This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
File:                     7b5zqycw806U8SDpv8Va9EBTafY.mft (raw, json)
Hash identifier:          89cLQfcaUMKX4OusLgBPlhKZRmQvneC6qwwHKO/RetA=
Subject key identifier:   76:D7:3B:AC:E7:EA:D6:F8:71:25:05:3B:88:C2:85:1C:A8:FC:9A:D1
Authority key identifier: ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
Certificate issuer:       /CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Certificate serial:       019AF2E4528558FE833CA3E908983837FFE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
Manifest number:          0501
Signing time:             Sat 06 Dec 2025 09:00:40 +0000
Manifest this update:     Sat 06 Dec 2025 09:00:40 +0000
Manifest next update:     Sun 07 Dec 2025 09:00:40 +0000
Files and hashes:         1: 7b5zqycw806U8SDpv8Va9EBTafY.crl (hash: CsoJPK3iINfViftVonm39AYeGBpl3cn0vmlHzgJasdQ=)
                          2: K7v_erre4xqrVjEHRvxy-76X3oY.roa (hash: 73JVJm8ra91Vis54U60FFg9PWumAI6t/5NGHyQV5dMo=)
                          3: RqDjTULio7HkucdqWVIGBKTqd0Y.roa (hash: PcWewLEjusrfHJnBpktJ+OmKEcChBIByu4RElEeoGKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:e4:52:85:58:fe:83:3c:a3:e9:08:98:38:37:ff:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
        Validity
            Not Before: Dec  6 09:00:40 2025 GMT
            Not After : Dec  7 09:00:40 2025 GMT
        Subject: CN=76d73bace7ead6f87125053b88c2851ca8fc9ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b5:d8:9d:6d:59:f6:0e:78:4f:72:17:f4:c8:
                    73:40:f7:0c:7d:0d:be:fb:02:e9:a1:ff:71:eb:a4:
                    3e:19:81:86:12:b3:47:fc:ab:75:5f:66:bc:b5:c8:
                    13:d3:a7:f8:9b:97:88:5d:ca:6c:21:36:db:75:3f:
                    3c:d5:04:50:87:35:14:12:71:f5:eb:21:9c:5a:d7:
                    87:af:05:86:06:93:97:21:3e:1f:3c:fa:c5:8a:20:
                    6a:64:3e:2b:9e:f2:08:f1:f7:79:1f:98:9d:c2:1d:
                    83:00:94:98:53:a0:0f:0d:b5:e7:1e:91:5c:00:ee:
                    9e:13:63:e2:0d:d1:84:ff:d2:18:dc:1f:2e:0a:88:
                    df:ec:dc:d1:ef:6d:d3:bb:5f:b6:8f:a5:7a:3c:ec:
                    99:24:c5:6c:1a:b3:f1:7c:84:35:44:5b:d9:d7:f7:
                    00:8a:19:43:cb:c6:52:62:6a:5a:64:f3:eb:27:8c:
                    9d:95:4f:d1:26:d6:a2:e8:86:9e:6f:22:36:54:45:
                    a0:19:95:a5:12:82:0b:16:c8:52:40:32:b9:12:7f:
                    0e:fd:77:3e:c2:c5:2c:4c:5a:3f:22:8a:ac:c7:0c:
                    f3:7f:53:48:7b:4c:5e:84:07:07:d8:54:3e:22:0b:
                    c1:a9:66:f1:dc:00:a7:0c:a3:5a:ed:57:0f:d8:15:
                    68:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D7:3B:AC:E7:EA:D6:F8:71:25:05:3B:88:C2:85:1C:A8:FC:9A:D1
