This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft
File:                     7600TrX36x3uS4-ENftbnYdmPp0.mft (raw, json)
Hash identifier:          VWDA5+JIpi1iopF46WT32oLxBNwcOQkgt7AdJ6+l2zQ=
Subject key identifier:   3C:7E:0F:03:71:08:0C:B0:C5:25:80:E9:32:3C:8D:34:88:39:AB:56
Authority key identifier: EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
Certificate issuer:       /CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Certificate serial:       019B0F6EBA5553BD9008B871621E5C5F2069
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft
Manifest number:          0EC1
Signing time:             Thu 11 Dec 2025 22:01:13 +0000
Manifest this update:     Thu 11 Dec 2025 22:01:13 +0000
Manifest next update:     Fri 12 Dec 2025 22:01:13 +0000
Files and hashes:         1: 1-TrxiaNStiTOJfkIfvXSvxKAa8.roa (hash: Sa+TGnkF/Fgr2eI/KHbAOg2b1WIDT95qtx3HLZbkTYQ=)
                          2: 7600TrX36x3uS4-ENftbnYdmPp0.crl (hash: 6Br8CxYNOHNbChlZOI+tTcBAkK2kbDL71G/9SITd3KY=)
                          3: CpsNBPf3z13iAJuT2Uc6xn49v3k.roa (hash: aqK12du8rkPezSSK2zWASPAljBp90XN1tNxFt4RE07M=)
                          4: U_VYKpyLv0RVfRm74yG5a_Vrkf4.roa (hash: el4MUGQYFxb5aJybMsuuruh6kVWrWKqPLvaGeVjGVyY=)
                          5: WywaCMaoX-4Vjd6cVj-u89uGhyI.roa (hash: AYAIVJDWWfRtiSD4573Cq+miJDAAqjH32NCsFxgcKF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 22:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0f:6e:ba:55:53:bd:90:08:b8:71:62:1e:5c:5f:20:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
        Validity
            Not Before: Dec 11 22:01:13 2025 GMT
            Not After : Dec 12 22:01:13 2025 GMT
        Subject: CN=3c7e0f0371080cb0c52580e9323c8d348839ab56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f4:04:c4:11:0b:d8:47:53:7f:13:7a:cf:63:
                    18:8d:8c:37:e6:df:19:82:2e:15:32:f4:12:0b:8b:
                    c7:54:98:4c:e0:2a:65:e1:95:9e:6b:19:e0:72:ac:
                    c6:31:23:4e:8e:39:f4:c6:3b:7f:23:38:2b:2f:6b:
                    05:77:b6:c4:54:35:d6:c9:e1:4f:c0:0b:95:f8:d2:
                    22:6b:fb:e2:0a:7d:63:18:59:6a:8a:89:c2:11:18:
                    37:f7:20:13:19:c8:8b:04:6f:3f:05:be:01:eb:eb:
                    47:87:ea:30:2e:7d:71:df:e4:32:e6:d8:34:90:23:
                    d2:6a:db:d3:96:58:92:67:d2:aa:9b:c8:9b:6b:66:
                    5a:a3:8d:d2:98:c8:41:c1:e4:44:46:f9:5a:8a:1a:
                    fd:57:65:54:63:e8:87:42:c4:9c:35:89:bf:b9:20:
                    80:50:23:21:d5:ba:bd:c2:7c:77:32:d8:0d:4a:7b:
                    07:ba:ff:0b:98:ae:de:14:77:60:86:40:a2:d8:f0:
                    8a:02:0b:fe:da:52:24:ea:24:42:ec:4e:00:92:d7:
                    56:94:e1:3f:65:34:7d:61:7a:fc:d3:d8:13:f3:27:
                    d4:c9:03:a6:73:d9:c6:31:83:09:e7:06:42:9f:9b:
                    b5:77:51:4d:7c:90:fb:0d:6e:2f:8a:13:5e:60:26:
                    8e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7E:0F:03:71:08:0C:B0:C5:25:80:E9:32:3C:8D:34:88:39:AB:56
            X509v3 Authority Key Identifier:
                keyid:EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:f3:16:63:16:17:a6:f9:b9:33:df:d3:dd:bf:2b:f9:09:57:
         a8:c6:88:3a:c5:28:38:a4:0d:0d:49:dc:cd:09:32:e3:9d:32:
         a1:68:b8:cb:cd:61:97:42:80:63:cb:8b:45:10:f9:91:2c:be:
         ad:7a:7d:22:5e:56:9b:7d:a6:69:74:d7:00:ad:12:da:3d:62:
         53:b1:64:a4:a3:e7:01:92:62:11:24:8e:6d:03:78:86:d3:0b:
         89:a7:ce:42:cb:dc:11:a5:53:23:cb:90:69:d3:71:4e:5e:d5:
         26:35:bd:70:60:7d:68:83:fb:3f:05:37:31:f4:84:02:e1:6e:
         d5:51:c7:6b:5a:8c:fb:d2:86:ae:57:4a:cc:b4:a3:45:c0:c4:
         8c:cb:e7:4c:0d:46:60:08:bb:22:59:59:f3:b1:0c:80:08:ad:
         79:d6:3a:18:de:49:6e:50:64:75:68:74:02:ad:10:21:ff:42:
         a2:26:49:2d:6c:c1:15:cc:ed:b5:fb:b3:e4:53:fb:40:64:3d:
         2c:e5:5e:f6:fa:56:d5:1a:df:c3:d2:cc:fc:01:2c:be:fb:22:
         0e:24:c6:48:3c:c0:7e:d3:1a:b0:41:ef:7c:8d:dc:5f:9d:37:
         b2:85:34:fb:dc:0f:54:5b:f1:73:24:51:ec:fc:0e:0d:62:79:
         8c:0b:94:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 08:03:51 2025 by rpki-client