This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
File:                     7DpjPvLAglGlhgNWLlaqbvqT7CU.mft (raw, json)
Hash identifier:          6YMowtQf07qscS9Mhb5C4/+eK5hCo4SOwPo4zQDqYoc=
Subject key identifier:   9F:C7:3C:DC:2E:AF:E1:85:82:95:BF:FC:05:CB:D3:93:F1:67:29:29
Authority key identifier: EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25
Certificate issuer:       /CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
Certificate serial:       019AEF3F7E79397CB6EC21DD9017AB7C5337
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
Manifest number:          11BE
Signing time:             Fri 05 Dec 2025 16:01:46 +0000
Manifest this update:     Fri 05 Dec 2025 16:01:46 +0000
Manifest next update:     Sat 06 Dec 2025 16:01:46 +0000
Files and hashes:         1: 7DpjPvLAglGlhgNWLlaqbvqT7CU.crl (hash: LGupj9RkGg6lm53tZKBqT9XRjtp6JqqJAUd89djNloI=)
                          2: F1syaj2slElK5y18q2bJFyk_Xt4.roa (hash: 0cchVuYo1uzzUlT1evGpupW2C9gukJ9GqtBWuAJKa5E=)
                          3: S9qORFlVihRXgXPTMQZutfjwKHE.roa (hash: vsbhWoTnzrB7AOoQuujS+OxmDvP0R8xrr9NkNJFez7M=)
                          4: TpzFnk7W-OsBRIAAr3dm_mueJxU.roa (hash: nkfZhHTodmONOvq1O5TW8ZfGR4EOeCS+8IrKi31DjPQ=)
                          5: eh6k6EDW67F1BaMz22DQsW1dFis.roa (hash: IQTOzLLAJV1/nAGCPNSZ0w+xeltOMYm8kA0XXPxhjRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 16:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ef:3f:7e:79:39:7c:b6:ec:21:dd:90:17:ab:7c:53:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
        Validity
            Not Before: Dec  5 16:01:46 2025 GMT
            Not After : Dec  6 16:01:46 2025 GMT
        Subject: CN=9fc73cdc2eafe1858295bffc05cbd393f1672929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c7:bd:af:fe:f1:8e:97:54:d2:ba:a3:e9:01:
                    29:99:25:48:10:11:af:9e:62:42:f5:f7:1b:6a:92:
                    c4:09:ec:24:f2:fe:88:bf:3d:b5:c4:17:7c:9d:1b:
                    9b:4d:c1:e5:2b:1f:81:d8:e0:4b:75:d4:cb:0e:b1:
                    7c:23:b2:a5:87:fa:9a:fe:ee:b9:c2:44:49:fc:3c:
                    85:5d:f9:ee:92:16:a3:4f:4c:5f:72:f8:d1:ad:25:
                    54:6b:e4:41:52:a9:16:18:f3:53:83:7f:2b:a6:17:
                    0c:74:6e:92:39:1b:5b:89:55:9e:1c:ec:ef:50:44:
                    06:7c:af:af:0f:5b:4c:f4:9d:20:ec:da:af:85:21:
                    40:ec:ad:e6:ed:7a:11:b2:00:3a:c4:b2:ef:69:07:
                    6e:4f:7b:b7:3c:d4:7c:6c:b4:c5:2a:2f:db:73:60:
                    89:85:59:d2:fc:94:c3:e7:94:e3:b4:1d:74:da:00:
                    4f:3e:0e:39:76:89:e4:be:f8:d0:63:79:ed:5d:a8:
                    3c:98:af:27:7f:80:7b:b3:94:db:d3:68:a4:10:42:
                    b6:11:fc:59:9f:6d:c8:01:5b:2c:a4:b4:db:7f:72:
                    ed:c1:b1:62:61:41:43:9e:ac:e3:6f:d1:69:46:19:
                    91:25:07:98:22:94:31:24:90:f0:12:d4:75:93:cd:
                    57:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C7:3C:DC:2E:AF:E1:85:82:95:BF:FC:05:CB:D3:93:F1:67:29:29
            X509v3 Authority Key Identifier:
                keyid:EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f0:16:0e:f1:01:86:e6:f3:cc:9c:d9:ee:1c:75:1b:29:33:
         04:60:6d:9d:26:69:6d:0b:33:cd:87:01:4a:4e:3c:22:27:54:
         43:09:83:54:e8:59:bb:6b:84:25:1f:06:45:30:17:c7:da:0e:
         66:4e:20:92:e4:a5:5f:31:27:11:5f:59:94:dd:9f:b0:ca:66:
         b9:c3:b9:87:27:0c:cc:fa:e2:a1:28:bf:46:6e:cf:b0:76:c6:
         82:d2:0a:5d:d7:b5:45:69:21:87:c5:00:29:04:5b:89:d0:e9:
         9d:82:34:1e:a1:44:40:55:c4:36:f4:5c:81:a7:f8:36:c4:3f:
         ad:a3:00:03:27:1b:e4:cc:77:bf:e8:b6:96:6f:6b:1d:24:b9:
         bc:84:51:0c:df:b8:ee:d6:6e:24:e3:86:0d:b2:74:06:03:4b:
         6a:f3:83:c1:07:34:e0:32:78:ac:40:7e:9f:51:1c:04:5e:d8:
         02:6d:11:cb:af:99:0d:e0:12:d9:ae:9d:56:f6:f2:e8:de:f1:
         a0:6e:e2:04:48:f1:53:73:4c:bd:db:45:56:0e:8e:82:49:90:
         aa:97:e0:2a:02:29:b9:42:ac:77:d8:f5:50:74:e4:93:21:04:
         58:7f:96:63:84:8f:10:21:b7:c2:9f:a3:6c:e4:c6:9c:59:d6:
         68:44:f8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 23:02:59 2025 by rpki-client