This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft
File:                     7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft (raw, json)
Hash identifier:          XgNtRophvXQf275KIJNA6BJETNa7htvE09ygfIu9+u8=
Subject key identifier:   89:51:80:F4:26:01:BA:C2:A0:3C:B5:95:5B:3A:85:DA:DD:8E:E5:5E
Authority key identifier: ED:1C:F1:DC:51:4E:7F:38:A2:38:7D:82:BD:BB:EF:2F:B4:6C:13:05
Certificate issuer:       /CN=ed1cf1dc514e7f38a2387d82bdbbef2fb46c1305
Certificate serial:       019B1D60C14D165E3A4B37DD22EE7D952063
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft
Manifest number:          96
Signing time:             Sun 14 Dec 2025 15:00:38 +0000
Manifest this update:     Sun 14 Dec 2025 15:00:38 +0000
Manifest next update:     Mon 15 Dec 2025 15:00:38 +0000
Files and hashes:         1: 7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl (hash: YVNTo9avMG/o/0FsIowSU2lJI+L5J+dWD+ln0yIou3s=)
                          2: sQU-GU7px3O6hZ2huRHbnRSf58Q.roa (hash: 0VRAdASjxA/F7Cach4HHNdmfR+0cuUmjNeTDMHFBYqI=)
                          3: ymIzzd49ZExaqccup-3dB_6It1g.roa (hash: 9SCHb+6anIRD6Ye74U5s0aJYVWdKzUeaAYJH4ymnmS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1d:60:c1:4d:16:5e:3a:4b:37:dd:22:ee:7d:95:20:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed1cf1dc514e7f38a2387d82bdbbef2fb46c1305
        Validity
            Not Before: Dec 14 15:00:38 2025 GMT
            Not After : Dec 15 15:00:38 2025 GMT
        Subject: CN=895180f42601bac2a03cb5955b3a85dadd8ee55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7f:71:34:d4:c8:0f:3a:a5:ef:56:2b:2d:c4:
                    e5:a9:4b:4c:d3:cf:e1:1f:a4:da:37:07:4c:bb:24:
                    27:fe:35:8a:c5:62:ec:0c:6b:e0:21:91:cd:ef:70:
                    ac:f9:e9:bb:15:4e:a2:c3:ad:b3:c6:6c:64:15:f1:
                    5f:d0:ca:78:91:99:ee:66:15:2b:fb:2d:6b:f5:f0:
                    2f:bc:66:23:4a:56:e4:48:e3:ec:04:22:3f:d5:e9:
                    4a:ca:e4:eb:7e:68:fe:f4:8b:04:5f:d3:6f:03:ad:
                    03:1c:fc:e5:d2:bf:70:e0:5b:6f:cb:de:0a:96:e1:
                    6c:5a:b3:5f:8a:6d:42:aa:81:6c:d7:53:48:92:cd:
                    9d:6b:30:e4:6f:88:c3:0c:70:45:91:c5:28:b3:71:
                    e2:37:03:85:75:08:c4:fa:40:6c:82:ad:5d:e8:84:
                    f1:4b:77:c1:7f:7d:69:97:b8:44:13:6c:93:1f:bc:
                    2f:c5:94:5f:15:f5:6c:80:81:ba:8c:8f:a1:8b:20:
                    d8:ff:f8:62:05:95:06:02:54:d6:04:ad:3b:2d:86:
                    e5:04:32:3e:aa:d8:b9:45:2b:99:78:de:de:a4:11:
                    50:88:47:d3:a7:d6:69:02:3e:42:0a:10:4e:c0:ad:
                    a5:5f:7c:3c:d4:27:5a:53:c5:91:b2:f7:9e:6f:84:
                    aa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:51:80:F4:26:01:BA:C2:A0:3C:B5:95:5B:3A:85:DA:DD:8E:E5:5E
            X509v3 Authority Key Identifier:
                keyid:ED:1C:F1:DC:51:4E:7F:38:A2:38:7D:82:BD:BB:EF:2F:B4:6C:13:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:6f:b9:13:14:ea:47:0b:8d:25:82:32:4a:24:46:56:65:8a:
         47:60:60:39:82:7b:6d:9a:f9:79:aa:8d:40:4a:d5:e5:b2:6e:
         57:57:b3:82:75:4b:ed:c8:2a:b0:5e:e9:19:a4:12:83:d4:0a:
         08:a8:47:90:1b:75:34:b8:6c:1a:de:c2:0d:19:6b:2a:22:b5:
         ea:b3:8c:e9:d5:84:a6:c1:3c:39:63:67:23:1b:dd:5b:96:68:
         5e:7b:8b:f0:2b:c0:71:82:86:fe:e4:55:49:3c:71:0b:82:66:
         c6:ee:e1:ac:22:91:e4:91:e9:81:56:24:67:1a:e1:70:bd:a1:
         db:06:be:76:eb:dd:b3:f8:7b:34:7f:d3:c6:94:51:61:bb:84:
         78:24:24:28:c9:52:ac:c4:5f:5a:68:cc:e4:a5:55:41:5e:6c:
         3f:14:54:c7:0b:9b:fe:33:43:a4:4f:60:b8:a2:6f:91:65:3f:
         ac:f2:dd:15:ed:fa:3e:67:00:04:f7:03:42:9f:4e:de:7e:f1:
         02:c4:2a:0c:ec:d3:50:37:1e:2e:ac:58:29:7e:5e:d4:39:f5:
         4a:db:13:4a:95:41:00:51:0e:05:6f:35:d9:84:23:c1:de:98:
         2d:63:fe:2f:c2:16:43:a3:ff:27:f2:0c:f3:c2:04:3d:50:38:
         2e:cb:35:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 23:37:19 2025 by rpki-client