This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
File:                     7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft (raw, json)
Hash identifier:          2XqitCmODASBi90EUC4chyEoDn37bIJkJ6bpxw7CApc=
Subject key identifier:   88:F1:AB:E3:C4:FD:41:CF:C7:74:05:AD:3F:17:96:19:A8:5A:0B:BB
Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
Certificate issuer:       /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Certificate serial:       019AF1645C6E6BDBA43D5FF5F718E4A8418F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
Manifest number:          06B2
Signing time:             Sat 06 Dec 2025 02:01:17 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:17 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:17 +0000
Files and hashes:         1: 7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl (hash: DbhSigk/FxCtK4ZEQiBAeQwDdYkr+hv5IBxuhbmFAek=)
                          2: V8rwHt-KBtkyfMDcY6GbBS5O3lg.roa (hash: VKRjbMp2cA/7F+gIKAoYPT0t4kmN1vcNg+P5YqdMBPI=)
                          3: vLkg6vsM00eiYmKWC5SDs25Gs0o.roa (hash: laQ0wIfMQs3t8Q/rYbMaQJvlRI3pM205xGMs2yoH4OQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:5c:6e:6b:db:a4:3d:5f:f5:f7:18:e4:a8:41:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
        Validity
            Not Before: Dec  6 02:01:17 2025 GMT
            Not After : Dec  7 02:01:17 2025 GMT
        Subject: CN=88f1abe3c4fd41cfc77405ad3f179619a85a0bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:91:17:89:48:f6:23:fe:f4:eb:91:dc:44:3e:
                    97:bc:94:de:5e:5a:9a:66:b2:be:eb:7a:a5:7d:d1:
                    af:bb:b3:4a:3a:96:60:ae:7e:c1:0a:a2:6d:9e:5b:
                    74:c4:95:4b:1b:7d:54:9c:1b:f4:bf:a0:20:4c:53:
                    f9:43:9e:6f:57:c1:43:f9:2b:bf:42:7d:99:41:45:
                    ec:f8:1b:e1:57:62:41:9e:31:53:57:6e:68:fb:49:
                    c5:b5:30:ba:67:c8:c2:f3:cf:d8:97:21:0b:c3:2b:
                    42:dc:77:d8:39:85:09:5c:6d:98:67:e6:33:c0:14:
                    95:53:f3:00:72:93:95:4e:dd:b0:37:66:df:01:f1:
                    0d:84:e3:df:f7:38:12:4d:7e:e5:ee:ba:d2:67:f5:
                    43:c8:fa:06:a8:eb:a5:d1:e6:b1:e1:65:ff:46:b1:
                    8c:b3:e8:c6:c1:fd:6c:dd:32:db:93:98:ba:ed:6a:
                    9d:d2:a2:a0:9f:80:0b:7c:93:34:13:58:fd:c8:7e:
                    4e:6d:98:cd:fc:91:c2:de:61:3b:fc:bb:14:7d:f2:
                    fc:43:1b:ee:3b:05:37:66:f2:2f:ce:86:65:c7:c8:
                    6a:1d:d4:cc:94:52:8d:d6:28:ae:04:38:41:ff:6f:
                    d7:0f:cc:9a:08:09:99:20:29:76:f4:b2:54:5f:7c:
                    c1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F1:AB:E3:C4:FD:41:CF:C7:74:05:AD:3F:17:96:19:A8:5A:0B:BB
            X509v3 Authority Key Identifier:
                keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:27:b6:0f:de:86:93:6f:76:e3:75:e4:88:53:c7:71:9a:af:
         99:71:f1:fe:a9:0d:3e:4e:1f:72:f2:53:98:c4:07:54:ea:41:
         a0:2a:2a:54:23:37:39:84:70:9b:48:f5:3c:a3:9c:9d:86:c9:
         46:75:c9:4e:f3:2b:20:08:a5:9d:7d:70:99:4a:25:a9:1b:39:
         79:06:1f:c1:3b:95:2a:7d:99:3a:e8:0f:bb:ce:83:67:49:3a:
         85:33:27:42:8d:13:9b:78:78:08:0b:b2:d5:53:b7:b4:e0:65:
         3b:b4:94:dc:5c:bf:0f:d7:a1:22:95:3a:0f:a1:e4:88:78:50:
         f3:ef:66:3c:6d:71:67:f5:94:76:4e:4d:14:6b:57:3c:a4:2e:
         78:00:26:b8:20:f3:76:7d:06:ba:01:65:e0:38:07:00:78:5f:
         a1:69:4b:ad:3f:62:b4:01:a2:6b:b5:2e:e1:fb:61:0d:0c:9c:
         3f:40:be:bd:ff:8b:c6:f7:ed:68:c3:50:04:62:9b:28:53:66:
         23:55:b1:66:04:ab:fa:5b:c5:f8:de:91:70:26:a1:9c:f9:34:
         32:d8:e5:9a:dd:24:17:b6:70:ab:2f:8f:a4:85:07:c9:a4:ee:
         c7:0d:e6:85:09:95:75:ab:16:01:53:c6:0e:ac:91:f6:6b:aa:
         f4:f8:8d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:20:47 2025 by rpki-client