This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft
File:                     7sxM83JBztFGfJGKonbTiLCoLtU.mft (raw, json)
Hash identifier:          7NN0ABcO0OnhdSZWBaE/ryZIaiLrkSNLzWqrwUNFxiU=
Subject key identifier:   B5:30:50:5A:B7:BC:B4:59:B9:63:9F:B0:AC:0A:B5:CA:36:11:F0:98
Authority key identifier: EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
Certificate issuer:       /CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Certificate serial:       019B0D80AB41CE8E03028E328F4BD39D3791
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft
Manifest number:          1774
Signing time:             Thu 11 Dec 2025 13:01:34 +0000
Manifest this update:     Thu 11 Dec 2025 13:01:34 +0000
Manifest next update:     Fri 12 Dec 2025 13:01:34 +0000
Files and hashes:         1: 7sxM83JBztFGfJGKonbTiLCoLtU.crl (hash: BqRGi0YjNqqjmsxxbHTUFWMIMxH5uc8PcQ1JM+sgyMU=)
                          2: CcwLvjGeQXyXQnaJpj6YyosTcMg.roa (hash: 1bzw8ev+Aeq3rTfFEXQzj88XSRZ9dYDMAOUCxZdm2PE=)
                          3: G3AgkSKzlQVVbdRD6eEypeJ5E5M.roa (hash: 31Wbft135lAj6RvQzASMjBguHP4eX2M1a4vm+r9VPa8=)
                          4: R24mqQHNUjq7_Kn2gm9-w4hGPdA.roa (hash: S6qdx3rNwuFJf5Eug9pguS9TdH8X/hG/PtUDluCZHpM=)
                          5: hztSFe2fWRlmTU4tssnBu-y0WeI.roa (hash: k2WLaKga1DftX/wOd3XsZqhZBsK4rGShhnxmdanGvCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 13:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0d:80:ab:41:ce:8e:03:02:8e:32:8f:4b:d3:9d:37:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
        Validity
            Not Before: Dec 11 13:01:34 2025 GMT
            Not After : Dec 12 13:01:34 2025 GMT
        Subject: CN=b530505ab7bcb459b9639fb0ac0ab5ca3611f098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7d:ab:1e:32:52:c9:83:f4:b1:3a:43:4a:20:
                    8b:c6:d4:f0:7b:77:2d:7a:de:7d:54:aa:57:dd:1c:
                    4e:c4:76:7d:52:4b:b6:03:ea:78:34:1e:e2:4f:96:
                    04:7d:80:43:08:e8:39:c8:09:78:ef:83:03:bf:04:
                    83:7d:00:be:9e:18:2c:e9:08:02:a3:cf:59:c3:b7:
                    ed:a0:af:ff:8f:aa:04:cb:e7:7c:a3:87:06:10:3b:
                    a2:c3:0a:84:56:e3:c7:d1:80:64:f2:9f:be:75:e3:
                    52:36:0d:d8:20:d9:61:d4:11:0f:eb:a3:b9:97:58:
                    e9:1d:24:4b:3d:2a:35:13:f3:63:7f:5d:7a:35:1c:
                    29:2e:c9:f5:04:0e:a1:86:16:1b:3d:79:5d:73:a5:
                    4e:6f:17:08:31:67:22:ef:98:4b:5e:ce:5d:ca:3c:
                    23:93:3c:67:e5:7d:01:bb:26:b6:28:45:b2:1a:cc:
                    43:14:5a:00:89:73:d5:32:dd:5c:44:86:2a:3e:93:
                    9f:dd:64:f2:10:2c:6e:1d:e5:bc:42:e1:bb:70:fc:
                    9b:60:38:32:79:a7:99:58:3e:30:84:53:6f:a8:5a:
                    4f:10:9d:50:f6:60:5c:14:66:40:6d:6f:ce:4f:79:
                    65:b9:66:6d:6b:be:96:0c:09:e4:b9:14:e6:3c:34:
                    fa:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:30:50:5A:B7:BC:B4:59:B9:63:9F:B0:AC:0A:B5:CA:36:11:F0:98
            X509v3 Authority Key Identifier:
                keyid:EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:3a:db:3c:cd:d5:32:f8:fa:75:ed:6d:3e:29:1b:e7:ae:a9:
         31:ab:0f:91:20:cb:7e:83:9b:f1:d6:5f:7e:14:60:8c:16:14:
         a4:b7:01:3d:df:2e:83:6e:29:b4:02:24:30:18:46:b8:9b:17:
         95:d4:97:97:63:dc:37:b5:40:66:5b:9e:ab:e5:f4:65:c0:dc:
         29:ae:59:69:dc:fc:80:6f:3a:9e:dc:5c:cf:d7:53:61:8b:62:
         be:a0:ab:66:4a:1e:9e:22:34:d4:d3:5d:59:6e:71:c5:21:3a:
         ab:3e:6b:50:4f:6d:75:14:1f:88:2b:21:8c:d9:57:b1:20:bd:
         24:d1:17:6a:e3:f3:b8:bb:4b:67:b8:4f:91:f4:42:3e:77:e7:
         fa:5e:8e:5b:19:d7:c1:08:fe:4c:93:82:6d:a5:c9:92:3a:d2:
         ed:2a:6e:c9:af:a0:70:fa:0c:fa:86:96:eb:90:60:ec:24:ff:
         e8:6f:ee:5c:32:ce:7b:d8:75:6f:86:92:5f:e7:b7:23:ef:76:
         49:aa:bf:32:75:79:c3:cb:5e:ae:17:e9:fb:c5:ae:0b:c2:c1:
         e5:fa:97:12:57:0c:dc:e5:01:da:7a:c2:56:d5:06:a4:e9:65:
         98:77:2d:57:ae:5f:74:c5:02:95:25:7f:ba:66:15:f5:86:d0:
         b2:42:50:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 22:54:34 2025 by rpki-client