This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
File:                     ZmA0ymoWu9AUSr31zyRY-WixWJw.mft (raw, json)
Hash identifier:          BdbBowkMCddBtOHqwDbi1CY1OGwSTFbnx9NFuyw17iQ=
Subject key identifier:   C7:9B:2B:A8:9B:7D:2F:F0:88:16:B8:6C:00:86:7F:EE:A5:99:8A:F8
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Certificate issuer:       /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial:       019AFA671A0F6B394FC0408D0842BCF25A28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
Manifest number:          0C20
Signing time:             Sun 07 Dec 2025 20:00:52 +0000
Manifest this update:     Sun 07 Dec 2025 20:00:52 +0000
Manifest next update:     Mon 08 Dec 2025 20:00:52 +0000
Files and hashes:         1: 5bucpm77LtnXjK7o-jpiDW291Yw.roa (hash: S2CYvpEr7FdqvUdlAxqrDbEjDQNF8pYqq1mftWv1ZPE=)
                          2: 81yN31-IxQXIZI5PlY-trqqNIno.roa (hash: v9l8y9I+7ljSUfpIaDADoFiNw5hBtJQ72MRZ64GdbyQ=)
                          3: ZmA0ymoWu9AUSr31zyRY-WixWJw.crl (hash: pv2m2CONz+sWQ7tAf15e7XKCQizEzEXMecUfY/5xnLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 17:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:fa:67:1a:0f:6b:39:4f:c0:40:8d:08:42:bc:f2:5a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
        Validity
            Not Before: Dec  7 20:00:52 2025 GMT
            Not After : Dec  8 20:00:52 2025 GMT
        Subject: CN=c79b2ba89b7d2ff08816b86c00867feea5998af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3d:fa:61:a7:49:77:02:3e:2d:df:36:1c:3a:
                    22:6c:fd:2d:90:c3:91:89:56:b2:eb:88:83:1f:5c:
                    0c:ff:5f:30:b1:fa:7c:46:bb:24:fd:8b:f9:65:07:
                    e1:b2:54:66:ec:c3:9a:64:96:12:ff:6f:23:c6:0e:
                    46:3b:b7:71:56:51:b6:04:f2:a6:17:51:ae:2d:30:
                    f5:85:60:ed:24:1c:64:5d:75:45:c4:35:7f:5c:08:
                    37:32:a2:32:15:89:3e:85:b5:92:77:76:15:ff:76:
                    cc:d2:16:40:33:4a:93:3b:7d:d4:8d:2d:18:ed:28:
                    9d:31:90:b5:d8:8c:7b:8d:2d:bc:78:ab:51:dc:56:
                    bb:1a:ff:80:68:e8:fe:20:1a:4b:5e:30:f3:f5:25:
                    f9:15:a7:15:f8:5f:40:19:c3:a7:f9:9b:d6:a4:b1:
                    f8:8e:34:15:0c:3b:5d:5a:3e:d3:4f:c0:5c:d2:c5:
                    f8:c6:2b:f4:05:ec:2d:29:50:a9:d2:8c:d7:ea:89:
                    62:9e:0b:ee:45:ea:47:0f:e7:14:0c:d1:c7:d0:96:
                    95:16:58:64:0f:5a:34:cc:b2:1a:74:6d:b2:83:65:
                    7e:64:ad:fa:a8:0c:38:1d:75:a4:96:d2:ac:17:28:
                    67:22:3a:10:b3:2f:c4:93:fc:b9:68:30:78:29:7c:
                    7a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9B:2B:A8:9B:7D:2F:F0:88:16:B8:6C:00:86:7F:EE:A5:99:8A:F8
            X509v3 Authority Key Identifier:
                keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:05:38:c5:90:8f:d8:74:be:02:96:cf:da:6a:46:3c:8e:77:
         57:a5:b1:7b:72:51:e0:19:71:38:20:7e:b3:73:ab:6f:f2:a7:
         35:68:88:0e:a5:4e:9a:b1:a0:ba:18:a0:4b:ae:4a:c4:ac:24:
         22:98:01:29:fe:55:ea:7c:1c:58:bc:9e:32:7a:10:e6:4d:ba:
         59:74:0e:56:e1:e6:af:07:a8:83:d2:ef:be:45:6c:14:69:e4:
         59:98:8a:a7:a0:25:15:2e:bc:92:59:05:c2:fc:a2:49:05:c2:
         ea:58:07:56:61:73:8f:55:f5:54:cc:f9:cd:92:ed:e8:a3:16:
         35:68:0c:57:02:b0:44:1a:81:25:67:76:e4:7e:34:87:a3:e8:
         18:54:55:1b:65:dd:b8:7d:a9:a8:c7:a5:45:9d:55:44:5f:de:
         43:36:52:35:7c:98:4b:22:4d:fa:39:fa:b5:c2:5c:a7:28:94:
         67:cb:cd:7a:8c:91:8f:dd:14:35:56:fa:80:d0:54:68:6f:d0:
         ec:84:3a:73:a1:6d:6e:95:31:8f:49:76:85:33:22:a5:63:f3:
         2b:45:81:b6:f3:38:71:53:01:55:cb:e6:2c:92:91:09:1c:dc:
         c0:43:98:09:b5:5d:70:37:72:15:02:be:96:c3:27:79:45:c3:
         e1:f2:9c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 02:13:43 2025 by rpki-client