This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
File:                     v7STRXsvAuabhfcY3MFqmp7w_NE.mft (raw, json)
Hash identifier:          RyMV+rT7R3G6cove25YU/R61ULKK+AU6Q374GirsZEc=
Subject key identifier:   24:9C:92:AF:F5:B2:39:60:BE:E8:C2:76:EF:41:AA:78:1F:26:79:A8
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Certificate issuer:       /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial:       019AF72ED1994788D4309B8BAD3E9B0A2869
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
Manifest number:          0C13
Signing time:             Sun 07 Dec 2025 05:00:31 +0000
Manifest this update:     Sun 07 Dec 2025 05:00:31 +0000
Manifest next update:     Mon 08 Dec 2025 05:00:31 +0000
Files and hashes:         1: FtUQDEV_goV9Q63cZwJrNo1XKeY.roa (hash: Poc/aj2i2jRAb5gMRxZ1X3AZiJk2CkXvF60h8JBU3Lg=)
                          2: GOVv7UWiyAgkUB324DNsuUmKdTE.roa (hash: ADQ5I5pX9eFcLUcZ8U56+xsynmnuecGVYVarRV0N63M=)
                          3: PEppcNvJjXnRhJY43E_LrbZ4b6Y.roa (hash: cA6/Zn5y/f62RQujNI9AmlKGDu+DsPIKIqYlGLbyskk=)
                          4: YiYsGJx6tfQVO081Vxo55GvUSDA.roa (hash: XzfROabzEDDgQ3YtgsMz+CrIxVTOUzesfcSiy4Nm4h0=)
                          5: dltNpJjwDGHyEEOA677kBUzkRvU.roa (hash: 5oogiShbtMsUJb/98HpJq5UTDNd0RiHRIGkjEdT9ssI=)
                          6: tBTs9qTZvhEc-OOPlwI4K3aRl-k.roa (hash: ej0EH67XzstYQ3vD/Dm513ioNKVEsWJ6CV9bJXDlLj8=)
                          7: u52qW4JyOvyxFH_dm7Mf8f_9xYg.roa (hash: p5pa88452Qlp5obMC/dsSAsRdIWVZbdy4Bw3DHihOtQ=)
                          8: v7STRXsvAuabhfcY3MFqmp7w_NE.crl (hash: WqSRBA6Euu7Y825EMKQzN1s33XCktdffiRUn2e7F2+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 05:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f7:2e:d1:99:47:88:d4:30:9b:8b:ad:3e:9b:0a:28:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
        Validity
            Not Before: Dec  7 05:00:31 2025 GMT
            Not After : Dec  8 05:00:31 2025 GMT
        Subject: CN=249c92aff5b23960bee8c276ef41aa781f2679a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fc:44:3e:15:88:da:cc:9e:fc:e7:b2:5f:31:
                    bb:fc:e3:2f:7d:50:4c:c1:1b:54:4a:53:c1:ba:3f:
                    df:66:5d:46:8a:11:1a:ab:1f:73:43:35:17:59:e8:
                    86:7b:dc:94:a0:cc:ff:fb:c7:40:29:13:ea:26:6e:
                    6f:e3:5a:33:f2:17:09:22:00:2f:a8:55:f4:96:3a:
                    d0:2e:8d:8e:af:6d:d5:97:09:9f:dc:3a:fb:5f:99:
                    30:a1:ae:63:05:03:47:6b:63:84:e3:87:5d:36:a4:
                    53:6d:d2:17:e8:e1:f3:25:73:13:39:92:a8:ea:a7:
                    eb:c4:2f:da:a9:98:a8:62:6a:76:3a:7f:7a:85:08:
                    7b:9e:66:7b:c1:af:5a:8c:41:ae:e1:ca:cb:1a:c2:
                    ca:4b:d5:03:86:cb:9d:0f:76:d9:34:73:ec:48:ee:
                    3f:d0:ac:f4:2a:27:87:8f:e3:79:6d:e1:a9:4a:1b:
                    38:e5:89:fe:a4:6b:f0:fe:c0:7b:4d:ab:4a:3a:00:
                    00:52:94:bd:2e:86:c2:20:81:18:7f:37:40:ea:38:
                    19:7a:45:1b:e2:8e:a8:ed:31:cb:46:5b:63:26:a4:
                    a6:c0:de:34:7e:7d:de:cd:f4:e0:ed:f5:af:1d:73:
                    e9:6d:46:ea:e8:6a:69:7f:9a:3c:c8:92:45:01:6b:
                    db:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9C:92:AF:F5:B2:39:60:BE:E8:C2:76:EF:41:AA:78:1F:26:79:A8
            X509v3 Authority Key Identifier:
                keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:2e:2d:44:43:f0:b3:a6:a7:51:52:a5:c4:75:b9:8c:d3:2a:
         52:46:d8:25:4f:d5:8c:68:45:04:79:9c:c6:9d:58:89:6c:4d:
         c9:7a:57:9f:1e:fe:03:35:d5:5b:bf:02:05:2f:dd:06:bd:6a:
         ba:34:c3:4b:00:68:e4:74:2e:27:59:e1:3c:23:cb:40:69:7c:
         4c:1e:83:ec:5c:f7:37:39:f5:4b:e0:2d:97:b1:8d:27:db:32:
         65:5b:8c:0c:3c:75:66:73:ae:a4:a4:7a:86:3f:59:d2:0b:15:
         23:0d:a0:e9:23:aa:3e:80:a8:87:7e:f6:35:1f:78:2d:47:fd:
         ad:6a:1c:6e:41:3a:4e:a0:5c:30:99:69:14:a2:ef:c4:33:f4:
         db:ef:fb:c9:85:26:a9:22:5a:1d:0c:0a:91:24:67:e5:34:0e:
         49:4c:a2:20:fc:bf:24:b7:ff:8e:8b:2e:f9:21:0f:aa:44:d9:
         91:f5:c1:32:ff:41:c7:ee:3e:df:b6:aa:e2:66:72:32:60:b6:
         35:78:e6:16:ed:65:80:57:1c:91:d7:ce:c2:0f:f6:45:7a:37:
         2a:94:f9:f2:6a:ad:9a:ac:c1:11:14:e6:7c:74:20:ec:24:27:
         2a:3b:88:df:a8:52:cc:36:5a:ad:83:33:48:ba:50:3c:52:53:
         dc:06:8f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 12:41:13 2025 by rpki-client