This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
File:                     7WtTyjBwQ0J-9OrInHfBuhP28C4.mft (raw, json)
Hash identifier:          z2Cvs9VfdGDR3Lei2NN/0eYZLV7bNdkiLW2kXBuD9EE=
Subject key identifier:   5F:7A:D0:59:9D:36:09:F1:F1:FA:55:77:9D:88:E3:9A:D9:D0:3E:69
Authority key identifier: ED:6B:53:CA:30:70:43:42:7E:F4:EA:C8:9C:77:C1:BA:13:F6:F0:2E
Certificate issuer:       /CN=ed6b53ca307043427ef4eac89c77c1ba13f6f02e
Certificate serial:       019AF12D1D4EBF10CFDBD69E147B2A4D0AA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
Manifest number:          0D55
Signing time:             Sat 06 Dec 2025 01:00:56 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:56 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:56 +0000
Files and hashes:         1: 7WtTyjBwQ0J-9OrInHfBuhP28C4.crl (hash: J8AGxUUv039R23Yfczi4sJ4SUyN+9z6OlF8AGJaXIKQ=)
                          2: YUYJWAPlDAqYr8-D4VfN8LQLeMA.roa (hash: at6X5FWtDhfqKory2gk30h0rP9dNBcyxgRSPjmnHkpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:1d:4e:bf:10:cf:db:d6:9e:14:7b:2a:4d:0a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6b53ca307043427ef4eac89c77c1ba13f6f02e
        Validity
            Not Before: Dec  6 01:00:56 2025 GMT
            Not After : Dec  7 01:00:56 2025 GMT
        Subject: CN=5f7ad0599d3609f1f1fa55779d88e39ad9d03e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:80:a3:96:1f:4a:4a:45:a1:d9:82:30:bd:c8:
                    a3:fa:9a:1a:34:33:59:cf:3c:cb:76:ed:b9:73:24:
                    b9:32:90:8c:f8:ad:44:81:1a:a4:23:57:4b:90:67:
                    39:b8:de:fc:3e:4b:d7:79:71:63:3c:66:a2:f4:15:
                    7e:a9:9a:a0:7d:66:f4:ec:82:db:93:0e:55:1f:6b:
                    9b:bd:f6:ed:c4:79:c2:78:43:15:fa:94:28:35:a9:
                    01:5b:88:df:d2:ea:b4:7b:e6:e6:ca:f9:c8:3f:6c:
                    04:23:a8:97:dc:de:04:89:2f:90:09:b1:62:91:e0:
                    ef:7c:fe:f0:d7:f3:11:be:07:d2:cd:ab:98:d3:6a:
                    11:35:4d:92:fc:b1:f6:ee:da:6a:d6:68:f9:0e:84:
                    66:e7:dd:9e:f3:d4:29:0d:0f:f0:37:c6:f4:a7:df:
                    28:c7:98:c6:f7:b2:3e:23:74:19:43:61:20:29:61:
                    f2:4c:ca:5c:74:88:20:24:49:39:d3:2f:15:db:06:
                    9a:12:20:26:8a:bc:1f:84:da:7b:13:1a:b0:23:db:
                    94:9c:f6:03:f0:45:fd:f5:ba:c1:50:21:c7:70:0f:
                    86:00:03:fb:66:a1:e6:db:56:3c:bb:e8:fc:2d:eb:
                    0c:28:7b:1a:34:32:ab:a3:bb:30:e6:56:f1:bc:b0:
                    e4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7A:D0:59:9D:36:09:F1:F1:FA:55:77:9D:88:E3:9A:D9:D0:3E:69
            X509v3 Authority Key Identifier:
