This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
File:                     TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json)
Hash identifier:          XHUeUBMChBbLvkFd1ydiH7FldwpZp71rmBQZCzPbCpU=
Subject key identifier:   B5:8E:F8:7C:7E:EC:57:9E:A8:09:32:11:9A:B6:82:60:47:BE:99:3D
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Certificate issuer:       /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial:       019AF27695408921FF8510B0AB7C8A0FE4ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
Manifest number:          174F
Signing time:             Sat 06 Dec 2025 07:00:48 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:48 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:48 +0000
Files and hashes:         1: 8Wt50oYgSIhV5-nromefXM1xUHs.roa (hash: nonj7X6EJpkPkTZ26/d/JTxCuBr7E4OqIEl5kLX7Uvc=)
                          2: 8_cQRjzqzZHtBUadp-m1RHbfYtA.roa (hash: UqDtwYBpkHo94AcNyXlmGDGQI5vQH42VfJTVEsv7Dqg=)
                          3: KNr8dCxZSv2tLdivt-ye5q6LflE.roa (hash: OddKT0B3adcsA3ke/HzglyeCPb/vcMLtq5FBhRNFDKs=)
                          4: LlXFwn2Cp-oz5_wkoV4hnOjpZhc.roa (hash: b+9t4WdjfYrQBYgVT5TU7qZAYZFFGjvTZY/AWbdEORo=)
                          5: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: +NWPaYzN01RfneAvRIHle4l9S3nbqnp2vkRbEhvl4k8=)
                          6: qzzHZUBjcSRGFasL_IeeyUOUJ98.roa (hash: Lhbg0pCg1KfB+dSdb+vO645LuzkQlZQdXs3opMNsPwc=)
                          7: uFl9Jbyr6wsOz0RTyXyU1uLpiuQ.roa (hash: IIGP5wcOQKkgCwi0o8TwNvlGqyYDZZaNOwMVkOIQtWw=)
                          8: ugnRmlrkR8TJKKb_eVy88x5cRBU.roa (hash: wA1+l0+3DAminFs23I5vSPrzOSbWOqFz2PTbS6VlnsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:95:40:89:21:ff:85:10:b0:ab:7c:8a:0f:e4:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
        Validity
            Not Before: Dec  6 07:00:48 2025 GMT
            Not After : Dec  7 07:00:48 2025 GMT
        Subject: CN=b58ef87c7eec579ea80932119ab6826047be993d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:52:0e:4d:98:fe:0e:5b:c5:07:3a:8f:50:1e:
                    5d:0e:9c:b1:d1:b9:b3:7a:76:7e:ea:31:8d:8f:37:
                    47:f6:67:08:46:67:ec:35:2e:b9:a5:41:a7:14:0b:
                    37:c3:af:5d:ea:bd:47:05:5e:9d:34:8a:5e:d4:9e:
                    ad:76:67:69:dd:dc:a5:7c:8a:08:d6:ae:5e:ff:30:
                    a5:c8:d1:4f:b0:5e:c3:63:b8:9b:95:f3:b9:28:52:
                    0c:b2:ef:54:01:ca:fb:ac:52:2a:62:85:bf:d4:f6:
                    37:5c:3b:65:e1:6b:e1:d1:e8:65:29:a8:7a:b7:e0:
                    5f:64:40:0a:ef:a9:3d:28:e8:6f:13:69:c8:01:61:
                    13:be:05:43:b3:39:49:7e:e6:18:75:bb:16:46:94:
                    75:a8:6a:cb:16:34:8d:6d:9c:f4:fa:7f:d0:c9:15:
                    e5:01:de:57:79:bb:11:a4:ba:20:18:a0:9c:e0:a1:
                    04:96:35:aa:a3:5d:6d:e3:03:79:bf:76:14:fd:44:
                    ea:3b:1d:e1:ae:c7:76:3e:9e:28:65:8d:f3:2c:70:
                    07:ff:52:61:26:7c:15:6a:be:5d:f0:cd:b8:4f:db:
                    85:b7:5c:b0:2c:92:db:78:3c:42:db:19:8a:0c:1b:
                    31:d5:4e:cf:cc:f2:a0:9d:d1:5a:f1:ca:58:5e:32:
                    bb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8E:F8:7C:7E:EC:57:9E:A8:09:32:11:9A:B6:82:60:47:BE:99:3D
            X509v3 Authority Key Identifier:
                keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:3e:12:b2:83:a7:a1:0b:d5:3d:66:48:76:0b:d5:e7:7e:48:
         00:a9:1d:68:e4:a2:b2:e8:93:77:80:93:1f:3c:e6:74:fb:e2:
         a9:8b:8d:61:e6:47:24:a3:51:dd:0c:12:08:87:f4:c8:89:ef:
         0f:86:ce:30:49:28:f1:35:b8:a2:9f:56:4a:58:eb:31:5a:6e:
         1c:3e:82:b5:8a:03:f4:f5:63:19:25:51:d9:ca:51:a0:fe:36:
         39:75:9e:bc:b3:07:13:f9:6c:ae:11:ea:09:d8:ff:4e:52:36:
         58:ed:31:6d:85:1f:cc:87:33:b1:42:c3:74:58:d3:ed:25:93:
         e9:77:47:ca:41:78:da:54:d3:60:02:77:32:f0:f3:60:15:a4:
         28:0d:cf:d1:78:69:ad:83:bd:b2:d2:c5:94:7d:82:91:01:fe:
         a5:7b:3d:29:38:19:6e:27:0b:b6:13:e7:c1:13:99:46:c8:ef:
         9a:80:b2:38:b2:cd:9f:16:bc:3d:bd:fd:4c:75:db:b4:6e:26:
         ce:74:84:75:b9:0b:a4:42:5e:39:ca:63:48:1e:93:06:b3:c4:
         54:a8:15:4f:6d:ed:41:91:6c:b4:7d:20:f7:4c:2e:d9:f8:38:
         03:65:6c:ce:e8:a9:e4:4b:5d:ca:87:2d:b4:e6:14:54:d8:68:
         c9:89:3e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:21:27 2025 by rpki-client