This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
File:                     7x8BiBtzyOm12SI5IppuUS7KTnw.mft (raw, json)
Hash identifier:          iIukJkrFvoSpQQViSHhzmRTdvOzPiYi3jJ1X8BMWg/E=
Subject key identifier:   6E:8F:B3:07:16:85:5B:72:A8:AE:FD:69:9E:25:38:A0:AA:50:BE:7A
Authority key identifier: EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
Certificate issuer:       /CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Certificate serial:       019B074782F073C01787D2C1AF2B59B35E25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
Manifest number:          176C
Signing time:             Wed 10 Dec 2025 08:01:25 +0000
Manifest this update:     Wed 10 Dec 2025 08:01:25 +0000
Manifest next update:     Thu 11 Dec 2025 08:01:25 +0000
Files and hashes:         1: 1vUfYa7ohoVbSwGgaxISYNQJ4rU.roa (hash: wuJzjrI9EaOKpfz53i0KZN8DZtLqoyJbku8WdDvpazs=)
                          2: 7x8BiBtzyOm12SI5IppuUS7KTnw.crl (hash: XonzGddN7C4c7tklEP95ydgzJX572zSmGyzj+7l37TY=)
                          3: Fvx_jJCdTF_pvu2LbWU3LmH0H8o.roa (hash: cMc5/+uI8EwNJg30oKHwLh7pnaj9wAcQ3DWjnpzREXo=)
                          4: UAMozedMddnvbaHXdpt5f_TDvZE.roa (hash: C7OBU+9hOWyvCkQ42eXork8FUbOcNdFjL8raQWMxSpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 08:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:07:47:82:f0:73:c0:17:87:d2:c1:af:2b:59:b3:5e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
        Validity
            Not Before: Dec 10 08:01:25 2025 GMT
            Not After : Dec 11 08:01:25 2025 GMT
        Subject: CN=6e8fb30716855b72a8aefd699e2538a0aa50be7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b5:6a:d0:e3:4b:54:fb:21:93:60:c9:ce:de:
                    7d:8f:8e:7f:c5:63:3c:a0:3c:1e:f5:d6:80:85:63:
                    e1:6d:e8:e0:5f:41:ef:f3:db:a8:84:c0:b2:df:d8:
                    b0:72:f0:cc:09:0c:d8:b4:70:94:82:89:25:be:40:
                    2b:a3:5c:76:d9:43:09:93:ff:04:59:99:f9:dc:3d:
                    d3:d9:bb:44:bc:59:10:7d:7a:20:2d:52:96:33:2a:
                    16:c4:c9:5d:31:38:a4:c9:75:60:7b:9e:82:7d:0e:
                    7a:de:97:9e:a7:bc:cb:4b:35:19:07:c1:8c:a3:aa:
                    32:62:e5:4f:f6:b6:3e:84:41:73:23:a3:8e:41:23:
                    00:86:23:cf:bb:74:08:a2:0d:12:a9:43:93:e5:9e:
                    0e:f3:e9:50:6a:9a:2f:1c:7f:62:e3:f0:1d:50:c6:
                    aa:45:50:08:8d:bf:80:3d:63:66:15:d3:52:69:e0:
                    0b:64:4c:0b:5a:3d:9e:c7:cb:af:b0:b2:b2:22:16:
                    e1:e4:11:b6:79:6a:7f:43:fe:7c:63:cc:2c:c7:72:
                    5a:35:db:6e:b0:4c:f3:20:1b:a0:0a:09:d6:11:8c:
                    22:d8:3a:39:10:6f:52:d9:7b:40:c7:73:04:71:c3:
                    43:e7:52:7f:89:08:b0:e8:af:48:08:7e:e0:fa:a8:
                    db:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8F:B3:07:16:85:5B:72:A8:AE:FD:69:9E:25:38:A0:AA:50:BE:7A
            X509v3 Authority Key Identifier:
                keyid:EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:64:a8:c4:a9:bf:e7:c7:95:00:76:7f:38:f7:95:8c:5b:98:
         c9:9c:09:3e:ce:4a:4d:ef:a1:e6:44:0c:84:f3:47:6f:fc:ff:
         82:26:a8:37:43:1d:82:85:24:a9:c2:9c:b8:3e:ff:2b:f5:dd:
         4e:30:0f:9e:14:14:f4:37:09:5c:20:5e:e9:ff:97:da:fc:13:
         0e:f5:1a:95:cb:0b:3d:2f:f2:f0:32:84:6f:f0:a7:d2:08:38:
         ee:9a:ae:22:99:87:ad:18:4b:6e:d0:81:35:53:1d:0d:45:c9:
         ed:8d:ff:c2:ce:e2:65:ac:63:d2:67:96:b6:24:03:e6:7f:de:
         9b:c8:9c:5f:9f:95:b1:1f:0a:6b:e8:b8:47:1c:05:99:5b:96:
         5b:1f:d8:b0:bb:b8:61:0f:12:30:2f:9c:c5:c6:fe:26:cc:a1:
         80:73:d0:09:59:1a:8d:0a:1b:6c:9a:91:e0:65:d2:b0:d1:37:
         8d:b0:c9:b1:d8:c0:60:63:36:35:c2:f1:44:ff:c5:74:f6:38:
         c1:a5:c1:7b:72:9c:86:ef:d0:40:21:2d:72:79:50:8d:d1:a9:
         5f:b3:87:78:07:a2:03:ca:ad:3e:87:45:38:5d:1a:51:bf:b6:
         cc:b3:a2:f3:66:fb:2d:a7:d6:87:ba:bf:fb:a1:7e:6e:9a:25:
         1c:94:9e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 13:36:22 2025 by rpki-client