This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File:                     7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier:          ZOJNJaOxjKET8sbUTF7y1m5ven13eySWgI0SUgcpLTo=
Subject key identifier:   0A:B0:D3:CE:BD:C9:8D:8F:B5:1A:7C:E5:29:3D:75:63:82:DA:5E:DF
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer:       /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial:       019AF0BF2D1DCA3DBC7919C58D8767F1466E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number:          1760
Signing time:             Fri 05 Dec 2025 23:00:51 +0000
Manifest this update:     Fri 05 Dec 2025 23:00:51 +0000
Manifest next update:     Sat 06 Dec 2025 23:00:51 +0000
Files and hashes:         1: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: duCMCS0VDsP5j0hwmmn+UyJo422iNJSUc7fuKmyRlbU=)
                          2: jJfOPh4XYz0bStaxv-izcSg_mmc.roa (hash: I9zOxo3FRJE3Zqu7rer6Rr4TRL9Sp9aojJllGRgbeX0=)
                          3: pp9HRbSEXg1Djpwq9U2x1ut0P3A.roa (hash: eLTqAfDKOrIieHKE4CKftQ8WCB5K7yV6FjmVMCdNg0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 23:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:bf:2d:1d:ca:3d:bc:79:19:c5:8d:87:67:f1:46:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
        Validity
            Not Before: Dec  5 23:00:51 2025 GMT
            Not After : Dec  6 23:00:51 2025 GMT
        Subject: CN=0ab0d3cebdc98d8fb51a7ce5293d756382da5edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:46:21:49:f3:f8:71:c8:11:e6:f1:be:a2:cb:
                    f4:e3:03:66:72:d2:32:88:a7:8b:9d:a7:9d:2f:1f:
                    9a:1d:69:6d:53:b1:b7:59:53:fd:85:2f:4d:c3:3b:
                    2f:8d:41:9c:61:b7:9f:72:f1:86:c7:e3:dc:c0:03:
                    d0:de:5d:20:8b:35:ce:ae:cd:76:21:cf:1d:5e:dd:
                    fb:bd:b8:ca:99:03:42:34:0c:79:a5:00:e3:af:86:
                    d0:e1:dc:86:6f:f6:a1:83:17:50:eb:87:bb:85:60:
                    8d:51:3d:7c:18:1a:04:b2:c6:08:90:3a:b6:76:20:
                    cc:3b:5a:ec:c7:76:e9:a0:c9:ab:9b:70:8c:4b:10:
                    5e:d6:1e:48:33:88:de:2d:37:84:69:8b:f2:30:05:
                    81:48:9f:21:41:93:9e:bb:75:07:ce:a4:02:0c:66:
                    4b:1b:7d:b2:83:13:37:80:93:b9:76:7d:5a:ce:cd:
                    6b:19:6e:03:cc:7f:75:79:12:aa:ce:62:79:3d:35:
                    28:57:7b:14:2d:4f:9f:57:77:73:99:50:96:1c:7f:
                    00:83:c6:85:ee:e1:4f:b1:44:88:b7:88:7d:4e:95:
                    30:89:d5:15:b7:55:ae:95:a1:67:68:9a:e9:7f:a6:
                    46:32:90:20:12:1d:1e:37:68:9f:11:39:5c:47:38:
                    0c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B0:D3:CE:BD:C9:8D:8F:B5:1A:7C:E5:29:3D:75:63:82:DA:5E:DF
            X509v3 Authority Key Identifier:
                keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:66:18:81:fa:6f:8f:28:3d:1c:4a:e8:4c:05:4f:4d:7f:34:
         74:63:79:2c:2b:4c:35:65:40:7f:f7:5c:8a:54:77:bf:6b:af:
         77:1d:d3:34:b7:c2:74:2e:ee:07:7c:ac:c4:9c:97:df:92:6f:
         75:5c:12:a9:e6:8b:ce:ea:90:93:80:5e:d4:0e:17:0d:ed:d7:
         6a:a1:5b:03:b7:30:59:ce:9b:fb:40:7f:c1:47:ad:40:68:24:
         1c:be:10:ec:3e:9f:20:32:09:01:9b:69:7d:c1:76:92:de:c0:
         10:fa:bc:62:d7:ec:7a:7b:e2:5e:9d:fb:27:1f:c2:47:0b:ed:
         c1:57:cc:90:ba:70:22:dd:a5:36:15:98:86:88:2c:09:6d:40:
         51:25:e9:f7:1a:4d:fe:16:bf:10:14:7c:1b:c3:e2:b5:18:0b:
         bc:b0:b4:5a:7f:49:23:65:53:5b:bf:05:24:cb:93:e6:5a:83:
         66:94:5b:c6:73:cb:b8:d3:61:85:8f:64:a2:22:0c:0f:1b:70:
         58:87:be:76:cc:b9:ea:ee:e5:d0:79:71:b4:a5:df:5d:70:ca:
         03:64:75:31:55:c3:ad:d0:88:bc:e2:b7:22:65:8f:d8:57:43:
         e3:c0:b5:25:2e:71:0d:6d:9f:71:10:8d:cf:68:fc:fb:f2:ea:
         81:ed:97:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:06:11 2025 by rpki-client