This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
File:                     d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft (raw, json)
Hash identifier:          5hMDAN/0Be9Xu2us5RHWekgP6lZz/ZZFN0lzwZI1CVM=
Subject key identifier:   71:B7:8A:9D:49:43:CB:35:25:83:35:47:CD:D4:34:7D:D5:5C:1D:7F
Authority key identifier: 77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
Certificate issuer:       /CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Certificate serial:       019B19BC5BAB58F203A63DF993ACAC4A80A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
Manifest number:          137C
Signing time:             Sat 13 Dec 2025 22:02:13 +0000
Manifest this update:     Sat 13 Dec 2025 22:02:13 +0000
Manifest next update:     Sun 14 Dec 2025 22:02:13 +0000
Files and hashes:         1: LfrSVtlH9do-60_TEx27lHKNfrQ.roa (hash: TpFdLJ2bXCpVRx0+Pt6yo0AUPtighW1Vwfu+RYNR6uM=)
                          2: Y5oWWSqH2f4PzIF1caWpoS6C0uI.roa (hash: 1+Bd1mblfzXz4N7C24HyQvcSfHhcXd/iMBMWLlVj9RQ=)
                          3: d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl (hash: WXcE9/Q0pS4GxEMUEk0ZU97svPAlKueHtyQduaHUvcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:19:bc:5b:ab:58:f2:03:a6:3d:f9:93:ac:ac:4a:80:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
        Validity
            Not Before: Dec 13 22:02:13 2025 GMT
            Not After : Dec 14 22:02:13 2025 GMT
        Subject: CN=71b78a9d4943cb3525833547cdd4347dd55c1d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d4:54:48:c3:77:08:ba:77:6d:43:1a:f4:3d:
                    ad:44:7d:d2:db:92:ca:d0:70:e0:df:e5:cb:29:18:
                    b1:ed:c2:b9:2f:50:ff:b7:b3:31:87:a8:16:95:12:
                    e5:7c:28:66:48:77:bd:15:19:5c:64:e8:8f:f8:e2:
                    4e:46:4c:de:13:9f:ae:20:e9:b8:e9:66:a3:41:94:
                    04:3a:4a:07:a9:dd:ef:a4:e0:a9:7a:90:03:12:da:
                    5a:7e:b5:af:df:14:6a:08:1d:80:30:e4:cc:9f:4d:
                    43:fd:b5:5d:08:15:87:dc:f7:6c:e5:b7:0f:dd:88:
                    a5:ba:e2:ca:32:9a:1f:ee:5c:f1:ce:f5:48:03:30:
                    9c:5f:7f:61:87:c9:a4:dd:c2:21:d7:51:f3:08:ff:
                    bf:d4:ce:a9:ca:59:67:1e:6b:46:21:22:5f:d3:7f:
                    49:29:f5:94:a5:75:ce:52:37:b0:5f:07:59:f3:2b:
                    ef:a7:2d:97:e5:86:82:2d:e3:a8:08:8f:14:88:78:
                    72:b1:ba:80:ae:bf:65:bf:9d:f5:28:28:b1:d4:b0:
                    3d:b1:2b:18:76:2c:e5:47:3b:55:ac:0c:aa:7f:58:
                    f4:b6:9e:09:d6:77:a4:d8:6f:25:ce:08:a1:7c:44:
                    9f:ec:aa:20:6d:9f:12:46:56:33:16:7b:25:8c:75:
                    9a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B7:8A:9D:49:43:CB:35:25:83:35:47:CD:D4:34:7D:D5:5C:1D:7F
