This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
File:                     7T_3g2Uw0cR09NCItrNiJPv2mC0.mft (raw, json)
Hash identifier:          HPUxZXq4qptZdVRcLO7ddMNJxn+gM6G93r3iamP9mEg=
Subject key identifier:   5E:E6:B5:91:11:AA:E5:B2:50:A4:6A:81:32:E6:5F:55:76:C5:9A:46
Authority key identifier: ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
Certificate issuer:       /CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Certificate serial:       019B3268CBCC2748288835564013CC7145C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
Manifest number:          1782
Signing time:             Thu 18 Dec 2025 17:01:27 +0000
Manifest this update:     Thu 18 Dec 2025 17:01:27 +0000
Manifest next update:     Fri 19 Dec 2025 17:01:27 +0000
Files and hashes:         1: 7T_3g2Uw0cR09NCItrNiJPv2mC0.crl (hash: T2f9a2KhivD8nzIu3nAcqYnIKuCALjAUcyhZL9tG82Q=)
                          2: 9zc3UK9Q2NW5kQioYk692gU-YJI.roa (hash: BBodVy2RZip9O+WWUTv52ptxLTbUw/7auCFYyPArRAA=)
                          3: UQ_3RuYAdJoYpjdqceJNmc5aoug.roa (hash: q3FXkXKtZ8hFVmAvp+UOJxjM7FKEfq7BOOg+5WvlLx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 17:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:32:68:cb:cc:27:48:28:88:35:56:40:13:cc:71:45:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
        Validity
            Not Before: Dec 18 17:01:27 2025 GMT
            Not After : Dec 19 17:01:27 2025 GMT
        Subject: CN=5ee6b59111aae5b250a46a8132e65f5576c59a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d5:42:40:00:b6:b2:d4:9d:16:37:c8:38:31:
                    97:b3:41:ae:37:8d:04:5c:cb:b3:28:a8:5c:a9:01:
                    0f:03:5d:8e:d3:5b:d9:17:4f:a4:51:85:79:ea:c6:
                    e1:35:83:ea:69:b9:a0:05:0e:bb:b5:3d:91:83:33:
                    c4:47:89:f0:8e:9a:d4:c3:d7:45:2e:56:4f:da:88:
                    3e:68:2f:af:11:18:de:cb:fa:72:2c:2c:aa:59:09:
                    b6:b3:f0:13:c3:b6:f1:2d:78:b0:cf:e3:89:b5:b7:
                    fe:c5:83:fd:10:8a:18:82:3a:e7:7e:11:4c:b5:32:
                    95:a2:e1:6b:a5:e9:19:fe:2c:39:8a:be:de:42:b6:
                    fd:18:6e:c8:b0:d5:3a:2d:ea:cd:51:9c:91:2e:c1:
                    0b:f7:dc:fe:06:20:7f:d6:e6:40:5c:6f:b8:3b:68:
                    d4:c2:99:ee:45:77:12:63:56:12:67:3d:1f:4f:c4:
                    ee:50:0f:25:de:c0:21:f7:17:2f:a4:4f:f6:44:74:
                    86:b8:c9:e3:fd:30:1f:50:7b:33:9e:da:ed:b6:f4:
                    e9:9c:18:4b:35:7c:bc:9e:f3:01:02:6e:82:66:34:
                    df:30:31:7a:62:9c:d7:a9:79:5c:56:38:9c:b1:ce:
                    9c:14:be:f0:e7:b4:25:9b:89:5d:b5:59:fa:ed:c4:
                    fb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E6:B5:91:11:AA:E5:B2:50:A4:6A:81:32:E6:5F:55:76:C5:9A:46
