This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
File:                     Zu07pox4v_LEckQAreY0hIL7Q2Q.mft (raw, json)
Hash identifier:          3fRCYl/3oG1SclxJ+g/1XnU4Cw5mlY2v9j9FDlKzNRM=
Subject key identifier:   11:DC:C0:B2:30:3C:F5:EC:7E:F8:18:E5:F6:FD:74:80:72:F7:40:22
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Certificate issuer:       /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial:       019AF23F730B5870AEB06D66B05DB2E50502
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
Manifest number:          078E
Signing time:             Sat 06 Dec 2025 06:00:35 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:35 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:35 +0000
Files and hashes:         1: 3vz-rOJraHXgtuodvtQFH_a0-9E.roa (hash: IX6pchZZJC1/03c77tkG6zkGv/Mwl6B+D7gi48C82ao=)
                          2: 8oEJVvsajcBRoUJrjPZ44H-lDvU.roa (hash: s8IZbmglKempNB2FF6VAP5r2WVPZqYqiGBObGrONRsw=)
                          3: Fj8ltGVj4bwSu39N9YoDfu9hSDQ.roa (hash: uLPHDZq9gqVO8ebYrJkyS5eyy5WJ7smXGXrfo42hNSA=)
                          4: MaxzsR0kwMliUpktNGJeA1YTbq8.roa (hash: E2oo5IoDgbAj+TaESsQDHN0WQGIrVE8oADktvNT9aM0=)
                          5: Ur62Nf4a7xdo9YL9reRteLUJLQg.roa (hash: cTYkrEu5Wjkc8LFBNFp03pV3rpo4tl8VZFY9in/a2XI=)
                          6: Zu07pox4v_LEckQAreY0hIL7Q2Q.crl (hash: oDeRis/3Ow4Um52OXvaAfcMSKS4Mpe5RtF9xRX6qkj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 06:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:73:0b:58:70:ae:b0:6d:66:b0:5d:b2:e5:05:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
        Validity
            Not Before: Dec  6 06:00:35 2025 GMT
            Not After : Dec  7 06:00:35 2025 GMT
        Subject: CN=11dcc0b2303cf5ec7ef818e5f6fd748072f74022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c3:d2:37:21:83:8b:60:9c:eb:e5:92:b1:fc:
                    64:0b:ec:84:11:69:7a:11:9d:be:ad:8f:2b:83:94:
                    9f:a9:bc:d0:ee:9f:12:ac:14:18:59:a9:41:0c:74:
                    a1:2c:21:7b:7c:6d:6d:1e:d4:e8:30:fe:4a:e9:d6:
                    55:e3:87:c6:f4:63:51:b9:bf:e6:b7:06:62:6a:27:
                    1a:b4:30:14:95:47:fb:f4:6d:54:5b:20:db:8e:3b:
                    12:55:70:8f:a7:95:0d:93:18:ef:c1:c6:f3:9e:18:
                    04:a6:3a:ed:73:61:10:48:6b:2a:89:8c:e1:d5:82:
                    6b:bb:60:93:95:47:d2:ad:35:d2:4c:4a:7e:e5:62:
                    03:87:de:ce:87:d9:00:fa:d9:b7:58:be:f6:0d:68:
                    0d:d0:96:cd:b8:c7:88:e9:61:60:41:bb:d5:5b:a5:
                    f6:24:f3:98:16:5d:cd:44:fb:ce:99:c1:24:8b:06:
                    44:8e:9a:0f:1b:b2:d0:a5:fe:8a:9b:89:d8:d8:00:
                    71:b8:53:53:4f:74:d0:78:2d:1c:fa:e8:3f:9b:35:
                    5a:74:02:8a:ac:67:e6:a8:d0:df:ee:33:e7:55:b1:
                    53:70:3c:d5:92:fd:40:70:3a:fd:ee:09:d6:ae:7f:
