This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
File:                     7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft (raw, json)
Hash identifier:          sKb6OTTNwYmLq50Evu32mNkVJxaSFHLPMDr4u+FTJZU=
Subject key identifier:   59:21:63:42:86:9F:9F:A6:FD:98:A5:AA:BB:BC:23:9A:E7:4E:F7:9D
Authority key identifier: EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
Certificate issuer:       /CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Certificate serial:       019AF3F767635CC5ABBF1AE8F6D5E859A03C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
Manifest number:          08CE
Signing time:             Sat 06 Dec 2025 14:01:08 +0000
Manifest this update:     Sat 06 Dec 2025 14:01:08 +0000
Manifest next update:     Sun 07 Dec 2025 14:01:08 +0000
Files and hashes:         1: 7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl (hash: hfRE2Y+Yw9DeDbeZniyLUajLuaC1A2p865xPAzlLq6Q=)
                          2: xAkaLP7SkRQoBd-TYEf0fakBydQ.roa (hash: lfN1/uTbDMdDmb+tGMgvNHV7ezOmGfmodPA/bpTlm38=)
                          3: zeqX-4ngsCGD2Y4pwGbqJh4HQYw.roa (hash: KAYfqgoq5ZBvonKqM43MFg2S2Gi1Jp8WijPkzVbT/lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f7:67:63:5c:c5:ab:bf:1a:e8:f6:d5:e8:59:a0:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
        Validity
            Not Before: Dec  6 14:01:08 2025 GMT
            Not After : Dec  7 14:01:08 2025 GMT
        Subject: CN=59216342869f9fa6fd98a5aabbbc239ae74ef79d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:40:12:80:c0:89:92:c1:54:87:83:07:46:ef:
                    74:bf:1c:e0:c1:93:d9:65:2a:68:b4:54:9c:db:18:
                    01:79:64:0e:0a:ae:d4:79:09:df:50:0f:6d:64:60:
                    16:6c:47:a3:eb:87:8d:3b:2f:ae:a9:3d:0f:c7:48:
                    7d:df:f6:c7:4e:ef:60:54:61:d8:63:f0:dc:a9:a4:
                    cb:2d:4c:07:42:f9:ec:f2:80:f3:f7:a5:03:6a:ef:
                    c4:31:85:45:e4:a6:c5:5a:74:a9:7c:5f:eb:0d:58:
                    24:3d:e5:a7:1f:22:2c:f6:dc:90:58:67:63:eb:61:
                    c6:8b:2c:b6:0c:f2:b8:51:f3:08:08:ec:f0:85:ff:
                    98:3a:6b:ad:5b:ba:5a:33:42:e5:37:52:ba:0a:33:
                    5b:a7:a6:bf:67:86:d1:1a:05:2b:67:e3:c4:49:0b:
                    e3:4a:b7:d7:a3:28:83:8f:8a:fc:64:e2:61:8c:71:
                    7b:d7:46:b1:42:23:05:97:a7:c6:9a:0a:15:16:af:
                    2d:92:4e:6c:f8:35:0f:d6:09:62:36:e4:87:9d:26:
                    40:e7:73:d3:4a:a0:21:8c:71:12:02:b7:33:db:2a:
                    8d:5d:45:e4:4f:94:29:45:0a:af:f1:9d:13:52:24:
                    0e:29:25:02:04:cb:fe:ec:74:03:2a:46:40:5b:84:
                    3a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:21:63:42:86:9F:9F:A6:FD:98:A5:AA:BB:BC:23:9A:E7:4E:F7:9D
            X509v3 Authority Key Identifier:
                keyid:EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:3a:18:1b:52:1c:81:ee:ed:7c:cb:93:17:f9:59:97:3d:27:
         35:9c:7a:a7:30:c9:f7:9b:9b:65:91:07:55:25:13:31:09:9c:
         31:cb:05:71:ac:76:09:f8:bd:02:2a:8a:9b:40:70:17:d6:83:
         54:54:2e:fd:39:60:e6:91:15:d2:c9:84:17:0d:bd:63:bc:44:
         a7:da:86:a2:30:2c:b2:49:5e:d7:ad:ba:41:8c:38:00:36:4a:
         a0:3b:ab:05:b0:19:2e:72:fa:12:ee:6b:9a:eb:02:a9:8b:fc:
         4a:79:8c:cd:c6:c2:8c:7a:5a:15:ef:d7:56:da:b3:04:02:d9:
         a2:ef:ea:f4:6a:a8:a4:7e:d9:0e:70:4d:8c:b2:71:2d:70:5f:
         63:89:56:e2:6c:43:d8:56:c8:f6:2c:09:5b:d8:66:0b:29:7c:
         5e:2c:34:4b:04:db:ed:f7:0b:3b:10:bf:59:b9:39:73:84:cf:
         b2:78:35:89:d3:0a:05:dc:2d:c2:2b:a5:f5:e1:08:da:7d:bb:
         0b:55:2c:2b:ef:9c:12:11:58:40:e7:c1:01:43:1f:aa:13:c1:
         7c:71:76:48:19:bb:f6:e3:b7:54:a8:8b:29:23:63:d4:42:1f:
         c6:7a:61:d0:b2:29:6e:86:c8:c6:b5:87:7d:dd:f1:73:a6:d5:
         6c:f3:e1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:04:31 2025 by rpki-client