This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
File:                     7m9CHCUwligDR9wuksoQzDmME08.mft (raw, json)
Hash identifier:          ikJoT9ZpCuPGJFZ9Rw6bM3pOk9OGD1w0RSfS6NXnmj8=
Subject key identifier:   C1:7A:04:6C:C5:1F:6B:FF:D2:2A:0B:4C:14:B3:18:8D:CB:DB:4C:5F
Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Certificate issuer:       /CN=ee6f421c253096280347dc2e92ca10cc398c134f
Certificate serial:       019B32683C4216795302E8E64912211CC351
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
Manifest number:          0F50
Signing time:             Thu 18 Dec 2025 17:00:50 +0000
Manifest this update:     Thu 18 Dec 2025 17:00:50 +0000
Manifest next update:     Fri 19 Dec 2025 17:00:50 +0000
Files and hashes:         1: 5YlDtF7Ig5TmbuS_NoCvq0dSUvM.roa (hash: O5AF3h5GUvVjXi+fdnM5KUl9Mafj4SPh9elj1bhbK30=)
                          2: 7m9CHCUwligDR9wuksoQzDmME08.crl (hash: q7lVDd8kQM9oL1vNndC3lcSwLH/ceAWQJTXe2ZD6CTY=)
                          3: jAeBGrf8BFIRbqKfW6MMAFHsAAY.roa (hash: XkntMpJexF4yO1fbtCkxhPtOe5hHQjbro7XU8mxBw50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:32:68:3c:42:16:79:53:02:e8:e6:49:12:21:1c:c3:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f
        Validity
            Not Before: Dec 18 17:00:50 2025 GMT
            Not After : Dec 19 17:00:50 2025 GMT
        Subject: CN=c17a046cc51f6bffd22a0b4c14b3188dcbdb4c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e3:fb:c0:1e:ba:da:d5:3f:12:0d:d4:cb:4a:
                    1f:29:f2:12:76:4b:eb:70:0d:78:c7:f7:88:80:6f:
                    90:8a:24:93:cb:29:f4:bb:cc:32:59:f8:88:6c:aa:
                    ee:7c:d3:e7:32:87:9e:f9:a7:d5:61:a9:e0:40:50:
                    33:fb:bf:f0:72:c7:2f:d6:ea:c8:92:00:d2:55:aa:
                    05:88:9c:89:5f:e1:ca:57:01:ad:53:a5:e9:be:c7:
                    58:48:83:d3:d2:ec:32:f8:ef:a3:a0:72:6a:ab:8b:
                    c6:e0:f4:e0:0d:06:23:94:a6:84:17:66:ff:7e:e3:
                    b3:e5:4c:77:58:48:f6:f4:0f:51:d7:06:de:94:2b:
                    3b:47:35:df:1a:4e:5d:8c:26:67:4c:ca:32:d9:91:
                    c0:00:b9:74:7a:30:61:06:c1:48:f6:8e:80:ae:3c:
                    18:55:ae:55:55:fd:3e:94:a7:10:d0:42:1a:37:f6:
                    9d:12:39:1d:45:40:f6:d2:96:81:f6:f3:4b:79:74:
                    6b:87:ff:81:79:67:27:bb:71:18:c0:0b:02:f7:c5:
                    a3:c6:93:52:80:d1:56:eb:53:e2:0e:cb:66:f7:47:
                    4d:79:b4:6e:13:69:a9:eb:dc:bf:c4:52:aa:ed:a9:
                    59:82:46:c4:96:c6:37:87:b0:de:d7:2b:4e:2d:92:
                    f8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7A:04:6C:C5:1F:6B:FF:D2:2A:0B:4C:14:B3:18:8D:CB:DB:4C:5F
