This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
File:                     g7826xjvmlfF-2A62kAP5rZojm4.mft (raw, json)
Hash identifier:          ab2/9kgXAuTbktiluiDRBeDQ88MByw1MGRCZCBhLaz0=
Subject key identifier:   D7:B4:04:A6:5D:69:20:F1:C6:94:6D:33:95:1F:F8:EA:52:77:07:CC
Authority key identifier: 83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
Certificate issuer:       /CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Certificate serial:       019B27AE15D54278384B7994F1CAFC0D7708
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
Manifest number:          12B0
Signing time:             Tue 16 Dec 2025 15:01:18 +0000
Manifest this update:     Tue 16 Dec 2025 15:01:18 +0000
Manifest next update:     Wed 17 Dec 2025 15:01:18 +0000
Files and hashes:         1: Db2mHELjbKafmmak8MMgrVJ9q6s.roa (hash: 0wtkW6LztiP4K0i9kH54ddtGh234DUMSdImFiKp9l5M=)
                          2: g7826xjvmlfF-2A62kAP5rZojm4.crl (hash: /JAQmMt537wAtI1tfFVmSLMMeI26oWzVEThQO9bfbQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 14:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:27:ae:15:d5:42:78:38:4b:79:94:f1:ca:fc:0d:77:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
        Validity
            Not Before: Dec 16 15:01:18 2025 GMT
            Not After : Dec 17 15:01:18 2025 GMT
        Subject: CN=d7b404a65d6920f1c6946d33951ff8ea527707cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d3:d3:bd:ed:82:d8:4e:ac:35:dd:ae:e0:44:
                    23:47:c1:2a:32:83:a8:9a:37:56:68:31:34:2c:5a:
                    ec:8a:f7:8e:9d:eb:0e:0c:0a:09:16:c0:2a:61:a1:
                    67:20:1d:40:2f:81:7f:f8:6f:46:1d:e8:ce:55:53:
                    86:e3:8e:23:a4:5b:2a:8d:bc:52:7d:eb:51:1d:0f:
                    4d:89:e0:b4:bb:09:53:a8:fa:d2:53:a8:1e:ee:51:
                    38:33:85:60:86:d7:81:62:44:5d:a8:85:9a:19:cd:
                    aa:2f:e5:df:83:b0:f9:5b:d1:fd:cf:29:fc:3a:89:
                    04:2e:eb:3d:32:e4:fb:ee:a8:db:5b:8f:0e:3c:72:
                    1d:2d:56:79:f3:03:95:57:3f:b9:f6:88:d3:ce:57:
                    01:0d:b1:8b:62:1e:2e:a0:ad:db:4e:0b:f4:78:26:
                    9f:36:fc:7d:fd:4d:b8:7e:06:38:22:b0:e5:ee:36:
                    9f:d3:5f:e0:88:69:62:eb:e2:ef:0d:cd:e6:7a:4e:
                    bc:4b:16:33:41:6c:ee:b7:17:47:af:ca:b3:4a:97:
                    2f:d6:f5:e5:83:2c:b6:e7:3c:f3:c6:59:a7:6d:c7:
                    64:4a:b8:42:55:6f:bf:b9:7a:06:f4:48:18:f3:4c:
                    36:9a:1c:44:0f:f0:c6:f0:ab:82:7d:59:a7:16:ad:
                    23:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B4:04:A6:5D:69:20:F1:C6:94:6D:33:95:1F:F8:EA:52:77:07:CC
            X509v3 Authority Key Identifier:
                keyid:83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d9:69:4d:13:69:15:24:5c:68:71:58:55:98:7c:90:5c:ba:
         6e:f4:5e:e0:37:b4:ad:1d:40:09:4b:13:0f:95:38:04:7f:4c:
         21:35:bc:5e:f1:3b:2c:32:33:1c:c9:19:83:a8:3f:99:da:7e:
         6b:27:76:50:a8:f4:f1:bd:8e:b6:b3:15:2f:7c:77:75:cd:5b:
         c5:6a:c5:ee:78:e5:40:9e:db:06:bb:36:19:e3:4e:ff:0c:75:
         e2:cc:b9:37:cd:42:08:e2:ed:14:3b:05:3c:93:0c:d5:0d:e4:
         1d:e8:5d:85:07:16:c4:f6:99:80:3a:38:4c:35:d2:05:17:ea:
         85:c7:21:6a:fb:0c:28:b5:8d:d8:97:6b:82:8b:f3:2d:27:dc:
         2d:32:36:80:4a:e6:fa:ff:d7:82:d7:29:b4:d7:6c:35:96:c9:
         35:b0:5f:5b:55:bb:4c:ef:f5:83:ca:b6:ff:63:6d:1d:34:4f:
         6b:2c:e4:e8:0a:d5:25:44:d8:ac:c0:e7:6c:68:b4:94:dd:1b:
         d8:44:40:5b:68:47:cb:7a:1a:e1:a2:5b:4a:90:f6:28:6b:3f:
         67:be:34:f1:58:bb:aa:96:e3:c1:37:c0:6a:07:f8:d6:5d:c0:
         5b:bd:9d:c9:e2:0f:c9:5a:f0:c5:f5:3d:d4:18:b1:c5:9e:71:
         c0:82:e1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 22:47:06 2025 by rpki-client