This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
File:                     zTlHV-FBYgKkAilW2_SNcHRYUgw.mft (raw, json)
Hash identifier:          hw1UVVDrgfKI+gvOYbjRTpVZtfP8175wsgyUgZe9/cs=
Subject key identifier:   F2:90:E9:51:3B:BE:75:6B:E1:FB:A3:F0:86:72:C7:D0:30:41:1F:E3
Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
Certificate issuer:       /CN=cd394757e1416202a4022956dbf48d707458520c
Certificate serial:       019AF388FDEDF5C7D6B8B056E0D5B310961B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
Manifest number:          100C
Signing time:             Sat 06 Dec 2025 12:00:32 +0000
Manifest this update:     Sat 06 Dec 2025 12:00:32 +0000
Manifest next update:     Sun 07 Dec 2025 12:00:32 +0000
Files and hashes:         1: KV7R1N_V77pOGNFqnvFI6VhE9Go.roa (hash: ih2S77Xnd5LfWtkG7w1ATz4hnQOa5DPl2XBfQ5D61xc=)
                          2: YoriHP_16arPHdOvDoMYO04hQkM.roa (hash: /lTd6A0sIeKscoeYGd/TO3yXs/PZBXapXa0ik8V7+LM=)
                          3: zTlHV-FBYgKkAilW2_SNcHRYUgw.crl (hash: CIlFqW8VAf5WY0Ac/hBQNw5y42eG4GVI/lzE1930VLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:88:fd:ed:f5:c7:d6:b8:b0:56:e0:d5:b3:10:96:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd394757e1416202a4022956dbf48d707458520c
        Validity
            Not Before: Dec  6 12:00:32 2025 GMT
            Not After : Dec  7 12:00:32 2025 GMT
        Subject: CN=f290e9513bbe756be1fba3f08672c7d030411fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6a:dc:5b:5d:35:13:fd:d2:0c:3e:aa:3b:60:
                    c1:95:9a:55:c1:27:d3:fd:35:ec:41:e5:e0:ff:1c:
                    3f:74:d3:54:34:af:35:93:e4:26:52:5e:72:b0:4e:
                    f0:af:84:a1:66:b8:31:57:8a:72:d5:15:4b:e9:35:
                    88:e7:d3:da:8b:cb:5a:56:a6:d1:49:f3:76:42:35:
                    f6:82:ca:ff:2e:15:2a:74:fd:3b:23:59:c2:da:11:
                    11:c2:ca:2c:18:26:79:2b:33:ae:31:da:51:06:71:
                    88:9d:76:11:5d:66:2f:17:44:f3:54:c4:c3:03:60:
                    32:f9:44:08:32:51:a3:e9:d1:43:36:2e:3a:7b:7c:
                    8a:e8:73:72:13:74:82:45:7d:97:18:76:8a:0b:5b:
                    c8:a8:df:2e:db:17:78:82:0f:14:9d:47:2e:6a:64:
                    8a:df:5d:66:32:c7:53:21:ef:16:56:e4:a6:64:66:
                    11:76:2e:ef:a8:ed:d5:0a:a3:02:b2:73:8f:d8:21:
                    17:84:ec:8c:c1:dc:cf:d6:ea:38:97:8f:60:36:e7:
                    f0:09:b5:b5:a2:c5:1f:d1:c3:04:9c:b3:47:81:87:
                    88:10:18:7c:5f:8a:50:d1:31:7e:7c:7d:7d:81:c3:
                    31:8b:6a:81:bc:e4:c7:30:b8:cd:c5:e5:8e:b6:3b:
                    19:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:90:E9:51:3B:BE:75:6B:E1:FB:A3:F0:86:72:C7:D0:30:41:1F:E3
            X509v3 Authority Key Identifier:
                keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:48:6d:ee:b3:ed:cc:0f:49:ca:73:f1:3e:d0:ad:ca:e2:a4:
         95:c1:b1:f8:39:34:14:2d:ec:4b:de:74:43:a7:79:b1:1d:6c:
         af:3a:92:57:17:2a:4a:98:87:bb:7f:65:a8:dd:dc:98:14:c2:
         06:b7:d2:e0:13:34:e0:4c:73:00:7d:c2:57:b1:b4:ed:8a:03:
         d5:7d:23:81:86:a9:ab:a4:c7:a7:e0:e5:ea:0e:b8:f6:10:68:
         6b:8f:ad:56:b9:34:73:67:03:1b:29:37:4d:4c:e5:79:6b:74:
         8c:fc:21:b7:44:24:83:71:6b:27:89:2b:27:f9:85:94:d3:6e:
         6e:83:ea:09:c7:6d:87:99:b2:43:ba:54:66:0c:3b:c8:c5:2c:
         3c:84:b6:68:91:f2:de:7e:b0:54:69:f2:09:d3:16:40:de:84:
         6f:5b:e9:cd:30:63:3f:30:4b:2f:bd:76:88:cf:56:57:c0:49:
         ea:22:71:00:e1:92:30:6f:c0:30:4b:ed:c4:6c:26:7c:ef:d8:
         04:c7:44:21:c7:14:a4:12:8e:40:30:91:96:09:b4:5e:7e:ca:
         41:8b:3c:da:c9:f5:d5:e9:18:ca:63:32:42:6e:97:15:6d:eb:
         c9:eb:7b:a8:aa:d5:7b:33:0f:a1:27:be:3b:de:a8:34:bc:91:
         c0:22:5e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:29:56 2025 by rpki-client