This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
File:                     1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft (raw, json)
Hash identifier:          DNUx2DuvmEcMgUZpeZY81vMx6lYgMkqSoEM0sHkvHJE=
Subject key identifier:   C7:D2:A6:59:A2:AD:5F:5E:2D:CB:37:27:58:44:57:86:40:CF:43:1B
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Certificate issuer:       /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial:       019AF276F593835FFC73B1862B79A6C11A74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
Manifest number:          177B
Signing time:             Sat 06 Dec 2025 07:01:13 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:13 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:13 +0000
Files and hashes:         1: 0OeAqS6vX3gO6vvCqqj93y9hg-0.roa (hash: 4e6GVSZZmDnDLgJOl3djtnEbqT5lDhaJq4dAZ/qU/lk=)
                          2: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl (hash: +r/4rE6a2NdWDvt/wc5qyMySbVruFumdZ1eBHO2GPeM=)
                          3: 3ezvkbNYlAAPTTtiMpMfAXi1MZc.roa (hash: vAEGRwBdpnrHv/YkIQBOy6F594hqpTCRBhtvpnyCndE=)
                          4: B9T2tEPkzR3I7bfjqMLpjqVmqX0.roa (hash: jvG6Kma4d2VGMYtzkdxrMtFkS2r5Ue1ZSeSqhiErA3k=)
                          5: IHhv8_mZDx6A2j-F31Pdu0k8CrY.roa (hash: STtIVy8Sw+YzG++4aOUBuN18lGWUI/cMQ7xzdEE/ceE=)
                          6: NBa1UmmcofJztBL8pTAUTjZFH0k.roa (hash: 86hIGHbzSCBjbpNQmq5AwTHYQV5MFxXejgndiQ6r1LA=)
                          7: VO1QZo2vfxheLbeFL1rejYxNYBI.roa (hash: FCnZcb/OtfouViKRapPfAgcT5IF02/4Osl8N+1EzEnE=)
                          8: Wc2-UHBTfF-XHLzgQS0SwCmvlB0.roa (hash: 7aSWc04NFLdsEACjlaycXN0TGgVCRx18P8RZa+kCQIU=)
                          9: cUk9gF1NAvXhh8uQPdgOvohfLq4.roa (hash: kUG38NhhNKk78iTPsGRqnyUiXKkoTEwb6ImAUIs7EvU=)
                          10: doz6pIZLFsQi2mYQNJFMwi6P3-w.roa (hash: cmXkx2OZFz2XattOJlW1YfABpPcx3f/r/UMGYZNOMGI=)
                          11: ioa7P1e1SCYd3BcfFxtI-9P6P2k.roa (hash: 1p7OVkFIK8eU+7iB9pcEKKjlG4sNNxXEXZnDzToZ8Ac=)
                          12: pCc_cSWUTGqBPQv4cw6oAWrJ3Dw.roa (hash: 592DXKAG5uM8BEJZmdLRa+vW+5yO7qDryAvPgg1YlKU=)
                          13: pVMgUdSHj0nlaCG6yBmxCGoOV48.roa (hash: iYu6/b1RnNkG7/TqQe3ysX2HEttIbsgucDRlivFMstY=)
                          14: udVjWjtCw8-mpprcmzafPsXqAEg.roa (hash: 4jYyql/ul3ChaZUGCo2qkL0DtI4tuS2kYKNXsqMrYh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:f5:93:83:5f:fc:73:b1:86:2b:79:a6:c1:1a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
        Validity
            Not Before: Dec  6 07:01:13 2025 GMT
            Not After : Dec  7 07:01:13 2025 GMT
        Subject: CN=c7d2a659a2ad5f5e2dcb37275844578640cf431b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:98:79:b9:8b:83:bb:d5:f2:7e:aa:7f:e5:1e:
                    7e:05:2d:37:7a:5f:5f:7b:75:1a:d7:9f:42:b9:04:
                    dc:e7:1c:79:44:89:fa:36:e8:be:0d:c6:b0:e5:8d:
                    33:47:b8:94:61:7e:d4:42:40:39:76:e6:12:02:e7:
                    2a:a5:c7:35:d4:c8:3a:3e:78:33:97:07:c6:f7:0a:
                    8c:95:03:a0:33:e6:52:11:77:6f:fc:69:56:74:24:
                    f6:8d:a7:78:e4:d4:76:04:e2:f8:24:37:02:84:ab:
                    4b:a7:69:f2:4d:67:ef:b8:e8:5b:9f:c0:31:9d:8d:
                    5c:d7:34:3a:c6:d1:52:a8:26:56:26:9e:0f:e2:28:
                    61:71:40:88:07:f2:08:37:69:40:c6:c5:82:cb:31:
                    56:e9:6e:3f:11:98:c4:4c:ed:e3:e1:d1:a7:30:cf:
                    3a:a5:10:ab:14:84:91:e6:eb:87:b3:af:be:43:ad:
                    42:6c:a1:e0:e6:74:b9:30:be:c2:39:05:24:08:e1:
                    d1:09:c2:e5:b0:87:84:3b:54:c0:64:d7:4b:ce:a6:
                    88:cb:2b:80:55:96:27:85:c2:4f:05:7e:c4:5a:a7:
                    15:d2:c8:17:a6:b4:2d:a7:92:b6:65:44:5d:c0:b8:
                    91:01:5f:b8:b1:f1:03:64:81:7a:0c:eb:a7:75:97:
                    6c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D2:A6:59:A2:AD:5F:5E:2D:CB:37:27:58:44:57:86:40:CF:43:1B
            X509v3 Authority Key Identifier:
                keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:8c:41:3e:bf:2b:7f:96:b8:20:86:37:5e:ac:00:f2:2e:d9:
         42:13:2b:cf:38:02:0b:cc:fa:00:e6:cb:13:e7:37:6b:d8:cc:
         ee:69:5b:87:86:4c:22:76:48:78:ea:cf:f1:8e:55:82:90:b1:
         fd:e3:ee:9c:99:38:12:57:89:d9:1a:2f:d0:eb:5c:9d:c5:86:
         2c:73:58:ff:fe:0d:bc:96:30:d7:23:1c:84:ee:f3:18:c4:0a:
         9a:15:fb:6a:5a:23:09:de:ce:8c:a9:da:cc:e8:b7:74:4d:b6:
         47:bd:ab:73:37:be:f5:a0:6d:a8:b8:57:81:97:ff:48:4a:bd:
         c0:53:10:c3:82:fa:97:47:5c:1e:15:d4:e7:e3:68:96:d9:fb:
         ae:dd:ce:3e:d8:90:f0:a0:58:41:ee:c9:ae:82:9b:53:a3:ea:
         e1:60:a0:41:59:b1:12:73:ba:b3:1c:17:80:48:2d:3a:fd:88:
         b9:8f:39:3b:8a:2e:b0:45:89:fe:e7:4e:79:55:46:50:56:98:
         b7:59:1e:73:1b:74:53:a6:ca:a9:84:c5:60:85:7e:0e:c3:c5:
         26:56:1b:b2:86:25:4f:94:e1:90:71:fe:39:6a:32:c0:53:60:
         1c:e6:6b:e3:79:c3:22:1d:f9:fc:5e:b0:92:73:3e:23:fc:f6:
         f0:ad:a8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:20:11 2025 by rpki-client