            X509v3 Authority Key Identifier:
                keyid:77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:4f:07:2a:1a:08:32:11:c5:fb:94:4b:76:90:78:ed:96:b9:
         f1:a0:f3:36:59:a8:a6:6e:ff:f9:d3:30:e8:de:7b:7d:9e:22:
         31:b0:de:a7:2d:22:6a:f9:4a:ea:84:b1:01:63:ad:d5:b6:76:
         48:a8:24:d7:b7:5f:8a:32:b7:6a:ca:19:7b:52:d5:e8:07:14:
         ee:93:eb:8e:91:ba:c5:02:8d:9b:6a:2c:b4:bd:60:e5:ca:f7:
         f5:1c:2e:73:35:d5:ba:2d:08:7d:f6:cb:02:56:d8:fb:f1:ff:
         cb:e8:20:cf:f9:08:64:be:2e:93:4f:96:cb:50:43:38:fb:a1:
         e9:77:25:a4:1d:e4:82:fd:92:14:7e:a8:f5:42:7c:9a:f6:5c:
         0b:43:10:d4:01:d1:ce:fb:f6:ef:f7:b1:4c:5a:ac:af:e2:7e:
         e1:72:db:cf:68:bd:cc:ce:3b:84:e9:de:e0:40:4e:25:aa:96:
         22:29:0d:65:8f:fe:18:f1:50:d7:40:67:c6:7d:ca:6d:ad:6b:
         33:ee:23:0d:81:79:c9:27:68:86:f6:eb:24:28:4e:5b:ff:ef:
         4c:4f:2d:59:67:a0:be:ba:f4:a6:4f:e8:51:3c:e8:33:4b:9a:
         35:1a:c2:5b:a7:66:1e:0a:fe:a2:5a:0b:72:db:83:18:35:ff:
         ca:65:9b:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsZvFurWPIDpj35k6ysSoCpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZThiYmY4NjQzYWJkNjJmZjNmNDJiZWM0YzBiMmRiOTc3
NTk2ZDcwHhcNMjUxMjEzMjIwMjEzWhcNMjUxMjE0MjIwMjEzWjAzMTEwLwYDVQQD
Eyg3MWI3OGE5ZDQ5NDNjYjM1MjU4MzM1NDdjZGQ0MzQ3ZGQ1NWMxZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdRUSMN3CLp3bUMa9D2tRH3S25LK
0HDg3+XLKRix7cK5L1D/t7Mxh6gWlRLlfChmSHe9FRlcZOiP+OJORkzeE5+uIOm4
6WajQZQEOkoHqd3vpOCpepADEtpafrWv3xRqCB2AMOTMn01D/bVdCBWH3Pds5bcP
3YiluuLKMpof7lzxzvVIAzCcX39hh8mk3cIh11HzCP+/1M6pyllnHmtGISJf039J
KfWUpXXOUjewXwdZ8yvvpy2X5YaCLeOoCI8UiHhysbqArr9lv531KCix1LA9sSsY
dizlRztVrAyqf1j0tp4J1nek2G8lzgihfESf7KogbZ8SRlYzFnsljHWa3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHG3ip1JQ8s1JYM1R83UNH3VXB1/MB8GA1UdIwQY
MBaAFHfou/hkOr1i/z9CvsTAstuXdZbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZC1pNy1HUTZ2V0xfUDBLLXhNQ3kyNWQxbHRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iODcwZTctN2YxZS00OWNlLWIxZjkt
NDRjY2QxYjUxZjEwLzEvZC1pNy1HUTZ2V0xfUDBLLXhNQ3kyNWQxbHRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iODcwZTctN2YxZS00OWNlLWIxZjktNDRjY2QxYjUxZjEw
LzEvZC1pNy1HUTZ2V0xfUDBLLXhNQ3kyNWQxbHRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKU8HKhoI
MhHF+5RLdpB47Za58aDzNlmopm7/+dMw6N57fZ4iMbDepy0iavlK6oSxAWOt1bZ2
SKgk17dfijK3asoZe1LV6AcU7pPrjpG6xQKNm2ostL1g5cr39RwuczXVui0IffbL
AlbY+/H/y+ggz/kIZL4uk0+Wy1BDOPuh6XclpB3kgv2SFH6o9UJ8mvZcC0MQ1AHR
zvv27/exTFqsr+J+4XLbz2i9zM47hOne4EBOJaqWIikNZY/+GPFQ10Bnxn3Kba1r
M+4jDYF5ySdohvbrJChOW//vTE8tWWegvrr0pk/oUTzoM0uaNRrCW6dmHgr+oloL
ctuDGDX/ymWbrw==
-----END CERTIFICATE-----
Generated at Sun Dec 14 03:48:40 2025 by rpki-client