This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
File:                     rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft (raw, json)
Hash identifier:          a5tjU2F8FecOAJsfrSZF7Evlw//BFEisBvt+IZlp/JA=
Subject key identifier:   73:6B:01:BC:71:C2:89:C7:49:07:DD:2F:EF:3F:7B:17:16:13:4C:F2
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Certificate issuer:       /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial:       019B23D13B0BEE0CBAA18E0D97EC176237A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
Manifest number:          17ED
Signing time:             Mon 15 Dec 2025 21:01:13 +0000
Manifest this update:     Mon 15 Dec 2025 21:01:13 +0000
Manifest next update:     Tue 16 Dec 2025 21:01:13 +0000
Files and hashes:         1: EkAtT1wisUb57TFJYIYcJsxKwsk.roa (hash: bTDaJJ3OE5tSiwj9edVtEIcHo7Qfr7K+HpTgz6mXWHU=)
                          2: H401Lqlj2gbFoYf6OtBoSN06cFw.roa (hash: vYELwnReHKGr6B9/fDrX/dIYrSBT2mFYuU7np1Kq32A=)
                          3: J32BC54TOUps-dXCn8BI2QcAuAk.roa (hash: fXhrWHP614GKDcqvfN3gZvjxypp00BlLNxmxyn4+I4c=)
                          4: M3stNuz4pD7ZjpMskqzv9XlCj9A.roa (hash: NMOxvF7KRmh06hpPpSGd+qY4LB/onM0QHYCbQ+IenlY=)
                          5: rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl (hash: Q40J8yR6oHsu8ObE6H+tGC2lC7lt/6uMnBI6Xomt6uA=)
                          6: wuzH2my_mYDAlouZ5aRNnbo5Kzg.roa (hash: 8mZfF16h11ohkGa7jPqqzWnLZjCYH45hphmVsvoXp/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 21:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:23:d1:3b:0b:ee:0c:ba:a1:8e:0d:97:ec:17:62:37:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
        Validity
            Not Before: Dec 15 21:01:13 2025 GMT
            Not After : Dec 16 21:01:13 2025 GMT
        Subject: CN=736b01bc71c289c74907dd2fef3f7b1716134cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d6:d1:67:4a:1f:5b:c5:18:d2:b1:68:e1:61:
                    00:f0:1a:6d:60:ea:fa:c2:77:db:9a:2a:3d:cf:0a:
                    8f:27:a2:f6:5d:2d:f2:15:a6:75:f9:40:1e:fa:9b:
                    73:b7:e7:55:6c:b1:f5:b5:52:30:23:98:38:ae:f7:
                    8f:8a:9c:0a:b8:17:4d:5f:61:b9:65:b0:90:1e:a8:
                    4c:e2:cd:14:14:73:d4:e8:e2:9f:ad:38:db:29:54:
                    07:be:91:1e:15:c9:a8:63:dc:2e:c3:10:32:5c:ce:
                    4e:56:38:f9:4d:b3:f6:fb:7b:29:7d:6e:f3:ad:d5:
                    50:ac:13:92:63:47:dc:cd:01:68:f9:c3:44:3b:18:
                    d4:7e:37:cd:c6:dc:68:ab:ba:a3:cc:ba:20:b1:ba:
                    2e:9b:bd:1e:1f:40:a7:86:00:4e:59:b0:3c:44:18:
                    ba:a0:e4:f9:30:9a:f6:29:ae:f9:d7:48:ef:45:87:
                    a8:fa:b0:a5:08:1e:a9:b9:9d:87:31:8e:7d:7c:28:
                    cd:40:24:eb:cb:64:5e:8e:4f:b1:5d:c4:99:2a:83:
                    bc:65:fd:ba:20:d7:a1:47:b1:76:67:68:0a:08:57:
                    ad:b3:95:5e:bd:64:c8:41:4e:d5:f8:ca:8b:bc:7e:
                    00:07:aa:60:1a:31:3a:7b:7f:0e:3f:d2:30:dc:3a:
                    37:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6B:01:BC:71:C2:89:C7:49:07:DD:2F:EF:3F:7B:17:16:13:4C:F2
            X509v3 Authority Key Identifier:
                keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:06:30:ec:e2:19:0d:20:c2:b5:29:f7:28:03:a2:67:4a:e0:
         e4:86:ef:8c:3b:36:d3:fa:9c:04:27:2a:90:57:6a:2e:29:f0:
         56:30:ac:00:c4:b8:25:f1:e9:f0:16:a8:74:15:44:b4:bb:46:
         64:70:0d:85:70:9e:3a:4d:e4:a0:ad:cf:27:ae:07:73:00:8b:
         8f:96:dd:5e:79:0f:ee:3c:d4:b2:fc:e5:3b:00:ee:0e:0e:9a:
         fb:1a:76:ae:8b:af:98:a3:92:63:be:34:64:10:11:d5:82:eb:
         6e:42:45:80:d4:2b:0d:46:2b:61:f3:b5:d3:c5:eb:09:dd:99:
         84:2c:37:75:b3:80:41:ad:31:f4:a8:0f:7f:c0:d5:83:36:4f:
         5e:fa:dd:7e:29:70:2e:8d:27:f6:16:98:d3:9e:f9:cb:01:8f:
         28:5b:16:67:bd:95:9f:e6:b9:10:d0:1a:63:45:bc:d8:fb:bc:
         7c:cb:b3:f4:47:1c:e7:62:5d:64:79:c7:4a:a0:e7:01:ea:2b:
         36:3d:de:a0:dc:13:0a:1d:ce:ab:5c:38:ce:34:07:09:0e:f5:
         61:bc:8b:3b:05:e0:80:20:80:72:a2:24:7b:b8:11:8f:fd:b1:
         3c:58:f3:1f:02:69:dc:87:a2:62:aa:be:3f:a7:ce:f5:c2:5b:
         0f:f7:c2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:08:15 2025 by rpki-client