This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
File:                     ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft (raw, json)
Hash identifier:          +VS5qwfhMfXp3lBo5hbX+s/eLCuT/7ASATg5evUx0CE=
Subject key identifier:   B8:FD:81:47:B5:89:9B:7A:53:F3:87:F4:DA:91:EA:1E:1D:C5:D9:93
Authority key identifier: B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
Certificate issuer:       /CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Certificate serial:       019AF27672FDF501065FFB2FAEE6F7D6048E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
Manifest number:          0637
Signing time:             Sat 06 Dec 2025 07:00:40 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:40 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:40 +0000
Files and hashes:         1: mgO2bfWYu0Z3yfKtycB0eHY39X8.roa (hash: 60DQx4kpFtDfON86MP27ODodoK2c+Xs/qbF18XYACcg=)
                          2: rg97vUvro1QUCZLNC-zT_PYGVh8.roa (hash: iZBiJSmpj/Q8UocwtFDbOX3xmzAVEyiNjKTvOdI8ZqE=)
                          3: ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl (hash: FAFwIuK8MSA+uKLKR0panvlCO2Ae4OlbQEd0i/W81+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:72:fd:f5:01:06:5f:fb:2f:ae:e6:f7:d6:04:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
        Validity
            Not Before: Dec  6 07:00:40 2025 GMT
            Not After : Dec  7 07:00:40 2025 GMT
        Subject: CN=b8fd8147b5899b7a53f387f4da91ea1e1dc5d993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d4:37:5b:d7:59:d9:3a:66:66:80:75:f4:ee:
                    c0:85:7d:46:4d:75:02:f3:d9:93:63:96:b6:04:5e:
                    d4:05:98:53:03:8a:4a:ce:00:3e:33:e5:78:c1:ff:
                    8f:0d:cb:e7:9a:d7:01:1f:7a:3b:af:44:19:3b:dc:
                    60:f8:3d:cd:1c:37:f2:85:5f:7d:8f:d5:81:0f:f6:
                    0e:9b:a7:6b:b8:d2:17:78:a5:21:77:72:d0:0f:a0:
                    a9:e5:0b:63:87:34:f0:78:c9:57:c7:4f:9b:9b:78:
                    cd:43:82:ad:88:9b:29:af:80:59:a9:57:92:0a:48:
                    9f:1a:e4:72:af:e9:b9:43:da:4b:73:37:ba:9e:e7:
                    9b:cd:5b:70:a8:6b:d1:71:81:fd:eb:8a:a5:f7:9f:
                    3b:d1:cb:e8:bc:d6:03:70:73:47:27:f7:12:f7:f3:
                    91:3e:71:55:7c:7d:8d:f3:27:51:c2:c0:ed:dc:78:
                    a0:e9:b1:69:5f:79:63:a6:8d:be:00:62:20:20:ea:
                    68:b5:74:f1:5e:61:7d:67:9c:aa:df:14:e2:c5:aa:
                    0e:85:a9:64:12:de:65:88:4c:cc:6d:1e:18:db:38:
                    45:ca:3b:c6:41:87:ea:81:2a:65:a9:ae:bd:c3:dd:
                    2b:24:27:20:80:89:de:34:3f:9c:6a:77:6e:c0:fd:
                    cc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FD:81:47:B5:89:9B:7A:53:F3:87:F4:DA:91:EA:1E:1D:C5:D9:93
            X509v3 Authority Key Identifier:
                keyid:B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:7c:1a:d7:e6:41:b4:d9:d2:5e:42:10:34:c6:3e:7f:e9:fb:
         7f:03:45:ec:12:2d:be:89:33:a6:7b:ae:36:f3:4f:3f:28:25:
         46:1a:3a:54:50:02:fd:70:44:92:4a:74:46:23:14:c2:c1:3e:
         c1:a0:7f:ed:dd:66:8f:32:53:50:c3:f1:99:f0:3b:38:82:71:
         6d:9d:56:fa:7a:49:83:f4:fe:86:6a:04:85:75:34:cf:67:67:
         50:5d:10:00:ea:89:07:17:8f:9b:0d:2a:d6:40:7c:1b:8d:57:
         1c:30:89:00:d6:cd:62:14:81:2a:8c:cb:81:03:0e:da:46:71:
         81:47:ef:6c:e0:fc:12:5d:ea:d5:aa:62:73:8b:59:c8:2b:23:
         fd:8f:1a:74:9a:44:bc:37:4f:6c:e5:d0:09:f9:10:fd:a9:ea:
         23:dc:af:44:c8:80:1d:7d:74:8a:ab:2b:96:5b:7a:da:92:d8:
         44:77:87:45:b2:f2:e2:ab:df:9a:4a:d0:bf:ce:ce:ee:ad:ad:
         8c:04:b5:ae:74:64:64:95:b0:6d:00:f8:d0:ad:8c:06:87:7e:
         1e:05:11:02:db:a3:96:c7:e4:6e:30:ce:7e:05:a3:c5:6b:d8:
         b0:58:1d:a1:fe:34:9a:28:66:35:7c:b3:40:ab:e9:82:3f:2e:
         9f:63:b1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:29:42 2025 by rpki-client