            X509v3 Authority Key Identifier:
                keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:76:7e:a6:a5:af:2a:96:67:bf:46:b2:79:9d:36:2e:23:c7:
         15:40:67:59:22:36:52:e9:32:87:7f:a2:49:2a:31:30:9f:44:
         e4:39:56:a8:8b:db:58:a3:71:6f:f2:60:2b:a0:09:a8:38:54:
         ff:c2:08:50:36:32:1b:0c:50:97:21:b7:5d:b4:a7:cc:f3:ed:
         b4:3f:d1:09:4c:d3:54:ab:4e:27:55:25:14:5d:76:0c:dc:a1:
         2e:92:74:01:14:0f:91:fb:cb:58:ec:1b:22:81:b2:98:30:c0:
         e4:72:c9:12:8c:2e:6f:f7:7b:69:2d:ec:01:65:5c:d1:d1:b4:
         8c:c7:1e:f4:9a:cf:90:2f:6b:9f:7f:46:c1:b1:4f:ce:7a:bd:
         23:51:3b:17:45:57:17:d4:74:92:03:f2:c9:fb:6f:53:80:6e:
         0f:c2:d9:ad:5e:c0:0f:12:18:91:11:2c:69:bb:f5:5e:ec:18:
         aa:3b:9c:f2:69:42:9c:40:05:ae:dc:7d:25:f7:04:37:23:79:
         6a:a3:ad:7b:74:82:8a:c1:dc:be:09:81:71:fd:db:9a:3c:fa:
         1a:c9:df:80:dc:c0:69:c8:ec:b9:cd:b5:25:2f:48:f0:37:42:
         b2:51:3d:0c:e4:ba:fa:d2:a9:a3:cd:94:94:c1:20:d9:07:79:
         71:27:b8:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsyaDxCFnlTAujmSRIhHMNRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNmY0MjFjMjUzMDk2MjgwMzQ3ZGMyZTkyY2ExMGNjMzk4
YzEzNGYwHhcNMjUxMjE4MTcwMDUwWhcNMjUxMjE5MTcwMDUwWjAzMTEwLwYDVQQD
EyhjMTdhMDQ2Y2M1MWY2YmZmZDIyYTBiNGMxNGIzMTg4ZGNiZGI0YzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeP7wB662tU/Eg3Uy0ofKfISdkvr
cA14x/eIgG+QiiSTyyn0u8wyWfiIbKrufNPnMoee+afVYangQFAz+7/wcscv1urI
kgDSVaoFiJyJX+HKVwGtU6XpvsdYSIPT0uwy+O+joHJqq4vG4PTgDQYjlKaEF2b/
fuOz5Ux3WEj29A9R1wbelCs7RzXfGk5djCZnTMoy2ZHAALl0ejBhBsFI9o6ArjwY
Va5VVf0+lKcQ0EIaN/adEjkdRUD20paB9vNLeXRrh/+BeWcnu3EYwAsC98WjxpNS
gNFW61PiDstm90dNebRuE2mp69y/xFKq7alZgkbElsY3h7De1ytOLZL44QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMF6BGzFH2v/0ioLTBSzGI3L20xfMB8GA1UdIwQY
MBaAFO5vQhwlMJYoA0fcLpLKEMw5jBNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN205Q0hDVXdsaWdEUjl3dWtzb1F6RG1NRTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZTA5MzUtNmE5NS00N2E0LWFkNGMt
MzU0MmY5OWJlNjNiLzEvN205Q0hDVXdsaWdEUjl3dWtzb1F6RG1NRTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zZTA5MzUtNmE5NS00N2E0LWFkNGMtMzU0MmY5OWJlNjNi
LzEvN205Q0hDVXdsaWdEUjl3dWtzb1F6RG1NRTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHZ+pqWv
KpZnv0ayeZ02LiPHFUBnWSI2Uukyh3+iSSoxMJ9E5DlWqIvbWKNxb/JgK6AJqDhU
/8IIUDYyGwxQlyG3XbSnzPPttD/RCUzTVKtOJ1UlFF12DNyhLpJ0ARQPkfvLWOwb
IoGymDDA5HLJEowub/d7aS3sAWVc0dG0jMce9JrPkC9rn39GwbFPznq9I1E7F0VX
F9R0kgPyyftvU4BuD8LZrV7ADxIYkREsabv1XuwYqjuc8mlCnEAFrtx9JfcENyN5
aqOte3SCisHcvgmBcf3bmjz6GsnfgNzAacjsuc21JS9I8DdCslE9DOS6+tKpo82U
lMEg2Qd5cSe46A==
-----END CERTIFICATE-----
Generated at Thu Dec 18 22:04:30 2025 by rpki-client