This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
File:                     K7wAKis1mxqoh54cTXBFWzGS76w.mft (raw, json)
Hash identifier:          wUfYOQZa+yJf+ngOVWOQC0nXUDn9Oosuz+N9mlfAsbM=
Subject key identifier:   15:BF:4A:B2:2C:15:9B:8B:56:B7:CA:5C:9F:6D:F9:21:C5:B6:67:97
Authority key identifier: 2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
Certificate issuer:       /CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Certificate serial:       019AF2091AFE578B46C912201A511D308526
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 05:01:14 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:14 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:14 +0000
Files and hashes:         1: 1R6LxgC-MSsXC8XcNc55PUWrpnA.roa (hash: eOlgUjGh2Sx9zQdK2p1WKLcAGtB58ts+W3RrmuzkDow=)
                          2: 2-psKgjkSNUOWnZFMoAD6l3epRU.roa (hash: gFGUN3be0G1hR2YAWLqKrs2cwQ3z+R+vgxUYB8SwE90=)
                          3: K7wAKis1mxqoh54cTXBFWzGS76w.crl (hash: kpB0jSlrwK+RY4tft0PyTt3uXKkMMIcfTPYkYr8P39s=)
                          4: gQebbEYT275J4Jd89tHKU2ac4sM.roa (hash: iKbGbenCLGdunx9L03flN4696vAcgVbczlqjT2YbIiI=)
                          5: otJ7nfoJ-zl16yzl1V2lDFiM0HA.roa (hash: ci4b1eT86BcKQNNV0LV6W2PZ/InXXcZnfo32SMed2tQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:1a:fe:57:8b:46:c9:12:20:1a:51:1d:30:85:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
        Validity
            Not Before: Dec  6 05:01:14 2025 GMT
            Not After : Dec  7 05:01:14 2025 GMT
        Subject: CN=15bf4ab22c159b8b56b7ca5c9f6df921c5b66797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f1:d2:86:76:39:0b:38:03:6a:8b:d6:ad:fb:
                    22:1b:52:b2:22:6a:c6:f3:44:54:a6:6e:f9:51:c0:
                    ae:b5:f4:ba:74:ea:5e:d7:34:8f:ed:e3:9b:bf:6b:
                    00:c0:f1:48:a7:11:fa:dd:85:fa:66:e2:07:a5:ad:
                    b5:20:34:61:c8:dc:d3:57:c8:fe:3d:b1:3f:a3:27:
                    35:ec:4e:d4:6a:29:3a:ce:e9:61:84:20:53:c8:40:
                    01:25:ba:f5:d2:41:13:15:c8:03:a2:62:01:72:c7:
                    49:69:06:18:e1:6f:70:04:cb:b2:6c:1b:10:a9:c0:
                    5f:6a:0d:0f:76:7d:2c:25:38:9e:df:2b:9d:5f:64:
                    8f:13:8b:91:0a:3d:a6:37:bb:4b:0a:37:17:d6:78:
                    81:df:4e:74:cb:07:2b:e7:5c:ed:4e:d0:d1:b0:a1:
                    e8:46:da:24:d2:27:59:b8:2f:2b:ab:b4:ce:8b:6e:
                    bb:e3:da:92:07:3d:55:fe:c3:37:ae:12:91:b4:25:
                    77:c8:a6:80:a5:ca:d2:91:dc:0e:38:70:61:2e:1f:
                    bc:bb:24:b1:aa:c2:3b:a8:ea:4b:b8:81:a4:94:02:
                    fc:b7:3c:cc:95:b3:07:aa:0a:05:0a:1e:58:81:57:
                    c1:70:e3:0d:53:46:7b:95:47:58:9a:5b:4e:e1:1c:
                    c2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BF:4A:B2:2C:15:9B:8B:56:B7:CA:5C:9F:6D:F9:21:C5:B6:67:97
            X509v3 Authority Key Identifier:
                keyid:2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e9:b4:13:7a:27:f1:b0:ac:2c:22:3a:b0:f7:a0:90:9f:86:
         0c:ec:ba:c8:a6:a4:a5:94:08:53:23:27:bc:99:50:3b:5a:a6:
         55:c5:41:5d:35:02:99:c4:23:14:33:2a:f7:ab:6a:88:7b:8a:
         31:8a:25:88:78:54:52:1c:11:50:60:96:fc:36:e0:f6:d5:70:
         b9:e5:77:fe:0c:49:88:4c:00:8d:bd:9b:2c:08:59:a3:01:60:
         48:29:0d:29:a4:e4:8c:ef:cf:5a:e7:85:68:55:7b:d2:70:5d:
         d0:35:74:14:25:fb:f3:0e:8d:2e:e1:e4:4c:b2:ae:b8:b3:31:
         e0:b4:3f:7e:33:a9:06:9d:b5:de:1e:d2:45:b0:41:16:bc:62:
         07:3b:04:09:93:67:a0:c7:34:2d:48:8a:38:19:9e:20:f9:ab:
         9f:5b:d1:db:20:cf:59:cb:53:f9:7f:e5:8c:a9:e6:62:67:74:
         11:21:5b:11:87:38:cf:f9:15:2e:95:d3:80:52:f8:52:16:d5:
         67:7e:c6:41:0e:4e:02:5d:86:bc:6a:cc:2a:d1:9b:f1:02:90:
         a7:d4:dd:c9:2f:93:e1:a1:34:9f:04:54:4f:8d:fd:5b:ca:fa:
         61:7a:c3:50:4c:b8:b3:59:72:e9:b1:1d:20:84:45:ce:82:ea:
         25:32:ff:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:07:25 2025 by rpki-client