    9d:5a:3b:bf:54:70:43:84:9f:ad:e8:43:1c:9e:61:
                    39:1f:72:2a:4c:2a:e2:85:02:8a:b7:06:2c:8d:fe:
                    fd:aa:50:aa:c3:fb:30:53:95:30:f4:1e:cd:43:99:
                    2e:dd:3d:91:a9:1b:da:ff:61:8b:9e:ce:76:99:f2:
                    45:b3:4c:42:37:63:c6:51:93:54:07:76:59:df:2c:
                    66:19:be:5a:37:2a:2e:fc:8e:74:d4:c7:47:ee:37:
                    e8:f1:d6:50:99:a8:fd:4f:7b:44:9f:c9:a8:0c:cb:
                    35:0f:25:36:88:27:4f:2d:6a:e7:58:8d:16:f4:65:
                    f2:51:75:2d:58:56:51:b3:2a:63:80:ad:42:c1:f0:
                    92:7e:f7:88:51:4f:87:99:d6:fc:88:43:00:b5:d1:
                    9c:8a:55:ad:c6:5c:1c:15:8b:b7:b4:ba:29:44:9c:
                    9d:0c:fa:99:bb:ce:a9:b7:3b:eb:5b:ac:f9:b3:78:
                    0a:00:32:3b:28:bb:d1:11:f7:36:5c:25:d0:db:4e:
                    f1:90:f4:fe:dc:d5:90:0f:de:d7:c1:22:01:87:53:
                    ac:a1:09:f8:c4:52:33:04:3f:cc:7f:61:65:9b:aa:
                    b9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AB:D3:96:5E:94:62:66:43:B4:2B:28:D5:4A:5A:82:8D:BB:D6:3E
            X509v3 Authority Key Identifier:
                keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:1a:e1:de:76:29:30:57:1d:e0:6d:a2:bc:4d:22:83:1f:f8:
         25:70:27:bd:97:c5:81:47:9c:84:8d:91:99:de:3d:0d:38:d2:
         79:fc:b9:02:5f:92:2f:68:05:c9:b1:46:45:71:5b:14:7c:88:
         00:e9:57:6e:06:40:af:ee:40:1a:37:cc:f8:75:a1:09:c6:f4:
         b1:cf:c5:08:e4:f4:92:4c:8e:7b:20:a9:62:dd:1b:31:dc:09:
         e4:1a:d4:09:1f:12:cc:93:e5:a9:a1:c8:ac:5c:2d:a4:b6:9a:
         60:72:4d:8f:cd:33:86:d7:f9:66:42:4e:74:91:50:de:89:5c:
         ed:c4:89:99:76:7d:d7:24:b4:c3:4a:a6:5c:f3:49:38:95:9b:
         90:67:54:bd:b3:3c:31:6a:07:8a:36:74:75:81:c1:44:6f:a7:
         bf:16:28:07:38:82:bb:d8:56:ce:5c:09:8e:54:08:91:7e:2d:
         4b:de:fe:65:54:b1:56:80:15:37:eb:86:cb:22:00:c8:69:15:
         79:02:44:88:f3:ee:07:a0:80:2a:bc:72:32:4b:49:9e:59:64:
         2f:b1:b9:67:66:e6:63:68:a9:03:1a:c8:06:18:ae:34:1c:b1:
         71:50:f4:a0:ed:b4:e7:3e:ee:c7:d0:ed:7f:12:bf:03:e4:60:
         d9:63:a7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 01:14:27 2025 by rpki-client