This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
File:                     a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft (raw, json)
Hash identifier:          YUxoXY4biDHINg2RehzuyDyR1tdvvwXBNcldvBmKl6I=
Subject key identifier:   76:3F:C2:D5:BE:45:75:0F:39:1F:1C:86:67:50:CE:5C:03:DB:8C:A0
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Certificate issuer:       /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial:       019B2475FD4F93F0048CA3BCF45A392EEFA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
Manifest number:          177E
Signing time:             Tue 16 Dec 2025 00:01:10 +0000
Manifest this update:     Tue 16 Dec 2025 00:01:10 +0000
Manifest next update:     Wed 17 Dec 2025 00:01:10 +0000
Files and hashes:         1: XlEutT53Peaefw9BWBX8iOxdk0o.roa (hash: 3n8+7Yj6dfwFUOHjwioNJb1p8k9ewBTtziMwK34FcCQ=)
                          2: _GNQSp_bGjydsnVDpRHY8XNNqhs.roa (hash: pDYhj1QM7SQ6UTwVMyRGZcrJ6AnEuDllBqLjotU+jDg=)
                          3: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl (hash: nk5a4RWJ8JtSrlNotI6E2IrLMciYJlI4HoeC6USibPY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 22:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:24:75:fd:4f:93:f0:04:8c:a3:bc:f4:5a:39:2e:ef:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
        Validity
            Not Before: Dec 16 00:01:10 2025 GMT
            Not After : Dec 17 00:01:10 2025 GMT
        Subject: CN=763fc2d5be45750f391f1c866750ce5c03db8ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c8:81:d5:7b:6e:d4:ec:fa:7c:c3:a3:47:42:
                    d6:9e:d7:57:42:f9:74:83:4a:36:83:4a:2d:38:72:
                    f9:59:9a:1e:04:5d:09:c2:09:71:07:12:d4:69:cb:
                    3e:95:d3:15:39:37:98:0f:7c:18:6a:99:49:34:ec:
                    0c:12:28:6a:fa:93:0b:d1:13:6f:d5:25:55:cf:3e:
                    18:b4:87:1a:38:b4:50:c4:41:a3:18:fe:fa:b5:4c:
                    cf:2d:f1:f9:5d:be:96:da:06:0f:f1:88:3b:03:f0:
                    9d:59:d8:6f:3a:7a:0f:80:a7:be:ab:1c:3b:c7:35:
                    d0:21:75:a2:dc:5d:bf:42:89:07:d1:25:74:a3:f4:
                    90:bc:b3:f0:9e:48:94:72:d0:b3:b2:1e:15:94:90:
                    11:24:50:57:e1:64:cc:6d:de:a7:66:ae:02:45:2b:
                    a0:6f:40:d6:c0:60:ba:ef:13:58:bc:e2:71:81:c8:
                    7b:26:d5:ad:bf:40:df:e0:3a:db:a6:e1:7c:8c:dd:
                    7b:90:62:5e:a2:17:e3:11:5b:13:26:7a:3f:6c:92:
                    3f:83:af:84:8c:97:9e:db:4d:e8:b6:6f:c0:29:6a:
                    c2:d8:62:9a:76:ab:f9:56:25:b9:f2:16:69:8b:4f:
                    b6:ba:64:1d:10:1f:91:fc:ca:96:29:69:64:e9:95:
                    a1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3F:C2:D5:BE:45:75:0F:39:1F:1C:86:67:50:CE:5C:03:DB:8C:A0
            X509v3 Authority Key Identifier:
                keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:17:e3:a0:13:f0:c8:6b:6c:9e:7c:25:bf:b2:17:59:5c:5b:
         ed:0f:37:cc:b4:c0:cd:c6:86:ab:7e:c4:b9:b6:71:fd:9c:e1:
         86:42:aa:26:d2:d9:56:63:2d:53:53:d7:bc:cf:8f:d6:98:9f:
         1c:de:01:45:8e:fc:99:a6:20:31:8f:bf:19:23:d7:64:84:3e:
         58:8a:84:f7:60:33:c7:a6:af:c5:ef:3c:79:c3:12:80:8f:94:
         35:ab:34:d1:f6:00:4a:71:3e:73:70:5f:b4:d8:a7:73:14:2c:
         6b:b6:0b:c1:59:50:fa:25:dd:14:4f:e5:87:07:4e:f0:61:b2:
         9d:ff:30:32:bb:c9:45:ed:01:78:b3:12:37:81:39:4a:27:0c:
         f9:0b:b7:3d:29:7a:ce:bd:e0:e3:b7:25:06:8d:b0:69:27:00:
         20:30:ba:14:58:6a:64:93:dd:dc:fe:45:24:0d:30:52:df:22:
         68:48:dc:9b:b6:58:ad:a3:7e:b8:f5:c6:e6:a7:ea:6f:68:3d:
         bd:6d:55:83:54:93:83:ee:9a:07:83:ca:73:8f:d2:87:de:80:
         ad:ac:35:ac:e6:32:1e:78:c9:7e:e8:bd:96:2e:ac:b4:95:13:
         11:c0:66:a1:eb:6e:e7:c1:09:48:de:a1:db:bd:33:94:6b:05:
         93:e2:da:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:40:08 2025 by rpki-client