This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
File:                     e9WZftB1wimLRhIl4QYPV3sdfU0.mft (raw, json)
Hash identifier:          opndUKWwJyTYI9HxV0maEl1uWj/iloBoBRshU2OHu8Q=
Subject key identifier:   CC:C9:0F:D2:8C:62:48:3F:0E:1C:BA:70:C1:49:7C:2A:58:98:C2:F5
Authority key identifier: 7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
Certificate issuer:       /CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Certificate serial:       019AF2769870D127C9B6924A3F7C786F6178
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
Manifest number:          0B31
Signing time:             Sat 06 Dec 2025 07:00:49 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:49 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:49 +0000
Files and hashes:         1: GcQb7Wci-pVX30WsNPMX_X8ZJVY.roa (hash: 0NLct9+IWSmNLab833+pcvKvnzISJQn90Hh82nLgM+o=)
                          2: LMLHHOF93hK4OUpbUUvvwD0c0kY.roa (hash: 02jA2t2eBDun8+LsbWX6msyQRXMN/G2Ajm0JM11hXxw=)
                          3: e9WZftB1wimLRhIl4QYPV3sdfU0.crl (hash: eiSa/DIV6rEP5MKVb+fG9EdcYTNxOlw41AMyc8Fq9zE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:98:70:d1:27:c9:b6:92:4a:3f:7c:78:6f:61:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
        Validity
            Not Before: Dec  6 07:00:49 2025 GMT
            Not After : Dec  7 07:00:49 2025 GMT
        Subject: CN=ccc90fd28c62483f0e1cba70c1497c2a5898c2f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d6:c0:6b:92:05:f4:1e:70:46:7b:3b:0e:fd:
                    de:8d:a6:2f:a6:92:19:06:82:49:af:f0:e6:27:04:
                    ba:b3:13:91:3c:7c:2d:88:24:7f:71:37:df:6a:fd:
                    d5:91:08:b3:ad:48:53:f4:55:77:35:a8:dd:c3:0e:
                    ba:ff:00:2e:ae:e4:93:31:cb:ea:db:26:21:35:aa:
                    8f:7f:15:cc:01:18:07:2a:49:45:7b:04:88:1b:fe:
                    50:d0:bb:d1:96:a0:c9:9b:f9:ea:97:5d:c6:8e:7e:
                    8d:34:6d:be:56:ed:27:b0:51:19:a1:fd:71:b6:7c:
                    64:ad:99:d6:e6:7a:a0:a8:d5:0a:8f:db:45:14:c0:
                    77:b5:52:d8:db:91:85:7a:16:41:90:da:56:6e:65:
                    0f:d2:32:69:e6:49:c2:92:31:c8:62:f8:f7:fb:7f:
                    81:e3:46:1f:ea:17:0b:3c:86:1d:d9:01:f3:1d:23:
                    d5:b6:0f:d7:d0:42:65:87:70:6a:da:9b:9d:25:81:
                    7f:21:33:43:c8:8f:1b:23:17:c4:e7:db:40:d8:57:
                    f4:95:c7:3a:c0:6e:1e:e6:b5:5c:f8:3e:09:18:3a:
                    8b:fa:93:08:79:e1:f1:aa:83:ea:29:72:8a:8f:26:
                    0d:8f:06:47:6d:be:20:d0:64:e9:9a:ce:a6:4e:a8:
                    f2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C9:0F:D2:8C:62:48:3F:0E:1C:BA:70:C1:49:7C:2A:58:98:C2:F5
            X509v3 Authority Key Identifier:
                keyid:7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:f1:d1:4c:7c:1d:e4:78:e8:5d:29:14:ec:78:47:89:e2:ac:
         62:2d:0e:d3:55:6b:f7:28:c3:fc:6c:f1:94:16:ac:e5:b5:19:
         e4:6b:8d:eb:26:b4:b2:e6:b0:78:5b:c9:5c:53:6d:a7:fc:5e:
         2c:25:b2:82:e3:30:2f:87:e9:55:e0:7d:e2:c4:77:7c:ce:e1:
         20:a8:78:82:bf:b0:22:b0:d7:c2:37:f8:8d:fa:37:d6:60:37:
         b1:7c:cc:97:58:8b:be:7d:a9:15:43:b2:a0:55:c3:43:88:3d:
         d4:72:c1:d4:98:30:86:d2:ec:ab:54:92:34:44:7c:41:c8:f8:
         c2:b7:41:c5:21:2c:de:14:9c:11:a0:bd:11:23:90:65:e0:49:
         f6:10:c8:66:bf:0a:fe:72:a7:99:c8:1d:11:f8:f4:8d:ea:6e:
         b4:97:7c:fb:ef:68:1d:6a:01:e6:73:ae:13:cd:23:1d:f0:3a:
         69:66:2d:40:c0:83:4e:b3:50:b1:5e:0c:c6:41:a6:d3:02:00:
         91:68:d8:df:7f:c4:6e:59:f6:16:aa:55:e5:bc:e5:fc:72:0e:
         f6:36:2f:93:56:ee:39:2a:4b:70:af:21:5f:45:d3:fb:ef:37:
         d2:db:9b:3c:4b:71:e6:72:68:e9:38:d9:d2:bc:dc:12:30:ba:
         d9:70:24:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:31:12 2025 by rpki-client