This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
File:                     v7STRXsvAuabhfcY3MFqmp7w_NE.mft (raw, json)
Hash identifier:          Qv62QOXm7aBNdwB79yDm+PbVC/1mcyQfowlRnxSRTz4=
Subject key identifier:   93:C6:31:2E:6C:9A:CE:21:8F:2C:1B:6F:09:06:DC:08:FA:62:42:F6
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Certificate issuer:       /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial:       019B427FE123861941A07B0188B6630F0697
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
Manifest number:          0C3A
Signing time:             Sun 21 Dec 2025 20:00:35 +0000
Manifest this update:     Sun 21 Dec 2025 20:00:35 +0000
Manifest next update:     Mon 22 Dec 2025 20:00:35 +0000
Files and hashes:         1: FtUQDEV_goV9Q63cZwJrNo1XKeY.roa (hash: Poc/aj2i2jRAb5gMRxZ1X3AZiJk2CkXvF60h8JBU3Lg=)
                          2: GOVv7UWiyAgkUB324DNsuUmKdTE.roa (hash: ADQ5I5pX9eFcLUcZ8U56+xsynmnuecGVYVarRV0N63M=)
                          3: PEppcNvJjXnRhJY43E_LrbZ4b6Y.roa (hash: cA6/Zn5y/f62RQujNI9AmlKGDu+DsPIKIqYlGLbyskk=)
                          4: YiYsGJx6tfQVO081Vxo55GvUSDA.roa (hash: XzfROabzEDDgQ3YtgsMz+CrIxVTOUzesfcSiy4Nm4h0=)
                          5: dltNpJjwDGHyEEOA677kBUzkRvU.roa (hash: 5oogiShbtMsUJb/98HpJq5UTDNd0RiHRIGkjEdT9ssI=)
                          6: tBTs9qTZvhEc-OOPlwI4K3aRl-k.roa (hash: ej0EH67XzstYQ3vD/Dm513ioNKVEsWJ6CV9bJXDlLj8=)
                          7: u52qW4JyOvyxFH_dm7Mf8f_9xYg.roa (hash: p5pa88452Qlp5obMC/dsSAsRdIWVZbdy4Bw3DHihOtQ=)
                          8: v7STRXsvAuabhfcY3MFqmp7w_NE.crl (hash: KiRcN8bGFxGK5aKYhAULABm2gKGGLU2+9cz/DrEobZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:42:7f:e1:23:86:19:41:a0:7b:01:88:b6:63:0f:06:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
        Validity
            Not Before: Dec 21 20:00:35 2025 GMT
            Not After : Dec 22 20:00:35 2025 GMT
        Subject: CN=93c6312e6c9ace218f2c1b6f0906dc08fa6242f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:61:bc:41:cf:91:32:c9:a0:24:03:5b:94:27:
                    13:91:c7:94:04:68:b6:b7:db:25:ed:b3:55:00:83:
                    51:c6:0c:f1:55:25:e6:4b:cb:43:c7:36:53:11:68:
                    56:37:a5:a0:20:a9:b9:15:0a:0c:01:38:d9:9f:44:
                    56:7e:9b:e4:70:b3:5c:be:63:5c:45:0a:18:55:a4:
                    5a:e8:fb:15:c1:3a:c1:b3:55:89:fe:f8:75:2a:b3:
                    19:14:1d:5c:0b:7f:d5:b0:2f:8a:2c:7d:08:28:68:
                    1c:08:9f:04:2e:62:72:0a:c3:44:12:5c:a7:ab:65:
                    e7:0a:ee:f3:8a:b4:eb:f5:0e:d0:03:fc:d2:c5:e3:
                    75:ae:8a:f8:72:9e:cb:0a:7d:d2:df:82:3a:04:77:
                    17:97:f7:e7:06:98:00:e8:2a:3c:60:af:be:a2:2d:
                    bd:2d:5f:26:88:71:4a:7a:b6:b4:43:48:8b:5e:00:
                    15:f7:21:be:82:ec:d1:2f:e9:f6:1b:0d:21:d3:02:
                    6e:43:bc:f1:34:81:42:84:5c:cd:34:1d:10:15:a7:
                    77:1f:c9:69:72:9b:74:35:16:3d:c6:fd:08:b6:d8:
                    63:4f:c2:ae:0a:3b:da:a0:da:96:6b:cf:7c:c6:35:
                    d6:5a:98:9e:76:53:ed:69:59:96:ab:cc:5a:db:0f:
                    35:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C6:31:2E:6C:9A:CE:21:8F:2C:1B:6F:09:06:DC:08:FA:62:42:F6
            X509v3 Authority Key Identifier:
                keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ce:e7:30:29:c7:6d:2d:97:62:00:be:c8:bd:53:9b:04:d1:
         6a:03:69:c7:08:1c:3d:b5:39:87:a2:f0:ad:60:54:41:a7:cb:
         70:77:1c:3a:a4:d9:29:36:c4:4f:61:4f:14:e5:64:87:2a:f5:
         85:b6:cf:d7:5e:0a:3c:6a:f2:c1:77:6e:ab:e2:c3:07:5c:50:
         61:33:b5:48:96:20:c8:27:19:0e:39:01:ad:7a:b5:c0:f4:f1:
         19:3f:48:de:a7:88:a1:22:4e:0a:f2:11:75:10:a7:40:c6:27:
         db:20:09:ee:ea:7a:05:77:02:33:71:81:29:02:cb:f2:02:67:
         3b:a7:f3:8d:ea:29:b6:b2:de:ea:79:e7:34:08:c8:86:64:7b:
         2a:b0:76:0c:a3:fd:8b:cb:ac:f5:59:ad:8b:18:e2:4c:f2:ee:
         b9:6f:c7:b8:15:5b:c6:21:de:01:28:29:9f:c0:38:28:2f:b5:
         82:ef:8c:74:81:d3:bb:a9:fe:bc:13:89:02:3a:21:e0:3b:e7:
         60:97:ab:02:d5:68:82:f2:cc:c2:d1:2b:03:42:c6:7f:6b:39:
         22:76:ae:33:71:28:8f:7f:cb:66:c2:8d:e0:bb:f2:11:6b:dc:
         ef:01:e1:04:64:a1:85:99:b5:78:4c:bd:1c:a2:43:30:ba:64:
         16:2c:56:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 03:59:04 2025 by rpki-client