This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.mft
File:                     ehDuIoBzMoosIIHLsqls0SZNvvE.mft (raw, json)
Hash identifier:          i1Fdmggtzs6Cssno/EZ/9ONSqI8P2PyAjD3vU7AJDHk=
Subject key identifier:   83:C7:31:DC:46:82:27:4F:45:56:65:B1:95:56:37:C4:2F:3C:43:CF
Authority key identifier: 7A:10:EE:22:80:73:32:8A:2C:20:81:CB:B2:A9:6C:D1:26:4D:BE:F1
Certificate issuer:       /CN=7a10ee228073328a2c2081cbb2a96cd1264dbef1
Certificate serial:       019AF42E4963EC1BDA072C3F99A158C62009
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.mft
Manifest number:          074B
Signing time:             Sat 06 Dec 2025 15:01:05 +0000
Manifest this update:     Sat 06 Dec 2025 15:01:05 +0000
Manifest next update:     Sun 07 Dec 2025 15:01:05 +0000
Files and hashes:         1: 9SFdi7V4q-05lNgfIa-K_CLlxc0.roa (hash: Kxe5R+STpor8dRXj7m0AfgFUBqqAzp8M8cMC2zERYAE=)
                          2: YOoATeftAqa3NPiX4GaHabwS1wo.roa (hash: DFj5QH8pLrMMR4sLFXByWiOjYdjY2qX4JxhZH4EeUc8=)
                          3: ehDuIoBzMoosIIHLsqls0SZNvvE.crl (hash: LY5vfj6dqe/Ag4kcMoRs3iAbFULDMnyIbRHa3Tqs7XQ=)
                          4: iId92xKtiFHP1gLGCJzcRznJ-x8.roa (hash: K/cBgrLnI3n5D0y566D4mvg3caFRpTqECvwpfj65k50=)
                          5: nGtIZ1A0r3xiykXpIIhUDVqM2rM.roa (hash: GlsG6Os9dw7nPxzZGJzrKgTYWqeKyXt9Ngu3pmbbKe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:2e:49:63:ec:1b:da:07:2c:3f:99:a1:58:c6:20:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a10ee228073328a2c2081cbb2a96cd1264dbef1
        Validity
            Not Before: Dec  6 15:01:05 2025 GMT
            Not After : Dec  7 15:01:05 2025 GMT
        Subject: CN=83c731dc4682274f455665b1955637c42f3c43cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:57:da:13:6a:22:5a:f5:cd:72:b9:2f:7f:b5:
                    63:cb:ff:8b:44:d6:ef:63:19:cd:ef:69:b7:f6:da:
                    3f:46:77:7b:39:e7:2a:3d:87:15:b2:c2:6e:e1:76:
                    ec:d9:62:23:f2:8d:79:d5:0d:ec:67:b6:9b:68:0a:
                    64:d9:8c:fa:a8:25:22:ae:de:4a:36:09:51:fd:60:
                    09:0d:ab:08:c0:03:65:81:ff:4e:1b:cd:52:58:8e:
                    51:25:93:6e:c5:d6:7f:44:55:75:f2:89:94:8b:19:
                    bf:d8:1c:ef:b0:2e:6b:74:21:d6:aa:b2:96:2d:35:
                    57:40:d5:e1:d1:7c:6d:92:10:92:13:cc:df:8e:a7:
                    a7:74:59:7f:a3:67:e1:c0:99:d2:e9:4b:25:b7:74:
                    a7:b8:af:5a:57:70:41:be:66:b3:7e:f5:65:34:2d:
                    6a:e6:d9:f2:f3:74:65:88:d1:3d:d4:1b:56:45:85:
                    88:f7:91:db:66:c3:ae:92:06:85:bd:4b:ef:22:23:
                    f5:f4:d8:08:89:b1:0c:b8:6e:7e:41:23:fd:f8:be:
                    c0:cd:3e:c8:b6:68:2e:c1:b2:44:19:1d:c3:3c:fa:
                    f4:7a:de:04:fa:77:15:ef:da:b0:7e:dd:22:87:b1:
                    90:a5:d8:6a:10:a6:77:34:8a:df:40:1b:5b:de:ff:
                    be:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C7:31:DC:46:82:27:4F:45:56:65:B1:95:56:37:C4:2F:3C:43:CF
            X509v3 Authority Key Identifier:
                keyid:7A:10:EE:22:80:73:32:8A:2C:20:81:CB:B2:A9:6C:D1:26:4D:BE:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:a3:d0:78:b5:8e:1b:81:9d:94:2a:94:80:a1:cc:39:7a:dc:
         66:94:dd:8b:86:17:87:9f:a0:3d:b9:da:36:75:59:be:65:aa:
         dd:e2:2f:f3:be:48:5d:8b:ed:01:b4:03:94:fb:22:76:08:f4:
         87:66:39:23:0b:35:68:2e:90:e4:e1:fb:56:fc:a2:5c:9c:14:
         33:ae:24:c6:15:fd:36:92:bd:73:50:e6:9b:55:d4:94:bf:5c:
         38:75:87:01:ec:d9:ad:2d:5e:21:dd:d7:fc:49:d0:1b:32:53:
         5c:b7:be:e5:48:37:80:5e:24:62:dd:42:d1:18:95:7c:43:09:
         9f:c2:6c:ff:5e:e7:c3:15:44:e0:b6:17:4a:51:22:67:8f:64:
         95:00:32:67:5a:00:df:96:db:33:08:ff:e4:ff:64:31:18:63:
         0a:3d:e4:52:73:9e:53:92:50:ee:06:49:16:6f:9a:83:b0:36:
         4e:1f:3e:18:8b:73:40:ab:40:b6:84:58:d3:59:51:d0:b7:34:
         c6:02:d6:9f:cc:3c:a2:32:06:0c:c1:07:07:e1:e6:06:ce:b8:
         c1:1f:37:a3:1c:f8:d3:d7:2a:d0:a8:fd:6c:33:7b:4d:26:67:
         e4:7f:e0:a7:b3:55:4a:ea:85:33:17:ef:cf:1a:fb:50:5e:d6:
         d9:14:c3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:25:25 2025 by rpki-client