This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
File:                     cI7ctL7wrwFvBYdt285M0kx9968.mft (raw, json)
Hash identifier:          VdYFuLPfqgRXgP7WUmVOs6xvCOsmmZpmdQMSgmRw0Yk=
Subject key identifier:   F0:A6:01:7D:63:04:94:02:F9:47:AE:ED:57:3B:B7:2F:E7:7E:8D:33
Authority key identifier: 70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
Certificate issuer:       /CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Certificate serial:       019B40C85F188EAD58675EB425F61C9E47DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
Manifest number:          05AF
Signing time:             Sun 21 Dec 2025 12:00:31 +0000
Manifest this update:     Sun 21 Dec 2025 12:00:31 +0000
Manifest next update:     Mon 22 Dec 2025 12:00:31 +0000
Files and hashes:         1: cI7ctL7wrwFvBYdt285M0kx9968.crl (hash: kUkYKJKep07/pwPqdxhMasVRVSF+hd+qjSUu99o8+cY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 12:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:40:c8:5f:18:8e:ad:58:67:5e:b4:25:f6:1c:9e:47:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
        Validity
            Not Before: Dec 21 12:00:31 2025 GMT
            Not After : Dec 22 12:00:31 2025 GMT
        Subject: CN=f0a6017d63049402f947aeed573bb72fe77e8d33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:35:09:55:b6:b7:37:1c:df:d1:4a:39:e1:4b:
                    a4:a4:00:1a:f7:ed:53:0a:92:31:49:09:05:f1:a1:
                    7a:68:f1:22:a8:c3:77:a1:4a:df:d1:fe:91:a0:7e:
                    eb:21:e0:18:6b:06:92:9c:96:48:cb:f4:60:85:43:
                    3a:14:db:69:ed:9b:a4:36:ef:74:bc:16:bd:55:a6:
                    de:e7:da:11:09:65:42:bf:7d:60:59:c9:a2:89:c4:
                    d8:8a:5c:91:49:e9:99:67:e4:87:25:c4:72:2a:74:
                    9c:97:7f:d7:f9:2a:9b:72:5c:6b:7a:98:56:4b:c8:
                    94:7c:3f:2e:ff:7b:77:19:3c:a2:b5:95:b3:c3:4e:
                    7f:08:82:a1:da:dc:b9:97:af:7e:80:3d:54:4a:f4:
                    ff:e6:ea:25:98:d6:3c:03:ec:e8:87:61:96:65:f7:
                    92:67:ec:fb:48:65:cd:15:02:73:fb:6a:d2:9a:2d:
                    9c:e9:3e:c8:34:58:a2:f0:77:b2:e9:f1:ec:83:18:
                    89:8a:43:3b:6e:12:29:ec:5e:18:21:03:8b:82:28:
                    7f:d6:d5:19:af:c1:1c:68:0d:99:36:62:3b:00:8e:
                    92:cd:00:48:00:37:28:9d:37:46:3b:13:cc:e3:a9:
                    8b:08:90:ee:bd:b5:e6:db:fd:29:3c:8d:34:1b:e5:
                    b0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A6:01:7D:63:04:94:02:F9:47:AE:ED:57:3B:B7:2F:E7:7E:8D:33
            X509v3 Authority Key Identifier:
                keyid:70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:0e:ea:37:35:f0:46:59:c2:46:a6:5e:1b:8a:0e:9d:d9:00:
         f7:66:e3:69:c7:7e:56:45:6f:32:7f:7b:49:8d:23:d8:68:7b:
         fa:2d:16:03:6a:c2:fc:1e:c5:e5:64:ef:6b:05:ed:83:d5:d5:
         1c:d2:14:2b:f3:a1:1a:24:db:e9:5b:93:5c:3f:14:b9:7a:70:
         0d:7f:e1:4a:87:92:93:58:cc:0e:10:08:84:9d:64:31:c8:04:
         91:88:a8:43:a6:66:29:74:73:40:cd:d0:e5:19:e1:d9:b7:33:
         4b:da:73:67:e9:c3:96:7d:9b:f5:c9:b7:18:f3:8a:74:7d:ad:
         59:4e:14:07:22:f4:ce:af:0b:23:82:e4:a7:1c:71:af:39:9d:
         33:e5:ca:7a:2d:fd:fe:c0:0a:a3:07:fa:55:81:80:06:c6:b3:
         aa:6c:b4:08:60:c7:45:30:6c:df:ae:94:2d:e8:42:59:84:04:
         f9:7f:ca:31:48:0e:e4:cb:48:5e:c4:74:b7:48:34:c2:32:1b:
         2e:8f:6e:92:74:1e:0f:13:77:79:dd:e7:fa:34:b6:d4:f9:bb:
         1e:82:b5:97:de:cf:59:86:14:ce:74:02:ab:11:27:15:38:90:
         02:45:7e:f4:0c:f2:19:19:21:9c:45:e3:80:c4:4f:e2:f4:1f:
         ef:5b:eb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 15:40:35 2025 by rpki-client