This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
File:                     7LYS4fa02D-KXVUs87YO3SO_6fQ.mft (raw, json)
Hash identifier:          uSBiLzMgSMCKSlt8FLd4babPMIAGs7Bd+O+yDe4xpvY=
Subject key identifier:   13:AC:6C:0A:E9:E2:1D:7C:DA:13:B0:91:F7:CD:A4:DE:2B:B8:04:32
Authority key identifier: EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
Certificate issuer:       /CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
Certificate serial:       019B24AC60E8323B09959F0B5EE1DF0B48A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
Manifest number:          16DA
Signing time:             Tue 16 Dec 2025 01:00:35 +0000
Manifest this update:     Tue 16 Dec 2025 01:00:35 +0000
Manifest next update:     Wed 17 Dec 2025 01:00:35 +0000
Files and hashes:         1: 7LYS4fa02D-KXVUs87YO3SO_6fQ.crl (hash: ohn97HphEsJq5EUKEZfCTFeJRFens0qz1FQhMWdVnwk=)
                          2: aG5rAcUPlfAS33bppi3npjnJwhs.roa (hash: zJztqNoDduT6a/19sVXNq9OoLdpe05NzflFeIp+fVjM=)
                          3: rkeCi7bAOmm8jNM4SPUix4rpKGY.roa (hash: mpdXZon8vvR8j0E2gSl7AGKnGzRDJd6WpjcomYnKKnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 22:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:24:ac:60:e8:32:3b:09:95:9f:0b:5e:e1:df:0b:48:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
        Validity
            Not Before: Dec 16 01:00:35 2025 GMT
            Not After : Dec 17 01:00:35 2025 GMT
        Subject: CN=13ac6c0ae9e21d7cda13b091f7cda4de2bb80432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:55:a7:5d:e1:6b:1b:e1:08:b4:1d:92:a1:9c:
                    aa:2c:ca:cf:0a:46:cc:eb:2b:8f:4d:8e:ce:07:e3:
                    c6:0a:79:cd:33:a3:b9:dd:79:d0:15:4d:9a:eb:cb:
                    25:74:f2:0d:a4:8f:9d:43:02:3f:42:b3:be:1f:9e:
                    6a:5d:d7:af:c2:0a:d9:2a:31:a7:3d:47:7d:24:09:
                    0a:5c:73:46:25:80:fb:e6:5b:2f:b2:71:72:14:2c:
                    b4:0a:2e:55:06:81:1c:10:ee:cb:13:2f:e0:1f:eb:
                    34:ab:6a:8d:32:00:f2:f0:9a:45:65:8c:0c:56:62:
                    9b:20:a1:2d:3c:6c:63:be:a5:37:bd:66:73:cd:8f:
                    0c:ef:29:72:68:4c:d2:d7:c4:53:e5:85:56:47:40:
                    a1:3d:0d:91:3c:09:ef:eb:73:99:ba:7c:0a:fa:a4:
                    01:83:68:f3:63:3f:02:d2:37:63:04:a4:88:08:ac:
                    a3:29:d9:69:5c:db:85:12:9c:17:02:ad:c2:22:61:
                    65:43:eb:38:dd:8a:bc:1f:3c:18:05:40:46:4b:0f:
                    4e:d3:1a:f7:95:70:d7:71:49:30:c1:c5:3d:0e:3b:
                    9d:eb:b6:93:a4:79:c9:f3:ea:22:f0:56:15:a4:29:
                    4a:57:e6:1a:cc:d2:64:7c:85:41:ab:1e:3e:ba:a2:
                    6f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AC:6C:0A:E9:E2:1D:7C:DA:13:B0:91:F7:CD:A4:DE:2B:B8:04:32
            X509v3 Authority Key Identifier:
                keyid:EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:61:bc:26:d4:4f:66:53:e6:50:4b:13:0a:3b:3c:03:25:4d:
         00:df:4b:bc:e3:2f:75:e8:e0:70:29:ca:f2:2d:d8:f7:8b:93:
         51:62:f6:34:34:ee:f4:d3:90:4f:92:b4:f6:98:56:3d:ee:de:
         e3:00:13:2f:1c:89:80:68:1a:0c:7e:44:38:57:8f:f1:1f:fe:
         13:2f:d6:b5:fc:79:70:75:5b:81:a9:d6:a5:e5:28:8a:9c:81:
         c8:6c:5c:eb:43:39:b9:4e:a7:47:13:65:c5:b6:20:cf:09:2f:
         a8:75:f0:70:2a:3f:ee:4d:61:6f:bf:f4:1c:1e:4a:a7:17:e8:
         a0:ed:98:bb:9c:a1:72:53:a8:66:83:df:76:64:ba:9c:8a:6d:
         d7:06:47:c8:51:de:ae:f1:2b:60:96:4c:34:a0:23:0e:ad:dd:
         cb:8c:16:d0:c1:c9:ab:47:85:dd:64:de:7b:f7:2f:3f:ec:d8:
         d3:0b:17:2c:00:ed:60:f6:4b:90:91:7f:96:31:e2:c6:0f:7d:
         59:6c:76:88:06:22:90:aa:f6:f5:eb:c7:59:85:b8:8b:3c:50:
         77:c0:fe:2e:7f:6e:8a:0f:41:29:e1:3c:a1:c9:53:2a:0e:87:
         75:2d:06:10:f1:35:62:71:33:09:0b:d4:47:0a:bc:1f:25:64:
         c3:db:07:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:40:39 2025 by rpki-client