This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
File:                     S-G7vlQAedK38nC5LOrzsqgW6Po.mft (raw, json)
Hash identifier:          xSUgxFHnnj/VpxGzpfo12DauUplXLdCEf+FJiPGKJfI=
Subject key identifier:   CA:D5:59:4D:12:7A:4B:65:B2:B1:35:A7:EF:80:5C:54:97:EA:B7:56
Authority key identifier: 4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA
Certificate issuer:       /CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
Certificate serial:       019AF1D221BD09E28772FF56695206D103A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
Manifest number:          0D7D
Signing time:             Sat 06 Dec 2025 04:01:11 +0000
Manifest this update:     Sat 06 Dec 2025 04:01:11 +0000
Manifest next update:     Sun 07 Dec 2025 04:01:11 +0000
Files and hashes:         1: 9hr0RxcMrr0PdZUeFGL7xFCCX6M.roa (hash: c+l8O2VvW8FmRNHxjGZmeZsqcY4y9njJ0XhuiOI82Ig=)
                          2: S-G7vlQAedK38nC5LOrzsqgW6Po.crl (hash: TL+n43+PeSxhO7Ln4rX7wu/uVu1gvq3HUzqv6fTKtFo=)
                          3: Wo69R9wkZdSu2YDZamu1cwfnvYY.roa (hash: M7Dkgn12kNJ0G/XHeqGYMOBhXYTKj/x9/fg1DkcC9rY=)
                          4: Yz-y591eNOrcrLSkt7bX4CY92Hg.roa (hash: oW3oUBZKt4uL8vuRz0uNo1Cj56FiYIaWKe1rVvQOsZY=)
                          5: sxzxRsYpVJ4N1lToM8Cy5xPqMsU.roa (hash: g5PD0lSPsiV5TiY4CJ8jfV/ckG/Bc1/ChU4XFCIeK1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d2:21:bd:09:e2:87:72:ff:56:69:52:06:d1:03:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
        Validity
            Not Before: Dec  6 04:01:11 2025 GMT
            Not After : Dec  7 04:01:11 2025 GMT
        Subject: CN=cad5594d127a4b65b2b135a7ef805c5497eab756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c6:01:80:94:ee:9c:9b:7f:ae:aa:c7:cc:e7:
                    69:e8:b6:70:29:0b:15:17:7f:ff:59:e3:f9:97:6e:
                    63:82:24:06:b5:a3:04:c6:b9:61:a6:2f:ad:92:a3:
                    34:14:89:c3:65:4e:64:99:13:86:93:79:bb:d2:27:
                    77:22:12:6d:fb:65:e2:55:a4:a6:98:9c:b8:2a:97:
                    db:90:86:b3:d6:27:4b:01:7a:29:ca:dd:9b:7f:47:
                    9d:48:91:51:1e:b3:5c:32:82:39:19:14:10:dd:50:
                    ec:0d:7b:ff:ce:fa:29:08:d4:80:56:4b:62:bb:35:
                    8f:e8:3d:63:52:eb:a7:f6:18:f6:66:d5:47:6e:04:
                    51:72:17:16:ad:c0:0d:c6:80:94:5a:4c:13:fb:8f:
                    7a:80:56:f7:4b:c7:7c:0b:a8:18:9b:c8:2c:fd:03:
                    2b:7a:48:aa:df:f1:14:8b:2a:bc:1e:26:c6:33:7a:
                    c3:73:98:33:40:00:8b:50:5c:32:c6:00:3d:4d:e9:
                    9f:a7:62:e0:44:d1:09:1b:39:e0:20:c5:1a:e0:0e:
                    25:2b:c0:2a:79:8d:3a:ab:f9:a3:57:cb:bd:43:1c:
                    40:bc:aa:48:17:7b:63:62:ed:a5:fb:62:f8:4f:a1:
                    62:24:9a:5f:d1:bc:cc:31:63:14:bc:c1:98:79:ae:
                    12:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D5:59:4D:12:7A:4B:65:B2:B1:35:A7:EF:80:5C:54:97:EA:B7:56
            X509v3 Authority Key Identifier:
                keyid:4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:10:61:40:20:5e:c2:6e:0f:48:69:f2:42:fd:d8:b5:8c:11:
         a1:45:88:ca:7c:57:2b:ff:0b:b8:b9:28:c1:c5:52:18:86:e9:
         42:ed:99:0f:50:82:58:56:c1:2d:94:fa:3e:d7:ee:fa:5e:56:
         c2:50:5c:a1:f9:5e:99:39:31:bc:bd:85:1b:d8:e0:80:22:ee:
         52:fe:f5:f3:dd:a2:74:34:6e:ea:9a:5d:66:f8:49:28:55:2c:
         92:bc:9e:83:0c:26:57:f4:28:ff:35:4b:ba:a1:ad:e2:5c:09:
         47:ca:77:39:01:ef:7c:ca:c0:d9:41:04:8b:a8:f2:77:cc:08:
         0e:21:c5:e5:83:2a:fe:fb:73:98:b0:67:01:ed:f0:a2:c6:0e:
         2d:55:65:8c:24:fd:d2:26:48:90:9b:70:0a:c9:d7:7c:c4:cc:
         89:75:36:5d:2e:2a:38:1a:f6:f6:d9:c6:0b:c9:04:ff:58:c6:
         3a:17:f8:cf:f3:cb:8e:9b:0e:57:f3:f3:5e:9c:4e:0e:45:97:
         50:19:04:b0:d7:88:52:3c:6c:ab:6c:f6:9c:cd:2c:b2:c3:f3:
         66:27:06:44:7c:0d:3e:c9:8d:69:a8:73:a5:51:16:39:ce:64:
         5d:03:ea:c3:48:47:cd:de:41:6a:68:aa:f6:e5:2b:46:1c:3b:
         1d:de:f4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:37:27 2025 by rpki-client