This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
File:                     7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft (raw, json)
Hash identifier:          kiIRXTFEDFxZiH1fx70e8fiJxarsNSmFv3Ew+ipqX2M=
Subject key identifier:   60:A8:44:7C:D7:9B:32:F7:39:40:72:E4:6B:C2:33:E7:DD:30:4A:A0
Authority key identifier: EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
Certificate issuer:       /CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Certificate serial:       019B0E92C1F170580AE34460465087F9A2B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
Manifest number:          13B0
Signing time:             Thu 11 Dec 2025 18:00:57 +0000
Manifest this update:     Thu 11 Dec 2025 18:00:57 +0000
Manifest next update:     Fri 12 Dec 2025 18:00:57 +0000
Files and hashes:         1: 7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl (hash: 3gLWn1RfMbY7/IUp+45TS96I7EPfUpwhzkscifnWWd4=)
                          2: UHZDSCwg4-DjCTw2ThSV9YMjtY8.roa (hash: yjuNgWENrQcHvxeDeJWLJxEQH/+1ANaZxCVsNSQeLLY=)
                          3: iXVDb19kvukiKPCGR7Xk4m4waFo.roa (hash: doLRr6Uuft22RZholuz/UG1fqLztwMyrNWgGHx261cM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 18:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0e:92:c1:f1:70:58:0a:e3:44:60:46:50:87:f9:a2:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
        Validity
            Not Before: Dec 11 18:00:57 2025 GMT
            Not After : Dec 12 18:00:57 2025 GMT
        Subject: CN=60a8447cd79b32f7394072e46bc233e7dd304aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:02:41:d5:01:72:b1:71:3c:0e:83:23:52:c4:
                    be:b1:95:e8:f2:67:7f:dc:89:f7:88:34:94:86:37:
                    43:c5:60:51:6b:ac:61:1c:01:0b:be:fc:e8:8b:ef:
                    95:cd:58:49:33:f1:8a:91:61:ea:8f:fb:9f:e9:eb:
                    bc:0f:55:c1:2d:c8:1e:d1:3b:ae:07:9c:2e:ba:3c:
                    af:e3:f9:04:f6:91:00:e3:71:cd:63:73:73:51:d1:
                    c4:ab:cd:96:c1:bc:e6:03:f3:d4:d4:b3:bd:2d:ca:
                    3d:ad:61:fd:41:72:3e:2a:29:fb:75:c9:31:30:9e:
                    70:72:30:e3:35:a9:12:ee:1c:1f:29:e1:f8:c5:b1:
                    a3:91:c1:6d:cf:b3:6f:31:c7:e8:40:16:02:a9:67:
                    47:0c:57:40:d0:05:6c:96:c4:3b:ba:cb:3c:75:42:
                    77:cb:64:ff:39:6e:7e:4a:7c:13:40:46:81:97:00:
                    71:c5:43:31:f1:5c:a2:74:4b:27:c6:fb:72:bc:c8:
                    3b:c3:25:0f:e7:b0:4e:d7:8c:9d:38:d5:c3:96:12:
                    fb:71:e0:81:e2:0b:b6:db:95:13:d4:68:c3:d5:4d:
                    83:dd:fe:a2:71:1a:62:c4:b6:54:6e:c7:cd:f1:6e:
                    48:ab:4e:32:42:5f:96:6c:6c:80:76:89:4f:29:1e:
                    6f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A8:44:7C:D7:9B:32:F7:39:40:72:E4:6B:C2:33:E7:DD:30:4A:A0
            X509v3 Authority Key Identifier:
                keyid:EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d1:d1:15:9d:ed:f7:40:78:2b:cc:8f:74:3b:1c:7f:58:66:
         b3:b4:35:e9:80:14:2a:ca:4e:c6:0e:5f:92:31:65:e5:4f:f8:
         e5:55:52:8d:ee:a1:c2:5d:4e:a2:e4:6e:2d:05:c1:8d:01:de:
         4b:15:8f:67:c4:86:fd:70:fb:cc:b2:71:03:06:03:be:05:ad:
         21:85:e6:2f:41:c6:39:7c:e4:39:30:e5:4a:97:f9:ce:7e:a5:
         77:83:85:5f:8a:98:4c:32:d0:11:6c:42:89:ad:9f:8e:9c:ec:
         28:a2:c0:46:f5:aa:92:a8:36:b5:dd:2b:09:5b:70:8b:34:68:
         14:e8:b0:b0:6a:04:3c:6c:0d:13:d0:ec:25:cc:0a:60:b4:39:
         83:96:8e:9c:49:e1:8b:3b:7b:bb:de:c2:a8:43:31:e2:05:6e:
         54:41:93:31:63:e6:f4:a3:77:8b:ae:6d:d0:7b:48:e9:bb:77:
         c5:b3:ea:e0:aa:36:ce:d0:cb:8f:80:21:d5:d9:f7:64:3f:fc:
         f7:10:1a:33:9c:73:a7:b6:bb:7f:f1:1f:6c:8b:e7:a9:4c:f6:
         26:7e:fc:79:7b:e2:36:ce:77:2b:c2:83:af:3d:39:0d:07:c6:
         c7:cf:87:e5:0f:4e:e4:a5:fe:13:d3:26:67:79:42:44:e7:25:
         e6:16:af:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 02:56:50 2025 by rpki-client