This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
File:                     d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft (raw, json)
Hash identifier:          DBcFwq4CxPCOPVehGuGNuDYmqWAbpaz0oJ7BdF6GumU=
Subject key identifier:   FC:0B:89:50:FF:0C:9E:9D:65:D4:4E:2E:91:9F:EF:77:9F:8C:2B:38
Authority key identifier: 77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61
Certificate issuer:       /CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
Certificate serial:       019AF23F8A4C5843CC7063DC7FDF96147E8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
Manifest number:          10CB
Signing time:             Sat 06 Dec 2025 06:00:41 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:41 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:41 +0000
Files and hashes:         1: 1-CTcDUEdN5WfEm_rs3o0JHhk5XU.roa (hash: lk5WrQW7f4eLUx+kxUxuWVLfFLTkEmxU4/4R6+50tjM=)
                          2: QsI91EQU0FfuQWtPM8GSqH3JUGY.roa (hash: E3wsAexKJr8HQY5TnjV1zhmCkOPgMph7WKoFlQ4Vnzc=)
                          3: d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl (hash: 9lkocQ1BeEdaHqPKYXO2yLnVaJL4NgZLPV/4kw8XWHc=)
                          4: g7sPwfEyrg2GU6nX9GnEZI5ry6U.roa (hash: gvrZns7JDU/MxjbK6KJTEHNI6mOo43rYah4+1PHu7cs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:8a:4c:58:43:cc:70:63:dc:7f:df:96:14:7e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
        Validity
            Not Before: Dec  6 06:00:41 2025 GMT
            Not After : Dec  7 06:00:41 2025 GMT
        Subject: CN=fc0b8950ff0c9e9d65d44e2e919fef779f8c2b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:12:1c:47:d4:20:51:ac:95:58:0f:d8:43:07:
                    1e:32:ed:b3:34:e0:c6:5f:99:26:e7:c7:a0:4c:23:
                    81:30:a7:af:38:58:89:aa:b9:e0:da:e2:a4:d4:a1:
                    85:0e:d1:3c:8d:28:3d:d6:b1:83:1d:18:7c:f9:15:
                    42:22:23:e5:be:5b:52:9c:56:d4:ef:c2:94:b9:4c:
                    77:76:32:66:76:e7:e3:7d:86:70:64:8c:8a:cd:a0:
                    5b:20:f0:6e:f2:ca:3c:4e:55:c0:02:d9:2d:5b:a5:
                    7b:13:fe:e9:fb:ca:96:78:9a:a2:e4:43:05:6d:0c:
                    fa:82:cb:67:22:cf:c4:17:c4:d2:b5:6f:16:cc:97:
                    23:4d:47:c5:96:7f:21:eb:60:0e:56:7f:f8:c5:30:
                    41:c5:bb:68:87:66:75:61:b8:9f:11:15:8a:f9:c2:
                    e3:7b:54:3c:fe:8a:6a:29:39:3f:ee:9f:36:e1:cb:
                    9c:03:f6:d1:fa:94:32:a2:70:f6:5f:b4:c1:be:a4:
                    91:51:e7:8b:25:16:c1:12:d7:b8:6a:73:9f:82:da:
                    44:61:87:78:bf:8b:67:69:55:b0:fa:f6:6e:99:bc:
                    74:58:b6:f8:db:72:a6:ad:19:ae:69:0a:ac:88:63:
                    23:56:a5:2e:5a:9b:ec:d8:15:e8:bc:ff:c7:01:bc:
                    07:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0B:89:50:FF:0C:9E:9D:65:D4:4E:2E:91:9F:EF:77:9F:8C:2B:38
            X509v3 Authority Key Identifier:
                keyid:77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:66:1f:c3:fa:86:d7:d4:48:5b:28:b1:51:66:0a:48:02:33:
         1f:a0:ee:fd:36:32:c3:41:93:9d:60:43:41:71:02:46:8c:6e:
         f7:cb:ed:99:92:84:cf:de:70:6a:16:06:92:58:53:3d:75:1a:
         54:38:8b:79:77:1a:80:6a:8c:fe:27:58:c8:3b:b2:f6:9a:57:
         01:ec:a2:fe:a4:84:6f:30:88:20:fd:5a:e2:f4:20:8b:cb:1c:
         12:91:85:45:00:e2:ee:53:7d:01:b3:ee:e6:e1:9b:d4:bb:54:
         03:39:1f:ad:87:23:d4:ad:0d:cd:88:fd:ce:94:95:69:a5:f3:
         c7:91:df:24:17:04:9f:80:82:92:57:ca:3b:64:76:b7:8d:c0:
         4b:21:1a:ef:55:3d:9d:97:9b:09:16:05:fa:96:70:c1:e8:95:
         d2:8e:65:79:62:65:09:67:27:84:f0:f2:6b:79:7d:65:69:00:
         65:b9:f6:e5:5f:4c:d6:86:22:dd:aa:f5:4b:01:55:5c:26:a3:
         20:a5:65:cc:9a:3f:65:c0:eb:a3:c2:48:99:15:08:83:0d:a1:
         c1:1d:1d:bc:12:e7:9c:1a:03:16:76:da:c0:ec:59:c0:2b:0f:
         b4:c3:30:c0:0b:f5:79:15:0f:8c:b0:00:ca:b4:b3:04:ae:93:
         32:a4:2c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:07:07 2025 by rpki-client