This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
File:                     m7viALvfN5tQRVFjAXudR3fx210.mft (raw, json)
Hash identifier:          50H0DX5oeXxlj+1eT43XykeJF/sqeM1aMaTTkXTHFbQ=
Subject key identifier:   55:BE:62:E7:CA:BD:90:47:AC:8C:E1:8E:CA:06:05:90:FE:60:CA:75
Authority key identifier: 9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D
Certificate issuer:       /CN=9bbbe200bbdf379b50455163017b9d4777f1db5d
Certificate serial:       019AF5E57DC22FD89593A6444D7555AD9F1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
Manifest number:          12FA
Signing time:             Sat 06 Dec 2025 23:00:49 +0000
Manifest this update:     Sat 06 Dec 2025 23:00:49 +0000
Manifest next update:     Sun 07 Dec 2025 23:00:49 +0000
Files and hashes:         1: 3KDKnt4N1kaVYO5cJoBomMZhBKI.roa (hash: MYr27t+UpY1nV8Z5RMAwd4JpyhndolDAT0zGy5OlcpY=)
                          2: m7viALvfN5tQRVFjAXudR3fx210.crl (hash: uNiAGmvDGuCdddA5/1FHVxLPLYAh2XAn9lWCU3/tSro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:e5:7d:c2:2f:d8:95:93:a6:44:4d:75:55:ad:9f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbbe200bbdf379b50455163017b9d4777f1db5d
        Validity
            Not Before: Dec  6 23:00:49 2025 GMT
            Not After : Dec  7 23:00:49 2025 GMT
        Subject: CN=55be62e7cabd9047ac8ce18eca060590fe60ca75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:28:3f:9d:d2:4c:ba:89:ed:ba:49:2b:9d:df:
                    8e:80:2e:0c:e3:68:04:34:35:8b:aa:ef:d9:4b:8b:
                    b8:76:ae:89:c7:51:07:5c:1c:0b:1e:9b:3d:a0:ff:
                    7a:82:4b:a8:a5:8f:0a:bf:cb:f7:59:6d:06:e0:c7:
                    34:4a:a1:b4:34:06:3f:56:3e:4b:c9:5e:c6:5f:5f:
                    93:61:f9:0e:50:70:f0:1a:94:16:a1:c2:1e:a7:be:
                    c4:0c:2a:59:fb:31:2d:6e:26:c5:11:e4:86:26:f1:
                    fc:59:05:93:99:80:be:83:5b:f3:ba:3e:92:de:04:
                    08:b1:ba:55:c4:e6:84:49:9f:06:a8:0e:31:53:5f:
                    28:9c:4c:ff:cb:97:85:de:cf:9c:d8:f5:e9:da:c5:
                    04:8d:79:94:fb:ae:3b:40:dd:3b:05:48:05:95:4a:
                    fe:9a:8c:55:b8:f6:34:ea:6c:3e:de:2b:5e:e8:1d:
                    1d:59:e7:0c:9e:3b:5e:ba:8b:72:42:55:f4:ab:39:
                    65:75:ac:c2:44:22:0b:60:9b:fa:32:0a:f4:28:c1:
                    06:c4:96:dc:f5:f3:3c:ca:7a:72:61:81:71:bc:32:
                    0d:a7:6f:9f:02:d1:4d:55:81:5c:80:d3:97:2e:99:
                    bf:5a:c4:5f:11:12:c2:59:70:90:6e:68:61:b9:c2:
                    5d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BE:62:E7:CA:BD:90:47:AC:8C:E1:8E:CA:06:05:90:FE:60:CA:75
            X509v3 Authority Key Identifier:
                keyid:9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9e:02:d8:d7:9e:b5:71:d2:5e:2d:fc:5e:44:21:10:50:32:
         37:4b:d0:ec:10:f2:88:3d:e9:fa:de:d7:c2:ef:06:9d:1e:49:
         6d:4f:85:66:ca:1c:ed:d4:58:0c:22:64:cf:81:c6:31:58:74:
         90:4a:09:7e:5f:79:ec:f8:fa:3b:7b:7a:92:83:d1:ae:78:98:
         5e:cc:80:e8:33:02:ba:f0:73:31:94:f9:d9:0f:ce:26:dc:38:
         30:6d:46:de:38:42:0c:35:68:76:4f:90:78:d7:a6:55:ec:b6:
         70:b9:26:af:36:26:5d:ad:27:86:5d:9d:3d:f8:55:3f:74:43:
         f7:1e:19:9b:32:37:3c:1f:d3:10:48:4a:f0:0e:9b:99:c7:d3:
         cf:26:58:f9:fd:e9:0f:28:1a:1a:88:d7:a3:be:42:95:22:e8:
         9c:58:6b:4c:c9:bf:24:39:48:5a:90:2d:cc:53:6e:38:72:32:
         81:e2:db:b4:58:d6:87:21:0e:f9:22:9c:11:af:cd:6d:dc:15:
         bc:5c:b0:64:ae:97:97:d9:99:d7:fc:66:67:49:4c:c2:91:96:
         16:f3:a2:df:79:f4:17:50:61:ec:da:25:fb:ec:53:88:21:b7:
         a0:90:8b:43:a9:b8:f6:a3:a6:85:d7:29:a0:91:9d:8f:7e:05:
         92:d1:1b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:59:41 2025 by rpki-client