                    a6:c4:7d:b9:64:9c:51:76:6c:3b:30:db:a0:6d:0e:
                    4f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DC:C0:B2:30:3C:F5:EC:7E:F8:18:E5:F6:FD:74:80:72:F7:40:22
            X509v3 Authority Key Identifier:
                keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:73:e9:2c:90:2f:73:95:ea:9d:1d:f3:2a:2b:92:9d:c0:2a:
         2a:ed:87:57:a9:b3:29:f8:31:0b:7b:b6:09:b6:d9:26:51:79:
         d3:91:50:05:d0:fb:c0:f8:e6:d5:24:00:d8:c9:d2:e7:aa:a5:
         53:54:12:0b:fe:cc:7c:1a:8d:14:83:69:64:5a:dd:ae:24:7c:
         7d:0b:98:82:8f:66:4d:07:12:11:67:eb:99:04:eb:d0:66:36:
         68:1d:47:4e:9b:89:15:d1:9e:eb:b6:10:15:e5:86:c1:f7:b8:
         f7:44:96:05:68:d6:87:1e:37:fd:00:c0:54:b6:71:77:76:72:
         7f:44:49:b8:1c:c9:47:59:5e:2c:5c:b7:97:4f:f4:64:7b:3e:
         73:dc:51:e2:87:3c:84:54:af:8a:c3:33:8b:8f:17:65:e7:ef:
         99:49:81:d0:e4:1b:78:15:0a:3d:90:21:62:c5:c4:4b:c0:1b:
         35:c6:4b:4b:06:f3:93:24:14:cf:18:27:8a:66:e5:9c:68:98:
         de:7e:aa:cf:e6:be:b1:3d:2e:a7:84:5b:73:e3:03:13:ff:35:
         18:42:5b:9b:9f:11:dd:7e:4d:0b:a3:19:fa:04:b8:f0:cd:3d:
         72:6f:fe:40:14:46:44:b9:e1:68:70:05:57:06:f0:cc:aa:8a:
         e6:9f:ab:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryP3MLWHCusG1msF2y5QUCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZWQzYmE2OGM3OGJmZjJjNDcyNDQwMGFkZTYzNDg0ODJm
YjQzNjQwHhcNMjUxMjA2MDYwMDM1WhcNMjUxMjA3MDYwMDM1WjAzMTEwLwYDVQQD
EygxMWRjYzBiMjMwM2NmNWVjN2VmODE4ZTVmNmZkNzQ4MDcyZjc0MDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMPSNyGDi2Cc6+WSsfxkC+yEEWl6
EZ2+rY8rg5SfqbzQ7p8SrBQYWalBDHShLCF7fG1tHtToMP5K6dZV44fG9GNRub/m
twZiaicatDAUlUf79G1UWyDbjjsSVXCPp5UNkxjvwcbznhgEpjrtc2EQSGsqiYzh
1YJru2CTlUfSrTXSTEp+5WIDh97Oh9kA+tm3WL72DWgN0JbNuMeI6WFgQbvVW6X2
JPOYFl3NRPvOmcEkiwZEjpoPG7LQpf6Km4nY2ABxuFNTT3TQeC0c+ug/mzVadAKK
rGfmqNDf7jPnVbFTcDzVkv1AcDr97gnWrn+mxH25ZJxRdmw7MNugbQ5PwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHcwLIwPPXsfvgY5fb9dIBy90AiMB8GA1UdIwQY
MBaAFGbtO6aMeL/yxHJEAK3mNISC+0NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnUwN3BveDR2X0xFY2tRQXJlWTBoSUw3UTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iNzlhNjgtNWIwMi00MDk3LWEyZTMt
MGE0M2I3YTNlYjU0LzEvWnUwN3BveDR2X0xFY2tRQXJlWTBoSUw3UTJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9iNzlhNjgtNWIwMi00MDk3LWEyZTMtMGE0M2I3YTNlYjU0
LzEvWnUwN3BveDR2X0xFY2tRQXJlWTBoSUw3UTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0HPpLJAv
c5XqnR3zKiuSncAqKu2HV6mzKfgxC3u2CbbZJlF505FQBdD7wPjm1SQA2MnS56ql
U1QSC/7MfBqNFINpZFrdriR8fQuYgo9mTQcSEWfrmQTr0GY2aB1HTpuJFdGe67YQ
FeWGwfe490SWBWjWhx43/QDAVLZxd3Zyf0RJuBzJR1leLFy3l0/0ZHs+c9xR4oc8
hFSvisMzi48XZefvmUmB0OQbeBUKPZAhYsXES8AbNcZLSwbzkyQUzxgnimblnGiY
3n6qz+a+sT0up4Rbc+MDE/81GEJbm58R3X5NC6MZ+gS48M09cm/+QBRGRLnhaHAF
VwbwzKqK5p+rrw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:59:08 2025 by rpki-client