This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File:                     k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier:          feyfeZaC2ILCD5XdHLYyt0z3ZxTFjh5ZmaHXEri2jS8=
Subject key identifier:   FC:27:A7:62:10:D1:A2:C6:D8:AC:0B:0E:C8:C5:38:BF:1F:39:20:9D
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer:       /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial:       019AF31B6A241BB6708106DF733A0F10E9C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number:          1766
Signing time:             Sat 06 Dec 2025 10:00:51 +0000
Manifest this update:     Sat 06 Dec 2025 10:00:51 +0000
Manifest next update:     Sun 07 Dec 2025 10:00:51 +0000
Files and hashes:         1: 28dSOCA9FT-2cS9d1i0TH2-PohM.roa (hash: YATXe0nqwm4Q1md7ii0Qn8O8FTxpBD/JPcG/Vh9iF1Y=)
                          2: GhpTpgW64tSFuaS0pbKl89opsq8.roa (hash: 2Wron93LANvS77WOvmwaTogfUqhlP0TlDWCOGE4biV0=)
                          3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: Zj2l6WBnqHcMT57ie2NY2ByptPhWkILa0KtyL72Dt34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:6a:24:1b:b6:70:81:06:df:73:3a:0f:10:e9:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
        Validity
            Not Before: Dec  6 10:00:51 2025 GMT
            Not After : Dec  7 10:00:51 2025 GMT
        Subject: CN=fc27a76210d1a2c6d8ac0b0ec8c538bf1f39209d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e3:4c:33:d9:f3:2c:a5:d9:c0:47:ef:a7:0c:
                    0b:96:5e:d3:7c:71:fd:5b:d0:47:3f:41:de:b4:99:
                    2c:bb:bf:90:de:e3:90:f0:28:b3:08:2e:b8:44:9a:
                    3e:72:3c:9d:4b:d8:8e:fe:f3:7a:82:10:b0:4e:05:
                    a8:28:3d:72:61:c8:f4:b0:ef:b6:f7:89:08:ed:9a:
                    95:30:ed:e3:b2:a1:66:3a:5b:ea:00:e1:bb:a8:ab:
                    74:02:53:e5:28:3f:4c:ac:61:5a:2d:e2:6a:95:bd:
                    cc:75:8a:3d:ce:f5:8f:3e:b9:95:5b:66:fb:91:4c:
                    9d:33:ab:0e:f8:01:81:70:e5:82:cf:58:d3:bb:b2:
                    ae:4f:3f:fe:f1:b9:57:aa:dd:47:63:f2:cc:66:11:
                    e9:8b:eb:72:68:b8:24:fb:7c:07:95:25:b9:4f:eb:
                    62:45:94:b8:c8:db:d3:ee:34:f4:66:9f:66:a6:ff:
                    de:3d:ea:da:5b:03:0b:89:51:45:2c:08:3b:06:06:
                    fa:49:3b:15:34:64:af:3f:93:5a:36:fb:d4:a5:10:
                    de:d6:2a:35:e3:7e:50:b9:35:b4:1d:f9:ba:45:f0:
                    fd:9b:8c:23:38:ad:69:1e:5f:83:89:06:56:1e:57:
                    46:f1:69:1b:fb:3e:4c:4c:c8:ce:7c:fe:d4:de:f8:
                    90:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:27:A7:62:10:D1:A2:C6:D8:AC:0B:0E:C8:C5:38:BF:1F:39:20:9D
            X509v3 Authority Key Identifier:
                keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:7d:f5:35:73:5b:9b:8d:0a:1b:86:33:f9:98:e4:e5:8a:66:
         21:ab:58:68:55:7c:72:5e:f4:9e:d8:88:e8:db:62:04:17:61:
         aa:cc:94:f7:92:fc:a4:c0:a1:08:b6:1a:8d:13:1c:3d:3c:36:
         d0:7b:9f:7b:1d:5f:b7:c9:00:84:5b:f2:3a:b0:37:1d:42:85:
         3e:87:8b:4d:6a:85:c5:0e:fc:e5:4b:d1:db:c5:a6:71:71:93:
         aa:d3:e7:1f:7b:1a:c5:d1:a2:75:ff:5f:4e:f9:c6:27:4f:d2:
         75:ed:c5:53:0a:ba:25:67:a8:05:41:47:1a:9d:c8:6c:94:47:
         2a:53:54:f5:93:40:b4:07:fd:bc:c5:3d:7c:31:62:c6:b4:8b:
         a1:7a:ae:4a:e5:9a:49:c3:71:56:79:35:9f:17:3b:48:1d:be:
         e0:db:d4:03:47:34:15:a2:1c:3e:fe:de:df:2f:0a:f0:e7:d8:
         c5:4b:8c:6f:21:6a:e0:c4:6c:b0:69:cc:90:e2:ca:47:db:b5:
         0f:cc:e3:56:8d:9e:a8:ad:0c:8d:ac:d0:a7:8f:a0:4d:bc:f7:
         14:18:40:b4:73:9b:88:fe:59:95:52:c4:9c:9a:1e:0d:7b:2c:
         c2:ec:87:a2:5b:f2:a5:4c:4b:33:25:dd:7a:be:c5:a9:4e:aa:
         1b:2d:ae:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:15:43 2025 by rpki-client