            X509v3 Authority Key Identifier:
                keyid:ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:32:05:e4:50:2c:e5:47:9d:b9:5c:01:8a:94:38:49:60:53:
         d7:20:78:24:46:43:aa:45:65:81:90:10:55:07:e4:e8:1b:83:
         1f:6f:86:f4:85:e3:d2:60:0e:92:8c:13:af:a4:42:b2:c2:4c:
         c4:e1:52:3b:b7:9a:4e:80:40:79:a9:ee:7d:f6:68:93:3e:e1:
         d8:d6:07:44:68:fa:21:ad:f3:98:7b:b3:f1:14:03:b0:ec:84:
         67:3a:88:19:14:f7:74:11:af:85:a3:31:41:ec:79:1a:87:c6:
         34:0d:51:05:e7:84:b4:19:e6:c2:ff:8b:58:a2:7c:aa:49:00:
         00:12:fb:5f:8a:66:05:eb:d1:ca:9c:74:bd:c4:21:df:c5:2b:
         60:d8:a4:a9:23:bd:82:e2:85:e5:6b:53:72:39:a9:fe:fb:07:
         ec:7f:9b:f5:0b:c8:2b:3b:01:a8:9b:09:31:6c:3f:65:ec:e2:
         d0:9d:49:2c:4a:0d:08:72:7b:b5:d6:78:f0:f9:ed:70:91:4e:
         2a:c3:0f:92:05:2b:fb:fc:5e:aa:5c:d2:9c:c0:7c:b3:24:4d:
         35:fa:55:4e:c7:5f:c9:08:0c:9f:9a:2a:e1:b5:0b:ff:ab:62:
         e8:74:79:0b:eb:07:1e:51:59:5e:77:64:fb:cc:b4:6f:a8:73:
         23:56:ab:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZry5FKFWP6DPKPpCJg4N//jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYmU3M2FiMjczMGYzNGU5NGYxMjBlOWJmYzU1YWY0NDA1
MzY5ZjYwHhcNMjUxMjA2MDkwMDQwWhcNMjUxMjA3MDkwMDQwWjAzMTEwLwYDVQQD
Eyg3NmQ3M2JhY2U3ZWFkNmY4NzEyNTA1M2I4OGMyODUxY2E4ZmM5YWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbXYnW1Z9g54T3IX9MhzQPcMfQ2+
+wLpof9x66Q+GYGGErNH/Kt1X2a8tcgT06f4m5eIXcpsITbbdT881QRQhzUUEnH1
6yGcWteHrwWGBpOXIT4fPPrFiiBqZD4rnvII8fd5H5idwh2DAJSYU6APDbXnHpFc
AO6eE2PiDdGE/9IY3B8uCojf7NzR723Tu1+2j6V6POyZJMVsGrPxfIQ1RFvZ1/cA
ihlDy8ZSYmpaZPPrJ4ydlU/RJtai6IaebyI2VEWgGZWlEoILFshSQDK5En8O/Xc+
wsUsTFo/Ioqsxwzzf1NIe0xehAcH2FQ+IgvBqWbx3ACnDKNa7VcP2BVo+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbXO6zn6tb4cSUFO4jChRyo/JrRMB8GA1UdIwQY
MBaAFO2+c6snMPNOlPEg6b/FWvRAU2n2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2I1enF5Y3c4MDZVOFNEcHY4VmE5RUJUYWZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8xMjdmYjMtN2Q4Ny00NjhiLTk0ZDIt
MmY5MDU5YzRmM2E1LzEvN2I1enF5Y3c4MDZVOFNEcHY4VmE5RUJUYWZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8xMjdmYjMtN2Q4Ny00NjhiLTk0ZDItMmY5MDU5YzRmM2E1
LzEvN2I1enF5Y3c4MDZVOFNEcHY4VmE5RUJUYWZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIzIF5FAs
5UeduVwBipQ4SWBT1yB4JEZDqkVlgZAQVQfk6BuDH2+G9IXj0mAOkowTr6RCssJM
xOFSO7eaToBAeanuffZokz7h2NYHRGj6Ia3zmHuz8RQDsOyEZzqIGRT3dBGvhaMx
Qex5GofGNA1RBeeEtBnmwv+LWKJ8qkkAABL7X4pmBevRypx0vcQh38UrYNikqSO9
guKF5WtTcjmp/vsH7H+b9QvIKzsBqJsJMWw/Zezi0J1JLEoNCHJ7tdZ48PntcJFO
KsMPkgUr+/xeqlzSnMB8syRNNfpVTsdfyQgMn5oq4bUL/6ti6HR5C+sHHlFZXndk
+8y0b6hzI1ar4g==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:22:19 2025 by rpki-client