            X509v3 Authority Key Identifier:
                keyid:ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:0f:92:ff:ff:de:a6:fa:ae:e8:63:47:71:70:c9:ec:d8:c1:
         48:7b:e5:86:70:7d:83:56:4f:e5:ae:30:88:50:fc:07:84:76:
         54:f0:07:ed:fc:f0:33:be:dc:38:78:a4:eb:5e:75:4a:67:35:
         d3:28:75:a3:b1:de:7e:9e:23:a1:25:cc:ac:df:83:55:fc:04:
         7e:62:45:5b:c3:f7:2b:9b:df:8f:8f:5f:6d:5c:90:fa:e2:59:
         d7:bf:65:dc:f2:47:04:ae:a6:bb:52:55:91:d0:78:aa:36:9e:
         bc:b7:c6:6f:67:2d:cb:c8:ef:88:a9:a8:f4:62:d0:b4:80:ca:
         37:29:cf:11:70:59:fb:08:03:03:f3:e2:ba:be:ae:11:f4:d4:
         82:c9:93:ef:42:69:5b:1a:60:a9:af:53:fa:77:fa:23:5e:d2:
         01:90:41:19:c6:66:a3:a1:97:5b:d0:54:69:bd:f2:dc:f3:3a:
         a1:23:62:89:c3:3a:06:5f:bd:c4:58:49:34:fd:b6:e2:05:85:
         86:71:40:3b:f6:05:b9:24:a4:6d:0b:18:bf:39:8c:9b:86:37:
         7e:55:05:b1:cb:04:a7:ad:01:ab:f5:0c:e5:40:f1:c9:ea:f6:
         4c:26:16:16:d3:18:11:21:19:a8:01:2d:e9:ea:36:78:20:89:
         4f:db:f1:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsyaMvMJ0goiDVWQBPMcUXJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkM2ZmNzgzNjUzMGQxYzQ3NGY0ZDA4OGI2YjM2MjI0ZmJm
Njk4MmQwHhcNMjUxMjE4MTcwMTI3WhcNMjUxMjE5MTcwMTI3WjAzMTEwLwYDVQQD
Eyg1ZWU2YjU5MTExYWFlNWIyNTBhNDZhODEzMmU2NWY1NTc2YzU5YTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdVCQAC2stSdFjfIODGXs0GuN40E
XMuzKKhcqQEPA12O01vZF0+kUYV56sbhNYPqabmgBQ67tT2RgzPER4nwjprUw9dF
LlZP2og+aC+vERjey/pyLCyqWQm2s/ATw7bxLXiwz+OJtbf+xYP9EIoYgjrnfhFM
tTKVouFrpekZ/iw5ir7eQrb9GG7IsNU6LerNUZyRLsEL99z+BiB/1uZAXG+4O2jU
wpnuRXcSY1YSZz0fT8TuUA8l3sAh9xcvpE/2RHSGuMnj/TAfUHszntrttvTpnBhL
NXy8nvMBAm6CZjTfMDF6YpzXqXlcVjicsc6cFL7w57Qlm4ldtVn67cT7qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7mtZERquWyUKRqgTLmX1V2xZpGMB8GA1UdIwQY
MBaAFO0/94NlMNHEdPTQiLazYiT79pgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1RfM2cyVXcwY1IwOU5DSXRyTmlKUHYybUMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82YWRlOWItMzIxNi00ZmVmLTgwNDkt
ZjNlMjRlMDc1ZTM1LzEvN1RfM2cyVXcwY1IwOU5DSXRyTmlKUHYybUMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82YWRlOWItMzIxNi00ZmVmLTgwNDktZjNlMjRlMDc1ZTM1
LzEvN1RfM2cyVXcwY1IwOU5DSXRyTmlKUHYybUMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWw+S///e
pvqu6GNHcXDJ7NjBSHvlhnB9g1ZP5a4wiFD8B4R2VPAH7fzwM77cOHik6151Smc1
0yh1o7Hefp4joSXMrN+DVfwEfmJFW8P3K5vfj49fbVyQ+uJZ179l3PJHBK6mu1JV
kdB4qjaevLfGb2cty8jviKmo9GLQtIDKNynPEXBZ+wgDA/Piur6uEfTUgsmT70Jp
Wxpgqa9T+nf6I17SAZBBGcZmo6GXW9BUab3y3PM6oSNiicM6Bl+9xFhJNP224gWF
hnFAO/YFuSSkbQsYvzmMm4Y3flUFscsEp60Bq/UM5UDxyer2TCYWFtMYESEZqAEt
6eo2eCCJT9vxyg==
-----END CERTIFICATE-----
Generated at Fri Dec 19 00:47:24 2025 by rpki-client