This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft
File:                     Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft (raw, json)
Hash identifier:          /bnPsRdACjX+m5bLbI/PNcRVU1Xv9MEQCJo3EL8uNYE=
Subject key identifier:   00:BE:D0:8D:32:7B:52:9D:AD:8B:20:2B:94:F9:91:2D:F8:C0:9F:6F
Authority key identifier: 32:8E:FF:BB:BF:D5:53:5D:3E:71:BA:6E:A8:15:EE:49:05:C1:C2:0D
Certificate issuer:       /CN=328effbbbfd5535d3e71ba6ea815ee4905c1c20d
Certificate serial:       019AF31CCB712ED773B66A0A207EA1A2A37F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mo7_u7_VU10-cbpuqBXuSQXBwg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft
Manifest number:          0D0A
Signing time:             Sat 06 Dec 2025 10:02:21 +0000
Manifest this update:     Sat 06 Dec 2025 10:02:21 +0000
Manifest next update:     Sun 07 Dec 2025 10:02:21 +0000
Files and hashes:         1: Mo7_u7_VU10-cbpuqBXuSQXBwg0.crl (hash: DbzmbKzeYJNaTQlV6cQoE6zGvofwwbaPAdRBdX/nHkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mo7_u7_VU10-cbpuqBXuSQXBwg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:cb:71:2e:d7:73:b6:6a:0a:20:7e:a1:a2:a3:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328effbbbfd5535d3e71ba6ea815ee4905c1c20d
        Validity
            Not Before: Dec  6 10:02:21 2025 GMT
            Not After : Dec  7 10:02:21 2025 GMT
        Subject: CN=00bed08d327b529dad8b202b94f9912df8c09f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:99:c6:5a:c9:24:18:19:8f:42:b8:8a:cc:43:
                    88:a4:f8:4a:18:6c:d9:94:42:86:4e:a7:3a:2b:73:
                    ab:f2:51:90:59:1d:d6:eb:be:f3:bf:0f:0b:97:d2:
                    25:7c:93:19:b4:cd:a4:74:43:04:d4:f2:37:68:47:
                    2f:f4:31:54:96:ac:38:00:a1:bd:4e:eb:ef:53:2f:
                    ce:9e:b9:15:6f:49:7a:05:08:ab:60:c8:2e:d5:6c:
                    2c:e4:60:9a:89:c2:2c:1a:5f:97:e4:7a:be:bb:1d:
                    1f:d9:8e:07:24:12:0d:1a:0e:19:d0:76:dc:81:1d:
                    9c:f2:20:3c:5a:27:9f:0b:1d:0e:93:a6:9d:58:31:
                    67:92:9e:5d:89:e8:7f:6e:08:e9:97:84:3d:ec:e6:
                    c4:26:75:49:1b:1a:28:c3:00:b4:a3:d7:c0:fa:00:
                    aa:1c:46:ce:7d:a8:b8:6a:48:38:fb:09:12:76:6a:
                    bb:17:0b:51:74:5c:19:c6:db:39:c7:50:89:97:67:
                    08:e2:f8:08:71:1e:7d:7b:8d:09:00:91:51:7b:6a:
                    a4:06:84:49:4b:b2:de:c9:77:d4:d2:05:0c:11:b5:
                    7f:b3:92:e4:4b:d9:43:f1:46:92:64:41:84:f8:a2:
                    13:09:c5:12:ed:28:0a:c8:74:9a:6c:33:2a:eb:52:
                    26:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BE:D0:8D:32:7B:52:9D:AD:8B:20:2B:94:F9:91:2D:F8:C0:9F:6F
            X509v3 Authority Key Identifier:
                keyid:32:8E:FF:BB:BF:D5:53:5D:3E:71:BA:6E:A8:15:EE:49:05:C1:C2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mo7_u7_VU10-cbpuqBXuSQXBwg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:01:12:b2:a3:54:57:a6:d8:e6:ac:a2:31:78:82:2b:d9:f1:
         64:f1:3a:4e:04:88:6b:58:91:8a:7c:23:6d:ee:84:57:f1:26:
         85:6c:fb:e3:ec:91:44:f4:20:6c:59:ad:b5:6f:b6:77:99:c0:
         60:b2:57:a2:63:fe:83:80:3b:aa:0e:95:07:dd:f8:95:c0:6e:
         c4:38:8a:b6:76:8c:c2:06:47:f4:2f:e9:12:86:0e:f5:48:e7:
         66:89:ea:17:3b:6d:a4:eb:23:0c:86:c1:28:b0:1f:fd:6f:39:
         33:01:ff:f2:bc:7b:3a:ba:06:3f:d2:6d:83:b2:a0:4f:79:e6:
         a9:37:de:a6:02:ba:fd:b2:59:55:54:88:d7:62:0b:2e:cf:c7:
         90:6a:64:99:63:5f:40:40:48:17:e2:b7:1c:26:88:71:3e:69:
         04:9d:9b:32:50:76:0c:e3:32:57:3d:6a:bf:72:74:62:7f:ce:
         69:66:db:3b:5d:9c:0e:6a:00:c9:ae:4e:a0:84:e4:a4:60:02:
         9e:c5:be:d6:ec:d6:de:93:3a:ca:8f:ad:25:a3:32:38:83:80:
         2f:e0:bc:26:d1:8a:a1:1d:73:30:61:6a:f3:19:4c:d4:46:96:
         69:c2:80:0c:ef:46:59:a1:4d:82:43:21:7c:d8:00:9a:f0:18:
         ea:0b:98:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:40:54 2025 by rpki-client