This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
File:                     7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft (raw, json)
Hash identifier:          HtYXOr1/Z1xuUjr4mMbDx8ubgyaMjSI0qwupIyS3tEs=
Subject key identifier:   CD:7D:85:45:39:A5:22:91:3C:4E:58:FC:15:AD:44:8B:DD:CF:07:CC
Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
Certificate issuer:       /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Certificate serial:       019B6B0DC29210F48BFBEBDC3799ED719CA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
Manifest number:          06F1
Signing time:             Mon 29 Dec 2025 17:00:22 +0000
Manifest this update:     Mon 29 Dec 2025 17:00:22 +0000
Manifest next update:     Tue 30 Dec 2025 17:00:22 +0000
Files and hashes:         1: 7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl (hash: 5X+32WY9bWgZ3yi6UFFav1e8JRSbIlhsHa2degRraNQ=)
                          2: V8rwHt-KBtkyfMDcY6GbBS5O3lg.roa (hash: VKRjbMp2cA/7F+gIKAoYPT0t4kmN1vcNg+P5YqdMBPI=)
                          3: vLkg6vsM00eiYmKWC5SDs25Gs0o.roa (hash: laQ0wIfMQs3t8Q/rYbMaQJvlRI3pM205xGMs2yoH4OQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Dec 2025 17:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6b:0d:c2:92:10:f4:8b:fb:eb:dc:37:99:ed:71:9c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
        Validity
            Not Before: Dec 29 17:00:22 2025 GMT
            Not After : Dec 30 17:00:22 2025 GMT
        Subject: CN=cd7d854539a522913c4e58fc15ad448bddcf07cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:da:17:5d:3e:bb:d8:5d:5a:2b:a2:b2:ce:21:
                    51:07:66:8b:46:9c:3e:d5:08:7f:c5:e0:59:9f:33:
                    1e:a1:73:7b:de:57:7c:6d:f7:86:b8:9b:7d:c5:07:
                    a1:33:f1:bc:cc:97:de:63:72:fa:25:20:4b:3a:ae:
                    f6:28:55:56:81:ce:3e:fb:ec:7b:04:fb:cc:f0:59:
                    c5:00:58:5c:f8:28:56:26:f4:7a:cb:4a:43:0f:50:
                    dc:f5:70:0b:b7:75:90:b7:29:5e:bd:16:47:fe:9f:
                    b0:77:c5:c5:69:b6:44:50:3b:73:06:56:96:37:18:
                    32:8e:a0:78:0c:19:54:96:61:24:4b:1c:5c:81:fa:
                    a6:dc:73:d0:2d:cb:e8:d6:ac:89:07:65:73:a7:06:
                    b8:6b:f5:d1:9b:6b:be:43:35:3f:da:68:2d:b6:0c:
                    3f:f4:20:ae:85:aa:3e:49:fb:f8:66:8f:0f:79:0c:
                    31:41:6b:71:0b:d5:da:fc:cf:cb:39:de:f7:3a:b4:
                    ec:32:bd:c0:a0:b0:90:0e:e6:d4:c4:02:08:3b:f1:
                    ee:ad:d1:70:69:a5:cf:fb:1f:6d:cf:f3:e3:11:de:
                    9f:2c:de:5a:b6:9f:57:8f:db:e6:a1:99:bc:0b:3a:
                    01:22:a6:a2:32:7e:0c:3e:f3:38:8c:ee:8e:49:0b:
                    02:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7D:85:45:39:A5:22:91:3C:4E:58:FC:15:AD:44:8B:DD:CF:07:CC
            X509v3 Authority Key Identifier:
                keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:8c:f9:5a:8f:25:ff:4b:1e:62:f3:3f:88:94:a0:8a:a7:ab:
         18:5c:04:d2:d4:3a:4a:61:2f:4b:27:2a:d4:17:a0:bf:ad:e9:
         8b:90:56:01:d7:dc:60:8d:cb:7c:84:1a:40:91:4e:1c:0f:6a:
         0f:76:85:3d:9d:8d:97:28:de:80:e9:0f:f6:76:8e:ad:4d:b0:
         bb:b9:5a:3b:27:9b:5d:63:5b:b7:3b:c8:cf:d6:c1:21:f8:b5:
         d4:51:20:11:a4:32:2e:91:47:1a:8b:da:0e:2e:bf:1e:79:26:
         52:dc:9b:8b:e9:74:b9:67:98:49:8b:9c:59:48:32:cf:d5:fa:
         d8:77:d7:b5:4d:b8:b1:4d:78:bc:87:9d:7e:97:34:7c:7d:30:
         aa:bd:01:22:c7:22:5b:5d:bc:08:04:37:cb:4d:4a:44:89:7c:
         84:a6:f5:72:dc:21:fd:f5:20:db:11:ef:e7:9b:34:bf:5a:66:
         43:19:43:60:21:16:65:89:73:74:37:86:49:81:5c:f3:ad:a2:
         42:ae:33:82:56:eb:61:7a:3d:78:ca:51:36:2f:51:93:d7:60:
         90:58:5f:94:23:5f:79:b8:b3:3c:e8:b8:95:76:9f:be:34:6f:
         28:17:5c:b6:89:e8:da:7d:9a:aa:ee:46:56:ef:80:c6:5a:6f:
         4c:b3:ad:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 03:16:43 2025 by rpki-client