This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft
File:                     Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft (raw, json)
Hash identifier:          Vhf6SkD/Tg+5rClHcPVAdsbEb8/eHwqSGMDyaOtBUPA=
Subject key identifier:   8E:4D:ED:F9:99:CE:77:0A:A7:E6:4A:DF:CD:7E:86:AB:71:0D:E3:B8
Authority key identifier: 66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44
Certificate issuer:       /CN=668d2f64c337465ed38da5f7cc4584df87d4a744
Certificate serial:       019AF0BF212BFE6A62A7ACCC507FB7E765F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft
Manifest number:          146A
Signing time:             Fri 05 Dec 2025 23:00:48 +0000
Manifest this update:     Fri 05 Dec 2025 23:00:48 +0000
Manifest next update:     Sat 06 Dec 2025 23:00:48 +0000
Files and hashes:         1: DK0Us3bVPvYwAyxNA0q9MJojynQ.roa (hash: zFzB2iAPAkpqv4wiU4d7/9a55ppm9DZ9vElT5rhcYD0=)
                          2: L4h95g97hPav_sLi8oU5ekfgF0c.roa (hash: gzwtuotOybzEB9lulxkeHjwR8xKOZWJlJKeZJPHVfuA=)
                          3: PoOOtUJXWSIrEDf1Xj5Z3VDMHSE.roa (hash: xLcUbAcJyMHzQNbU8ncdTmCAmnGI9JLzaYaEQOKQswQ=)
                          4: YUnFkerPf_tC9lIXfmeJMH6YBzU.roa (hash: /JxLnX44gj+6WYgNCgzFGwP4v1yZUybgTY/uSoStij0=)
                          5: Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl (hash: kOpmh6Zrtsn+MQDtXXhpz3/7nwJ8Ej+1ZBsJiqkMewA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 23:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:bf:21:2b:fe:6a:62:a7:ac:cc:50:7f:b7:e7:65:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668d2f64c337465ed38da5f7cc4584df87d4a744
        Validity
            Not Before: Dec  5 23:00:48 2025 GMT
            Not After : Dec  6 23:00:48 2025 GMT
        Subject: CN=8e4dedf999ce770aa7e64adfcd7e86ab710de3b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:03:97:e1:81:c0:9b:52:5c:3f:29:3a:25:aa:
                    07:db:12:f2:a0:09:e9:69:18:e4:00:4f:46:65:a1:
                    61:f5:7b:ef:be:c4:b8:4d:f9:49:37:7f:9e:18:04:
                    95:59:25:56:29:35:c0:71:05:90:64:19:55:77:87:
                    87:e2:43:78:bd:15:f6:24:d2:cc:b9:82:55:78:33:
                    b1:39:d0:65:44:77:5d:f1:95:15:4e:a3:a4:16:04:
                    47:2b:f5:57:e0:df:41:36:7c:fb:b0:2f:14:5c:44:
                    ce:cf:fb:22:d3:49:f6:1d:bd:8d:7b:60:82:e9:16:
                    22:63:47:1a:c6:28:e0:f4:5e:3c:5a:06:2b:87:fb:
                    96:f8:f9:91:ba:45:19:c4:d7:9e:bd:bb:3d:e5:ed:
                    57:2c:ca:8e:14:6f:9e:fd:73:69:2c:5c:c3:62:5d:
                    da:ff:6b:bf:94:69:9c:92:1e:0d:6a:40:25:8d:57:
                    10:e9:9f:92:bd:29:43:8d:d1:1e:da:7a:f6:a7:5e:
                    cd:30:8f:d1:eb:47:06:22:78:2c:3b:c1:54:00:eb:
                    5b:af:a4:c6:a6:6c:e3:df:91:c1:5f:42:21:cb:74:
                    e5:95:ed:bd:18:65:c3:ba:5d:4f:aa:0f:02:06:d0:
                    8a:7f:b8:ac:78:d8:ec:06:8e:5f:05:e8:8d:37:bc:
                    34:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4D:ED:F9:99:CE:77:0A:A7:E6:4A:DF:CD:7E:86:AB:71:0D:E3:B8
            X509v3 Authority Key Identifier:
                keyid:66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f6:70:12:95:ec:e4:db:c2:8d:b1:34:d9:03:ef:8a:96:03:
         22:4c:97:45:d3:6b:97:99:2b:93:c6:2b:77:c1:3b:eb:8d:7e:
         51:20:3f:f8:c0:d5:df:09:e0:c7:99:44:08:fd:1a:d7:5f:3e:
         48:bd:43:56:50:fc:c3:6f:62:ab:ed:db:ed:bc:15:57:8e:96:
         5e:4a:ee:54:b0:a8:71:83:0d:33:91:3f:e6:5d:40:38:a4:a1:
         5f:c2:cf:b2:58:9c:19:a0:f3:08:1d:48:21:08:03:36:68:e2:
         56:63:c8:4c:99:01:1a:a9:a8:a8:de:ab:39:a5:02:85:0c:a2:
         bc:e8:e0:13:ae:2d:23:53:48:15:94:3e:68:c6:4f:23:f2:01:
         27:19:cf:5b:13:e0:29:fd:b7:5b:8a:23:0f:10:55:ff:49:86:
         6d:32:7a:20:39:df:e1:9b:bf:c0:d3:17:a8:d9:b9:3b:79:d6:
         26:08:cb:19:2e:4a:e3:25:9a:29:5a:4d:b4:f9:93:15:40:93:
         fa:2b:85:7d:2a:0b:89:7b:1a:bc:25:32:31:d0:f3:25:f9:f9:
         20:42:2d:f0:22:e9:27:b8:4c:9b:19:ea:e9:a8:d9:21:73:9d:
         bf:7c:95:86:0a:fc:9b:67:9c:d9:46:f2:c7:31:be:d1:1f:e1:
         15:4d:0e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:22:32 2025 by rpki-client