This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
File:                     fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft (raw, json)
Hash identifier:          /CMz9ZuOPFz9aMDdAl5V6r4u69AMEwkT9SdNMlRvZ5s=
Subject key identifier:   33:1F:F5:31:CB:61:5D:FC:8F:F1:D9:47:BE:08:FB:FE:B7:93:29:C6
Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
Certificate issuer:       /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Certificate serial:       019AF3890EA0E99262673B45319C8A658FAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
Manifest number:          0553
Signing time:             Sat 06 Dec 2025 12:00:36 +0000
Manifest this update:     Sat 06 Dec 2025 12:00:36 +0000
Manifest next update:     Sun 07 Dec 2025 12:00:36 +0000
Files and hashes:         1: ahfN64_p8VtI62YroQrVTvBrIO0.roa (hash: sZaDoXjnbfKoPFXFsVFkCxokaAJgn9I/0mc/e5HXWnI=)
                          2: fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl (hash: GKlcjK6yZe+dEVqabJs3cnmiRpmxyOHLaNZdsoz+0qg=)
                          3: o9U5Dfyd-pSAin_ZdTXibSOZdr8.roa (hash: mqF6uwOJbIfnUqauX0VbeIR/n/OPtHF+diV/fjZGJJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:89:0e:a0:e9:92:62:67:3b:45:31:9c:8a:65:8f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
        Validity
            Not Before: Dec  6 12:00:36 2025 GMT
            Not After : Dec  7 12:00:36 2025 GMT
        Subject: CN=331ff531cb615dfc8ff1d947be08fbfeb79329c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e8:4a:96:58:58:7f:26:02:4f:ff:41:9a:63:
                    e3:b4:5d:f0:1c:b8:02:90:d6:60:88:70:b2:be:fa:
                    45:64:b4:21:84:22:d9:67:18:f5:9e:bb:91:a6:6b:
                    c2:85:60:ef:19:a8:2f:9f:db:92:fa:e0:43:d6:7c:
                    8c:fa:42:bb:23:50:7e:34:9b:34:e5:cf:54:7e:ed:
                    ff:ec:22:4d:c6:ca:0e:46:51:10:5e:4c:2f:c5:4d:
                    5d:cc:d0:c5:25:fd:90:b5:93:7f:d1:cf:5a:a2:c6:
                    85:b4:1b:16:ab:3a:a4:41:58:2d:a5:25:41:8d:d8:
                    a3:2d:8e:c0:09:f1:8d:05:74:e6:ab:ab:02:24:06:
                    ec:62:b3:e3:f2:d4:f6:af:26:d7:ca:b0:66:81:63:
                    5c:dd:5c:4f:c7:a8:4c:d1:2f:e6:86:ff:a6:70:6b:
                    f2:1c:90:43:e1:d7:b7:df:a9:fb:7c:9d:84:09:d7:
                    cf:06:14:ec:a2:04:d5:cb:50:54:e7:98:fa:e9:ef:
                    8d:09:aa:51:81:27:9f:c6:8a:34:1e:63:35:14:40:
                    a1:45:c1:59:6d:ed:2e:14:1f:1a:23:19:ac:de:2a:
                    c6:d0:fe:c3:64:ca:98:3f:04:78:cb:c7:00:19:dd:
                    3f:11:49:ec:1e:6a:ac:67:28:71:35:eb:08:db:0e:
                    d9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1F:F5:31:CB:61:5D:FC:8F:F1:D9:47:BE:08:FB:FE:B7:93:29:C6
            X509v3 Authority Key Identifier:
                keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ee:65:24:49:1e:e4:d2:e0:96:40:59:0e:50:b9:a6:e0:ee:
         22:ae:55:50:5c:f7:5a:bb:bf:9d:13:3a:f2:91:c4:71:b5:89:
         d1:89:f0:41:2e:1b:b4:b1:66:62:74:f0:7a:de:51:03:b3:3b:
         4e:f7:16:aa:fe:b5:6b:4f:e1:b6:da:ac:28:e7:2e:c4:37:05:
         3c:1e:0a:1a:1a:99:27:39:37:50:aa:43:d1:cb:49:c2:44:a7:
         c7:99:eb:d0:0c:e5:a2:b9:29:de:97:b7:8a:0a:03:00:8e:91:
         93:bb:f2:27:df:a4:32:cf:dd:cf:4c:0f:96:27:70:0f:38:b8:
         d3:e5:38:5d:56:ee:a2:c1:01:39:78:fa:32:00:6f:cc:6e:c8:
         8d:b4:9e:68:b5:78:0d:88:0d:1a:42:fc:e0:76:f2:85:35:6b:
         79:16:b6:c2:d3:03:f9:e3:ae:a6:2d:80:5d:c2:35:ad:53:2f:
         9f:b0:3f:ba:8c:f5:3e:76:b9:30:48:46:3b:37:db:ac:5a:3c:
         df:b1:51:da:96:7b:ae:d7:2d:75:dd:e5:5a:e1:5b:0c:49:0f:
         f1:1d:bd:0f:13:23:81:e6:d5:91:76:6e:88:b5:b4:6a:ac:71:
         50:20:ad:ee:d2:ef:6a:1c:5a:d9:76:ef:2a:0c:4c:45:28:6a:
         d1:cf:17:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:51:32 2025 by rpki-client