This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.mft
File:                     V7ifXMeCGeoSc_n1PFueM7xdvrU.mft (raw, json)
Hash identifier:          nEVvlKoMJnXixmj3JfAk1t6a5oxUEP6Y5oX1XGxuITs=
Subject key identifier:   29:D8:E1:4A:A3:B1:11:B4:A4:53:46:60:D7:5C:01:50:D6:35:B8:0C
Authority key identifier: 57:B8:9F:5C:C7:82:19:EA:12:73:F9:F5:3C:5B:9E:33:BC:5D:BE:B5
Certificate issuer:       /CN=57b89f5cc78219ea1273f9f53c5b9e33bc5dbeb5
Certificate serial:       019AF31C0ED924C1A4556B8326D11C2FC5E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.mft
Manifest number:          072A
Signing time:             Sat 06 Dec 2025 10:01:33 +0000
Manifest this update:     Sat 06 Dec 2025 10:01:33 +0000
Manifest next update:     Sun 07 Dec 2025 10:01:33 +0000
Files and hashes:         1: 2XZNJdR9Iep0Ywseo8-8iJMB8Tg.roa (hash: 7pIfh2Q654qMx1AmZFUCn+BOOHgc4UU06A+k+bghDdg=)
                          2: RRZa9Q054kEMSroT3AuPzC585XQ.roa (hash: 7iVMMtB+9zg3QA2J8+DzasUBkyEpZ63pEDBVLFDl2DE=)
                          3: V7ifXMeCGeoSc_n1PFueM7xdvrU.crl (hash: 3b9QprDWdMI3dmzb/gM/D4b+04l7bSNSJmdv8uo4Gto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:0e:d9:24:c1:a4:55:6b:83:26:d1:1c:2f:c5:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b89f5cc78219ea1273f9f53c5b9e33bc5dbeb5
        Validity
            Not Before: Dec  6 10:01:33 2025 GMT
            Not After : Dec  7 10:01:33 2025 GMT
        Subject: CN=29d8e14aa3b111b4a4534660d75c0150d635b80c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:63:83:c2:c1:15:e7:a4:08:a7:53:e4:54:39:
                    1a:cc:06:1e:1d:43:34:a1:02:fd:de:5d:b6:8f:10:
                    2a:97:64:00:6e:5c:30:ef:47:a9:a1:ae:8d:82:71:
                    63:2d:b4:97:de:c9:59:b2:63:2d:8d:32:67:53:74:
                    24:a7:f6:49:8c:54:b8:1d:41:1c:ca:01:f1:8d:81:
                    cc:36:fd:77:f5:65:06:72:cc:1e:72:d8:ec:8b:0b:
                    0d:dc:53:df:d1:41:94:d0:84:a2:d1:33:d0:37:29:
                    d6:70:25:71:63:12:db:3e:a5:a6:40:64:25:b0:bc:
                    0a:32:04:a0:09:1a:df:5f:ee:1c:44:02:c2:c9:7d:
                    e1:98:60:91:c1:14:90:ee:88:0e:99:18:e9:a4:9d:
                    80:8d:b2:38:9c:b3:f1:59:8a:0a:cf:39:2f:68:09:
                    48:5c:54:27:47:aa:1a:40:d9:43:a0:d4:6a:cf:b2:
                    09:1e:f9:c6:e4:2f:7e:0e:9e:b2:05:c7:52:73:d6:
                    f0:48:b3:49:c5:21:54:0a:cb:d8:67:4e:29:0f:78:
                    70:31:59:ae:96:e3:70:51:fb:b3:fb:4e:8c:03:9e:
                    cf:c2:30:2d:1f:81:00:c6:c6:59:dd:b7:14:ca:f5:
                    eb:79:8a:aa:3c:6a:5e:af:dc:ae:3b:70:fd:82:21:
                    a0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D8:E1:4A:A3:B1:11:B4:A4:53:46:60:D7:5C:01:50:D6:35:B8:0C
            X509v3 Authority Key Identifier:
                keyid:57:B8:9F:5C:C7:82:19:EA:12:73:F9:F5:3C:5B:9E:33:BC:5D:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:40:05:c2:6c:2c:8b:17:3a:18:21:7e:47:e6:40:c0:f4:89:
         df:ac:b3:d3:52:44:9f:ea:ed:7c:c1:3e:e4:f8:f3:c7:d5:1a:
         cb:85:eb:55:fa:e8:fc:ca:dc:fb:9a:8d:86:66:21:5d:2d:ba:
         73:c6:db:3f:a1:a8:b8:56:e0:e7:d7:68:2a:6c:76:20:f0:1d:
         15:cd:b5:20:82:d7:43:e9:4b:4b:b5:22:07:7a:47:85:d3:94:
         dd:b4:a9:54:c5:21:17:26:f9:81:0e:2c:06:4a:b0:4d:03:35:
         2e:38:fd:56:31:eb:b8:4e:21:b7:e6:41:4d:73:64:6e:81:01:
         ff:ac:7d:3b:12:6d:a7:6b:35:07:2c:39:96:2f:5c:69:95:8e:
         38:ea:8a:7d:7e:81:f3:7a:90:14:bb:85:14:34:50:0b:97:a5:
         53:06:1a:22:e5:63:0b:63:d1:59:0d:5c:ef:a5:05:93:1b:38:
         46:f6:b4:c1:52:ed:0b:ca:28:10:59:b7:ee:f2:14:11:a3:be:
         f4:12:78:78:83:44:bc:ee:ac:53:25:21:80:ff:84:f8:d4:5c:
         9e:ab:c0:03:54:ce:dc:e0:f3:9d:9f:fa:06:b5:80:35:0b:5c:
         10:5e:18:ec:7f:f2:2b:20:fd:ff:aa:31:20:0e:8d:c9:fa:a8:
         6d:4c:3d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:34:43 2025 by rpki-client