This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
File:                     7kw_wBItgx--qKuyCk6bZcVAObI.mft (raw, json)
Hash identifier:          SgwyaCwZnKh+ZN9u5l2069Hev2uUPtNR6Dun3rn38b4=
Subject key identifier:   EE:89:E3:24:E3:C4:A1:50:9B:67:19:89:8D:0A:C6:04:FD:92:DE:FB
Authority key identifier: EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2
Certificate issuer:       /CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
Certificate serial:       019AF12DF7F8E68828DA8C0A3EF0F16F64D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
Manifest number:          16F7
Signing time:             Sat 06 Dec 2025 01:01:52 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:52 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:52 +0000
Files and hashes:         1: 7kw_wBItgx--qKuyCk6bZcVAObI.crl (hash: vej+5E4nOVM05g2waym2JSEfqotCvGccH+I/gdIIEJg=)
                          2: AKJNBvg_Wp6-g3QkU1hgfnYKS_I.roa (hash: 8/1gxZ5RhK3Xfc9FWx/YXavES1/BKptW13V8wouvEZc=)
                          3: NPvM3xVxkQ_LMP_9_lAVPXggEPY.roa (hash: WMRbhoyDgXHVdgSvk5Bk4s0agvzfv3IFLc0hFCDdwCk=)
                          4: R2R6Zwpm3C7mEGCf96myxK2TaP8.roa (hash: JHhhJ/hqneURZNBRt/i03bXTcRI7N5eSJkdKe9AFbQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:f7:f8:e6:88:28:da:8c:0a:3e:f0:f1:6f:64:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
        Validity
            Not Before: Dec  6 01:01:52 2025 GMT
            Not After : Dec  7 01:01:52 2025 GMT
        Subject: CN=ee89e324e3c4a1509b6719898d0ac604fd92defb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ab:74:70:b3:0d:61:09:ad:81:7b:bb:75:b3:
                    cb:0c:bd:b8:a0:a5:c5:f4:97:8b:83:bb:73:a6:13:
                    c1:c8:78:dc:41:b8:b8:63:bd:86:78:fc:11:cf:1e:
                    0e:dd:ac:ec:e5:dc:f5:25:81:42:bf:85:9f:97:b3:
                    c7:28:1f:72:31:28:f5:f2:92:7b:a1:60:32:ef:ce:
                    ef:ac:bf:34:41:36:7d:69:0f:23:13:d6:6f:8c:e9:
                    82:0a:09:c8:c9:06:04:d7:d8:77:dc:2c:c6:4d:e2:
                    b2:22:64:5f:ff:4c:20:a3:37:c9:ed:2c:71:e5:77:
                    1a:3e:06:c5:7f:93:a3:a5:95:71:b8:76:1b:10:c7:
                    a6:d8:31:44:a8:ef:89:27:44:97:31:90:04:dc:aa:
                    ba:5a:61:19:b7:19:ce:8d:38:d8:23:f5:e8:34:46:
                    a3:d6:ee:b8:dc:81:36:f3:a8:fa:71:e9:fe:54:2e:
                    88:6e:4c:4a:db:bf:34:02:c7:75:00:42:36:4e:bc:
                    90:b2:5c:7f:8c:1e:05:86:5c:f7:09:07:1b:1f:7b:
                    95:bc:66:0c:2f:27:44:94:5d:65:29:d6:e7:3c:5d:
                    14:96:01:70:ea:79:b2:ee:d6:c6:d8:e7:c5:d8:3d:
                    5a:ff:4c:68:a7:9e:24:b1:0b:83:20:1d:03:01:a8:
                    3e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:89:E3:24:E3:C4:A1:50:9B:67:19:89:8D:0A:C6:04:FD:92:DE:FB
            X509v3 Authority Key Identifier:
                keyid:EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:48:e8:14:ff:24:7b:85:b4:03:c4:2e:86:4c:5e:21:7c:f4:
         59:8f:e7:a0:d8:ae:8d:ed:85:65:97:42:36:aa:49:d7:1a:7d:
         07:f5:c4:b4:22:a8:e9:b4:6b:93:65:3b:19:85:81:82:0a:a2:
         04:4f:89:64:4a:b3:d8:fb:21:80:3d:db:45:8d:b2:e0:c0:20:
         c1:ab:85:51:8f:84:ab:c0:5d:93:ef:e0:4f:a9:96:33:55:70:
         19:5a:0d:b9:32:a4:bb:a1:60:3f:f4:ef:dc:a9:e2:95:c3:b6:
         0b:c4:80:03:9b:c7:2e:eb:12:5b:3c:34:e7:95:04:b5:ba:86:
         a9:7c:75:5c:1e:8d:88:d8:1f:2c:9f:c7:1d:93:c1:e0:03:5a:
         23:ab:78:58:63:70:f9:43:53:39:9c:c6:4c:08:53:b4:cc:c8:
         02:08:20:dc:c4:67:8c:63:96:f6:ff:66:35:85:97:6b:9e:84:
         d3:71:8d:e0:56:06:80:28:c4:e3:79:d3:b2:81:8d:cf:b4:bb:
         4b:d8:ea:48:44:16:75:a6:29:8f:3b:6e:7d:7e:08:39:bf:f9:
         98:55:65:3c:8a:3c:4a:f4:7e:48:16:f2:73:7f:33:69:5b:51:
         7c:71:a5:2b:ff:3f:c1:8a:d4:ae:92:f4:b6:78:44:72:61:ea:
         c4:39:ee:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:39:18 2025 by rpki-client