This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
File:                     7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft (raw, json)
Hash identifier:          9IvH7Tlih3/AxLwaSrk7SeCRbzk8QWsLiuBTDtsSTjo=
Subject key identifier:   22:0E:4F:F8:FD:6F:86:1B:FC:FC:E4:D5:D0:AB:1B:92:2F:34:36:58
Authority key identifier: EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
Certificate issuer:       /CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Certificate serial:       019AF577B8265E78B3699352A60F7D88F202
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
Manifest number:          13A3
Signing time:             Sat 06 Dec 2025 21:00:55 +0000
Manifest this update:     Sat 06 Dec 2025 21:00:55 +0000
Manifest next update:     Sun 07 Dec 2025 21:00:55 +0000
Files and hashes:         1: 7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl (hash: SlfNl28amQgq475nAnn8TBE0BolhHqvcls+hUjnfNKo=)
                          2: UHZDSCwg4-DjCTw2ThSV9YMjtY8.roa (hash: yjuNgWENrQcHvxeDeJWLJxEQH/+1ANaZxCVsNSQeLLY=)
                          3: iXVDb19kvukiKPCGR7Xk4m4waFo.roa (hash: doLRr6Uuft22RZholuz/UG1fqLztwMyrNWgGHx261cM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:77:b8:26:5e:78:b3:69:93:52:a6:0f:7d:88:f2:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
        Validity
            Not Before: Dec  6 21:00:55 2025 GMT
            Not After : Dec  7 21:00:55 2025 GMT
        Subject: CN=220e4ff8fd6f861bfcfce4d5d0ab1b922f343658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:81:e3:97:15:40:29:ae:54:32:b9:23:6f:81:
                    16:26:19:48:cf:ca:7a:15:c3:48:ad:46:71:bb:f8:
                    8f:09:73:9a:1c:b2:3f:da:c7:a7:40:6d:83:e7:18:
                    d4:12:fe:91:d6:9e:e8:df:8a:96:bd:6f:89:b3:26:
                    bc:81:fb:e0:f5:83:aa:0f:d7:c6:57:f6:6f:87:80:
                    39:11:ec:45:a4:65:b2:13:c5:c4:50:9d:3c:9b:a8:
                    7f:81:8f:32:b0:d4:e8:60:37:f1:ea:3e:9b:9c:5d:
                    de:7f:6c:63:23:4f:1a:b0:a5:c0:2e:c5:ff:b6:9a:
                    ed:e2:72:27:4a:35:83:84:3d:25:d8:31:21:79:26:
                    fc:84:09:db:19:51:12:b3:c9:ba:e7:56:46:13:d8:
                    00:ac:e8:e0:99:a5:76:ba:0d:a9:f0:a7:a3:49:e3:
                    b3:ec:5c:b9:18:d9:92:80:fe:cf:dd:b5:52:93:c2:
                    d1:fa:6e:3a:a8:dd:a8:64:34:04:2f:4c:f1:c0:cc:
                    b7:dc:63:72:82:4a:f9:dd:52:0d:da:9b:ea:e6:78:
                    5c:3c:0c:93:d9:12:f0:50:79:88:b3:ff:13:5d:b7:
                    54:d2:e2:5e:32:ea:34:d0:2c:f3:af:dc:ad:31:9b:
                    a2:2f:b5:a1:88:25:7e:0d:1b:3e:6d:58:e2:e6:9d:
                    4d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0E:4F:F8:FD:6F:86:1B:FC:FC:E4:D5:D0:AB:1B:92:2F:34:36:58
            X509v3 Authority Key Identifier:
                keyid:EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b3:3e:a5:25:6d:c9:10:7d:fd:6c:74:65:19:3d:ab:8a:13:
         f9:da:df:8d:02:af:01:2a:dd:37:33:07:f0:e7:d4:bc:6d:42:
         41:fb:35:9f:69:2d:8c:07:d2:4b:d4:14:4c:ab:2a:3d:9c:d1:
         6a:ac:7c:3f:79:71:5e:03:ca:f1:88:19:ac:91:95:64:1b:3d:
         d6:e1:34:a4:08:4e:59:b5:dc:86:26:bc:8f:01:9e:5e:c6:be:
         15:e2:c9:9a:f2:c7:56:7a:25:53:fa:f3:60:d6:e6:a7:7e:76:
         13:91:89:e3:f5:0d:01:87:90:06:88:39:bb:16:0f:3d:23:c3:
         c0:10:ac:dc:6f:a3:4e:78:6d:c1:17:bb:b9:e6:63:ce:ed:e6:
         c2:51:7f:02:4e:6d:2c:68:08:34:af:0f:bb:58:06:8a:a2:33:
         b8:a9:f5:62:2a:3c:37:3f:44:7d:48:77:85:e4:60:a6:0c:8a:
         a4:cc:81:2e:92:1d:c3:6b:29:8e:9f:e5:f4:d7:47:70:ac:32:
         3e:d6:55:61:94:bf:1d:11:71:d2:82:eb:0c:53:c4:4d:14:62:
         f4:7e:92:45:2e:e9:6e:e5:a7:93:f1:05:27:e4:c9:d1:ac:e7:
         e8:bd:68:59:bf:cc:e9:4a:ff:00:6d:44:d2:48:39:83:f5:b0:
         1b:84:95:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:19:25 2025 by rpki-client