This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
File:                     7PT52zCxnHXjWugDeT9OG0qqFIc.mft (raw, json)
Hash identifier:          OoAYDaYIZKSmPw4QW5QrXq7N6yLvvsswuRvvbMtiAVw=
Subject key identifier:   7A:CA:3E:35:E8:54:F5:77:56:D1:0B:A4:72:B1:25:EB:19:2A:DB:4F
Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
Certificate issuer:       /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Certificate serial:       019B240811F17F3EBF222102C3AC13915B74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
Manifest number:          14FC
Signing time:             Mon 15 Dec 2025 22:01:06 +0000
Manifest this update:     Mon 15 Dec 2025 22:01:06 +0000
Manifest next update:     Tue 16 Dec 2025 22:01:06 +0000
Files and hashes:         1: 7PT52zCxnHXjWugDeT9OG0qqFIc.crl (hash: C5V7HVFUzGIsJXcafCSQcBTzxVdWpADezCDQfPaPUWw=)
                          2: o1owePWPwjNd3b3qg8Jnc7YGiQI.roa (hash: GgOViLOKaFjeEtIxQ5QnUpa+EnCLoFvMT0viAqTgppE=)
                          3: tgXHz8gzde8nL8u9-odgzdtG_tY.roa (hash: XKoajYu1GkfOpe/YbTcjXkoO85ZZDvBPigMPOST+e6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 22:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:24:08:11:f1:7f:3e:bf:22:21:02:c3:ac:13:91:5b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
        Validity
            Not Before: Dec 15 22:01:06 2025 GMT
            Not After : Dec 16 22:01:06 2025 GMT
        Subject: CN=7aca3e35e854f57756d10ba472b125eb192adb4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bd:0b:a9:3f:72:bb:99:e1:c4:53:ab:09:08:
                    49:69:fb:ef:f4:d0:77:0b:dc:9e:5e:a0:21:7d:c5:
                    f0:3f:e8:b7:31:2e:8b:83:6b:57:7c:a9:1c:86:7c:
                    97:47:09:1b:87:f2:37:e7:2c:05:e0:e9:9c:60:f6:
                    8a:99:92:ba:b9:8f:ae:80:e4:ed:30:88:83:6b:34:
                    f8:a0:8e:98:39:08:38:17:f5:58:77:85:2b:96:5d:
                    87:fd:d5:e5:10:7a:88:f7:eb:33:38:e2:8f:4f:43:
                    d2:50:50:a2:26:e3:46:30:02:6e:c4:83:25:71:cc:
                    1a:a7:0b:5d:a6:03:a8:e1:c0:80:5d:fa:df:62:79:
                    39:af:15:3a:8d:4d:df:b9:1d:0a:fe:bb:9b:d1:2a:
                    47:b7:ac:34:6f:be:c2:fb:74:b0:d2:ac:bd:97:ec:
                    36:92:83:9d:a3:d4:b9:1f:51:a0:ab:84:4e:a8:09:
                    4c:f4:9d:db:1f:35:ba:41:92:84:86:de:ad:25:c2:
                    ab:6e:a0:b5:90:2f:b8:4c:21:6d:7d:73:52:47:be:
                    75:6b:58:b7:ea:64:cb:84:ba:d9:72:fc:f1:39:04:
                    2f:4e:90:5a:2c:c6:8d:ab:a8:02:f0:31:10:ea:14:
                    c5:c8:da:9c:b0:d1:ef:1b:ed:a6:3a:9c:03:9f:fa:
                    bd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CA:3E:35:E8:54:F5:77:56:D1:0B:A4:72:B1:25:EB:19:2A:DB:4F
            X509v3 Authority Key Identifier:
                keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:25:4b:a0:73:63:64:97:35:ce:2a:83:a3:51:98:44:97:60:
         aa:a6:86:24:c0:81:82:a8:6a:38:d5:06:4b:d2:1e:21:fa:dc:
         3a:77:68:2e:54:85:8f:b4:29:c3:d2:91:1b:1a:a4:1b:b9:b8:
         80:80:3d:44:06:73:b2:c8:33:e2:23:87:1a:bb:30:b6:81:58:
         b4:7e:ff:5c:23:39:50:89:d1:17:cd:8f:7a:b3:3c:e4:60:d9:
         22:be:c6:69:90:14:7c:cd:96:87:32:af:24:bd:21:88:ee:b1:
         a4:a2:68:f4:7c:60:8c:2e:6a:99:3f:b7:7a:2e:ed:77:80:9b:
         7c:1b:db:a6:c5:80:bc:9c:a9:98:52:97:a5:3e:c6:ff:43:03:
         2a:ef:c4:bc:81:19:ee:7a:7f:76:8d:e4:c3:a4:b9:e1:a2:e2:
         c3:e7:59:27:2d:1b:bd:2f:f8:fb:ff:31:db:b4:74:23:3e:b9:
         b3:1d:2e:ad:eb:fa:7f:d2:5f:7a:68:43:52:3d:9f:32:6f:b3:
         90:d4:f4:5a:d4:02:1a:e0:40:b5:9c:1c:0d:aa:d5:e4:e0:f8:
         77:fc:cc:8d:fa:ff:40:48:e5:d4:7c:e1:56:40:20:dd:7d:ae:
         49:53:2d:1f:8d:05:6c:65:3a:41:29:38:68:f7:bf:94:93:c6:
         6f:07:57:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 06:35:30 2025 by rpki-client