                keyid:ED:6B:53:CA:30:70:43:42:7E:F4:EA:C8:9C:77:C1:BA:13:F6:F0:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:13:06:53:61:5b:85:20:5e:10:6e:79:4c:c8:e2:b1:44:bd:
         eb:58:85:89:f3:7f:8f:49:07:46:f9:5a:b3:6e:71:fc:86:91:
         ae:f3:91:a2:23:f6:b4:d7:01:bd:c5:89:48:aa:26:58:74:c6:
         2d:c8:85:2c:3c:2e:bb:e7:65:a9:e6:42:6c:b0:01:07:2a:66:
         63:0e:a8:50:31:f8:96:54:b7:82:6f:45:dc:ef:78:99:d8:1e:
         82:7e:97:1e:53:79:48:41:c4:17:b3:44:db:f9:e8:e9:6a:9b:
         79:91:d2:2e:93:c3:ab:fd:cd:57:5b:cc:12:85:59:d9:9d:4a:
         4d:d5:cf:a1:a7:66:e1:bb:ac:a0:5e:d6:ca:5a:1c:e2:5d:18:
         9c:7a:db:47:0c:0e:2d:66:1a:56:30:30:09:36:cf:98:7a:5d:
         fc:e8:81:9e:e5:5e:1c:33:4e:f9:fd:74:63:ec:54:dd:25:62:
         6f:43:fa:3c:55:69:9a:95:91:71:6f:59:62:93:e9:6a:10:23:
         7e:0a:c4:3e:e0:8e:5a:d6:86:95:91:36:e4:fd:b8:3c:37:f4:
         b1:39:6e:70:d0:f1:4d:54:3e:54:37:ba:b0:c5:b8:60:01:de:
         8c:bd:ba:01:16:a9:80:9c:be:1e:11:c1:2c:40:71:aa:66:d0:
         fb:1d:6b:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLR1OvxDP29aeFHsqTQqmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNmI1M2NhMzA3MDQzNDI3ZWY0ZWFjODljNzdjMWJhMTNm
NmYwMmUwHhcNMjUxMjA2MDEwMDU2WhcNMjUxMjA3MDEwMDU2WjAzMTEwLwYDVQQD
Eyg1ZjdhZDA1OTlkMzYwOWYxZjFmYTU1Nzc5ZDg4ZTM5YWQ5ZDAzZTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ICjlh9KSkWh2YIwvcij+poaNDNZ
zzzLdu25cyS5MpCM+K1EgRqkI1dLkGc5uN78PkvXeXFjPGai9BV+qZqgfWb07ILb
kw5VH2ubvfbtxHnCeEMV+pQoNakBW4jf0uq0e+bmyvnIP2wEI6iX3N4EiS+QCbFi
keDvfP7w1/MRvgfSzauY02oRNU2S/LH27tpq1mj5DoRm592e89QpDQ/wN8b0p98o
x5jG97I+I3QZQ2EgKWHyTMpcdIggJEk50y8V2waaEiAmirwfhNp7ExqwI9uUnPYD
8EX99brBUCHHcA+GAAP7ZqHm21Y8u+j8LesMKHsaNDKro7sw5lbxvLDkVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF960FmdNgnx8fpVd52I45rZ0D5pMB8GA1UdIwQY
MBaAFO1rU8owcENCfvTqyJx3wboT9vAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1d0VHlqQndRMEotOU9ySW5IZkJ1aFAyOEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hMjhkZGUtOGVkNi00ZDNkLTliYTAt
NmQ2MTVmM2UxNGY1LzEvN1d0VHlqQndRMEotOU9ySW5IZkJ1aFAyOEM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9hMjhkZGUtOGVkNi00ZDNkLTliYTAtNmQ2MTVmM2UxNGY1
LzEvN1d0VHlqQndRMEotOU9ySW5IZkJ1aFAyOEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghMGU2Fb
hSBeEG55TMjisUS961iFifN/j0kHRvlas25x/IaRrvORoiP2tNcBvcWJSKomWHTG
LciFLDwuu+dlqeZCbLABBypmYw6oUDH4llS3gm9F3O94mdgegn6XHlN5SEHEF7NE
2/no6WqbeZHSLpPDq/3NV1vMEoVZ2Z1KTdXPoadm4busoF7Wyloc4l0YnHrbRwwO
LWYaVjAwCTbPmHpd/OiBnuVeHDNO+f10Y+xU3SVib0P6PFVpmpWRcW9ZYpPpahAj
fgrEPuCOWtaGlZE25P24PDf0sTlucNDxTVQ+VDe6sMW4YAHejL26ARapgJy+HhHB
LEBxqmbQ+x1r9A==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:28:04 2025 by rpki-client