This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
File:                     k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json)
Hash identifier:          L8haU/rMvWl4nX7DVwnZmHgl1dYAU2IJZCga14OizQA=
Subject key identifier:   47:2B:2E:B6:D7:C9:FA:8B:7A:6E:0D:31:A0:9A:94:0F:08:89:49:B8
Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
Certificate issuer:       /CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Certificate serial:       019B33B1CBDE942BE182C26F37657FEA6401
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
Manifest number:          0E68
Signing time:             Thu 18 Dec 2025 23:00:48 +0000
Manifest this update:     Thu 18 Dec 2025 23:00:48 +0000
Manifest next update:     Fri 19 Dec 2025 23:00:48 +0000
Files and hashes:         1: 1QST1OPlWGgU_KfeCd6-eSc5Fws.roa (hash: 0IX3SPWo/YRidApWFZTcBmj27iQz+V20vqeZhxHtpTk=)
                          2: UOcYa9_wijcIRHEowaEFsvhzcW4.roa (hash: tUwVIAhXZ1HVd/+8k4HpFkWguLhngA3Bv+h1B/N8dK4=)
                          3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: +YgR7IhL6DNMqFz1OAUuPGP2V8creyk5k2N2nb0RrkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:b1:cb:de:94:2b:e1:82:c2:6f:37:65:7f:ea:64:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9
        Validity
            Not Before: Dec 18 23:00:48 2025 GMT
            Not After : Dec 19 23:00:48 2025 GMT
        Subject: CN=472b2eb6d7c9fa8b7a6e0d31a09a940f088949b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:db:05:69:88:0e:25:91:d2:63:e0:98:bd:6c:
                    e1:87:62:8f:b7:37:f0:dd:17:81:ef:bc:72:7e:68:
                    0e:e2:8d:ac:9a:0e:ed:7b:d9:29:aa:ff:d8:9b:c5:
                    5f:14:58:59:73:f8:68:21:71:1d:e3:6e:cc:58:10:
                    a2:6c:1a:4e:87:e6:18:12:13:2b:02:0b:0b:ce:ff:
                    88:95:8a:19:ae:ba:8d:4f:38:c9:dc:9d:66:de:49:
                    33:fd:c9:6e:a8:cc:77:eb:57:4b:cd:b6:0b:09:87:
                    6a:3a:bd:aa:3c:26:8c:42:d2:ff:c4:29:40:7e:16:
                    1e:29:06:5a:aa:79:63:3e:4e:ec:fa:c2:91:08:d4:
                    5c:df:74:a7:c6:6c:5c:fb:38:9e:98:7c:88:11:1e:
                    e6:d3:30:98:3a:86:0c:1b:03:11:76:dc:8d:b3:68:
                    fa:f4:95:6a:2b:e1:55:02:d8:e7:fc:9d:d0:c6:68:
                    b8:ee:d8:21:1a:69:90:08:fd:d3:a7:ee:eb:04:5e:
                    4e:0c:25:a8:e9:8e:37:00:6c:53:62:03:51:df:ac:
                    67:45:92:80:0c:80:3f:3f:b6:c5:bd:cf:5a:98:9d:
                    a8:4e:d0:5b:65:a9:24:8c:be:ca:c7:7e:c5:6d:47:
                    10:f7:ed:ad:b8:d8:93:e1:c4:e6:16:bf:eb:e1:fb:
                    a5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2B:2E:B6:D7:C9:FA:8B:7A:6E:0D:31:A0:9A:94:0F:08:89:49:B8
            X509v3 Authority Key Identifier:
                keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:80:56:88:ec:4f:c1:a7:79:14:44:2f:57:83:0c:c3:d3:97:
         62:4c:55:09:34:b5:a1:a7:c9:0d:5c:58:73:0e:8b:b8:6e:4e:
         ae:e0:1c:e4:79:64:6c:8a:ef:ec:35:f5:62:10:2f:a1:91:47:
         39:fd:69:69:fd:bb:10:24:d6:1a:5a:1e:7e:92:80:53:43:38:
         51:73:84:9d:27:68:cc:54:31:86:c0:5d:48:20:1a:02:c2:91:
         bb:2c:1e:39:46:9b:d0:6a:1f:38:cc:a4:75:3a:bb:45:a5:db:
         39:f9:d4:38:8a:8e:35:1e:63:f8:95:c8:1b:a2:43:67:2e:8a:
         f4:d3:54:8b:b1:f5:33:32:7d:05:12:15:9c:d8:1b:5f:83:ab:
         0f:99:c7:53:87:47:87:4b:1c:d8:12:21:f4:12:1a:a0:60:ff:
         cb:28:18:d6:2a:d4:27:17:bb:24:81:b6:15:44:2e:5e:97:5b:
         a7:ab:b5:00:83:1f:d5:b4:15:95:68:75:b7:7b:db:1d:82:3d:
         b8:33:62:f2:23:15:d4:ed:e4:bf:dd:90:2b:e6:f0:d1:39:17:
         60:36:48:56:6a:ed:c5:63:3d:fc:60:a1:0f:3d:d6:e7:1d:fe:
         ba:3c:62:c5:c9:67:9d:87:b5:5d:bf:59:dc:7a:a6:e1:ab:2c:
         bd:20:42:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:10:17 2025 by rpki-client