This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
File:                     7dnow7XdvumM1_7qDf-MdiW4Wp0.mft (raw, json)
Hash identifier:          t/ojttpwUx/wRfCJIdv4Ne5akAmMvRvwOFwK1dgbqNM=
Subject key identifier:   BA:32:DC:BE:E9:88:C3:B4:56:94:E5:3B:26:0B:5D:EB:E6:3F:9D:93
Authority key identifier: ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D
Certificate issuer:       /CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d
Certificate serial:       019AF209518C17C3E8A5C397082C79A723D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
Manifest number:          0CD1
Signing time:             Sat 06 Dec 2025 05:01:28 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:28 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:28 +0000
Files and hashes:         1: 7dnow7XdvumM1_7qDf-MdiW4Wp0.crl (hash: tgMaMzR654EcdSJfFAkNDfwK+slqSR4AGkoGYsDxkTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:51:8c:17:c3:e8:a5:c3:97:08:2c:79:a7:23:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d
        Validity
            Not Before: Dec  6 05:01:28 2025 GMT
            Not After : Dec  7 05:01:28 2025 GMT
        Subject: CN=ba32dcbee988c3b45694e53b260b5debe63f9d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f3:d3:2c:c4:af:84:74:71:55:f4:8b:d5:b2:
                    e2:3b:48:d6:f1:93:32:8f:40:52:28:fd:63:9a:ce:
                    18:a2:b0:a5:9c:06:aa:a9:0b:f5:57:69:91:33:ed:
                    f0:5b:9d:9d:8f:1a:3a:28:db:0f:5c:6b:81:15:8c:
                    e5:88:6d:8d:de:70:e0:e9:c0:28:5e:56:9b:44:87:
                    7e:82:be:62:d3:6b:9b:c0:3a:70:c8:e4:52:f2:c5:
                    b4:1f:78:0d:d9:79:06:7f:81:d7:08:cd:c9:37:41:
                    55:8d:46:0b:49:5d:07:d7:98:a9:fb:9f:97:8e:16:
                    bb:1d:6a:77:5d:c4:01:cc:dd:a8:cd:08:9b:f2:88:
                    2e:93:59:78:f0:80:f6:f6:dd:79:ad:99:2b:30:d5:
                    69:96:86:2e:13:80:f4:69:6e:7f:5f:78:73:e9:d2:
                    79:85:5a:d4:6a:6d:0d:40:bf:ba:a0:d5:6c:b4:10:
                    bf:23:6e:f5:60:b6:9c:4a:60:71:df:8d:f3:42:83:
                    99:cc:b4:57:9a:72:68:c3:7f:4d:85:8a:d3:d3:cd:
                    cc:52:31:a9:d1:d3:aa:bd:d6:b2:58:7e:50:60:78:
                    02:d2:a8:4a:37:0d:5e:57:f3:a8:99:f8:9e:91:42:
                    9a:89:d7:b0:33:4e:f4:45:53:7b:90:89:1d:00:22:
                    f8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:32:DC:BE:E9:88:C3:B4:56:94:E5:3B:26:0B:5D:EB:E6:3F:9D:93
            X509v3 Authority Key Identifier:
                keyid:ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c5:55:dc:92:f6:1b:3a:0c:98:ae:2f:f9:a9:d2:97:9a:a1:
         56:20:28:70:57:bc:76:54:d8:7a:2f:a7:74:89:d7:b5:54:43:
         a7:5c:47:cd:be:55:5a:de:f8:80:e2:0e:a9:f1:2c:33:d6:1a:
         66:13:67:16:2e:de:a2:2d:58:f6:20:e8:9b:f9:aa:5b:b7:02:
         8f:5f:66:4a:33:5c:19:e2:70:56:a8:34:77:13:eb:d8:05:50:
         62:a2:aa:c1:5e:cb:21:b9:f8:35:5e:39:fd:80:e7:45:62:f8:
         03:d9:c5:f8:2f:24:3b:5b:25:b2:8e:bd:37:7d:90:61:9b:5e:
         30:00:d5:c9:1a:ab:77:14:dc:e2:61:4c:56:61:b2:e2:c4:60:
         b1:7a:5a:94:f3:7d:c5:27:2a:ab:95:94:5d:6c:fd:b2:e7:30:
         60:f3:9c:f4:26:4a:62:03:0c:20:c5:50:db:88:59:4a:24:8c:
         4c:47:cb:0e:cd:47:17:4e:6e:69:ee:04:c1:22:01:6b:6e:80:
         86:43:5a:d5:d7:5e:21:f0:31:94:8d:a0:59:25:9e:d4:17:01:
         c4:ae:90:a4:f9:df:b2:e4:86:01:cf:d4:96:97:2c:1a:e6:91:
         18:3a:44:c3:46:dd:3b:36:ae:0b:f9:fe:b4:bc:18:46:56:5c:
         dd:67:aa:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:26:20 2025 by rpki-client