This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
File:                     C7PnOqi38K872EAFctrnKw1G9Vw.mft (raw, json)
Hash identifier:          5BlSKUYm+RRn+WMliUV3oI9SacEStM/I3bfkFp5WQHA=
Subject key identifier:   B7:F8:C9:F1:B8:A6:45:AD:B7:79:EE:9A:7B:C6:1A:F3:B8:EB:9A:FC
Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
Certificate issuer:       /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Certificate serial:       019AE6DFD55F42A5D566F54E326CA19C853D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
Manifest number:          0C31
Signing time:             Thu 04 Dec 2025 01:00:20 +0000
Manifest this update:     Thu 04 Dec 2025 01:00:20 +0000
Manifest next update:     Fri 05 Dec 2025 01:00:20 +0000
Files and hashes:         1: C7PnOqi38K872EAFctrnKw1G9Vw.crl (hash: EoIqr+4SlWxTKPFnSHi4nBMrhxQrtiqEsuuYphswY+A=)
                          2: GhTmp19MKGrha68k8FSg5O3MOXs.roa (hash: msOVTHZ3+no8UhxlXFgsYby23Ic3zy+iOJwGwYJ533I=)
                          3: Im4zxAMioTMqKC_fblhr89BdW9U.roa (hash: PwyZcrDl2J3l1qTk1V9UdAnL8AN0a6ZWTpBERNBo1l8=)
                          4: MumbOUHt0sHDCso0-2Ld1ziw4ko.roa (hash: Wd99B13Tv2rYBvmAX16EYI4hqMJzUtPVIMZe+9Oq6HU=)
                          5: aubQYKYuI6MIHGp2nchWjbFhUU4.roa (hash: 2F+ILSELYXvb+ZAKX5VNzDJvloBcFe6YEc5yS5L5tl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 00:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e6:df:d5:5f:42:a5:d5:66:f5:4e:32:6c:a1:9c:85:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
        Validity
            Not Before: Dec  4 01:00:20 2025 GMT
            Not After : Dec  5 01:00:20 2025 GMT
        Subject: CN=b7f8c9f1b8a645adb779ee9a7bc61af3b8eb9afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d5:19:c9:d2:34:26:d5:f6:35:32:0f:2d:01:
                    03:dd:32:24:9b:c3:c3:14:75:f8:bd:12:07:cc:05:
                    64:fc:b7:1c:d0:68:90:a0:da:db:45:db:c4:e2:7a:
                    b6:a5:91:ba:c4:44:40:65:a2:1c:5f:82:71:41:40:
                    e8:43:88:b3:ae:d4:00:c3:5e:7f:56:ba:a1:22:c1:
                    73:3b:c8:c2:8b:e2:aa:f3:cd:fe:4f:ca:fd:b8:0f:
                    2a:3b:dc:18:e5:df:0c:0d:26:70:4e:4b:78:b1:64:
                    c3:e1:a9:24:3c:d4:43:90:33:90:76:cc:e3:4c:a4:
                    e9:21:aa:9a:cd:87:ef:83:63:f3:51:c8:9d:45:16:
                    5b:71:53:1b:bf:86:25:f4:fc:e7:34:d4:23:4f:93:
                    d2:e3:b0:12:d7:42:76:dc:f6:be:2b:2e:ff:49:23:
                    4a:79:f3:ae:9b:45:33:94:eb:5f:ea:dd:1c:75:7a:
                    c1:e1:0e:24:c7:fb:e2:99:0d:16:af:2e:8c:12:93:
                    c9:65:10:97:78:c1:d6:0a:84:21:57:b4:e8:8b:df:
                    f5:8a:c5:96:9b:1a:17:76:95:bd:a8:db:4f:94:78:
                    3b:20:b0:bf:24:06:cc:b4:6d:ed:76:bf:3f:5e:22:
                    eb:10:0c:eb:85:b6:cf:26:3d:ec:1f:d2:7c:d7:bc:
                    0a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F8:C9:F1:B8:A6:45:AD:B7:79:EE:9A:7B:C6:1A:F3:B8:EB:9A:FC
            X509v3 Authority Key Identifier:
                keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:6b:a3:29:13:8c:2e:e7:eb:7c:bf:ae:e1:2b:f2:84:5a:1f:
         e7:89:b9:67:35:cc:82:8f:0e:f9:5d:24:47:d1:9c:f8:bf:63:
         0c:48:1e:a6:99:9c:62:e0:46:d1:a3:43:1d:85:8e:4b:4c:c5:
         2c:01:b0:89:20:73:c2:8e:3b:10:32:9b:c9:f6:ce:54:20:5e:
         5b:3d:f2:8e:06:01:2b:55:cc:3d:84:db:5c:e4:ba:59:05:bf:
         be:e9:8e:39:90:e7:a6:72:c7:01:3d:55:17:e4:aa:a0:38:c4:
         6d:ed:8b:f8:2c:a0:1f:df:c8:39:02:16:cc:05:64:5e:00:0e:
         99:3f:ce:c3:4b:da:e1:90:cb:8c:18:f5:64:51:3c:dd:38:bd:
         64:63:c4:49:a0:45:cb:bb:15:b2:a0:77:c4:c2:7c:d4:9b:a3:
         6c:d2:e8:00:c9:23:44:d3:e4:b6:60:af:3c:dd:ed:35:49:04:
         24:90:e2:8a:65:42:a8:6f:17:9d:f5:ae:06:4c:33:f9:02:23:
         5a:74:d9:c4:ab:b0:68:01:21:5b:20:ee:3b:4b:cd:ca:5c:26:
         15:a4:06:9c:f2:01:de:06:ce:1d:da:9a:f2:d8:ab:55:c7:9e:
         78:5f:9a:98:67:d1:dc:86:cb:73:33:ed:f1:39:51:ec:11:ad:
         65:9b:d9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 06:36:37 2025 by rpki-client