This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
File:                     Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft (raw, json)
Hash identifier:          4Qvj7X6fM6dnv9hE/HOIB3N/Gl5/JPnPnxsps2PrRy0=
Subject key identifier:   46:6C:34:08:47:C8:E7:8D:4E:03:9C:88:21:95:34:72:F8:86:86:20
Authority key identifier: 67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
Certificate issuer:       /CN=67b3b58b452239001eac2e221ba56c3afed7a790
Certificate serial:       019AF3C016462694CA925F77BA115EE11B3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
Manifest number:          0E58
Signing time:             Sat 06 Dec 2025 13:00:43 +0000
Manifest this update:     Sat 06 Dec 2025 13:00:43 +0000
Manifest next update:     Sun 07 Dec 2025 13:00:43 +0000
Files and hashes:         1: AXUdeaKjWR6aO2hmOp1QpAZAT1I.roa (hash: jHy+WZea/KY2LIPLNfFyrSljh52WzofvhmuIGDrREzM=)
                          2: YLIoRJYq6MERaFZ7IGLqUkZ2WNA.roa (hash: FDzee6XqGxeVxnvKkrH/BVWvy6+j3Z62PPnSpcuiI80=)
                          3: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl (hash: 7Ec9e4gW7cEwwlCyxEeLjOGTfMiEvy1Lcygvj+frcAg=)
                          4: zx2sQUv3rsJGXAZABCst4_xZkOQ.roa (hash: FBqifBeUX2hPnOiisT6KsJiWdU/gan88BUTxXJkwpMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:c0:16:46:26:94:ca:92:5f:77:ba:11:5e:e1:1b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67b3b58b452239001eac2e221ba56c3afed7a790
        Validity
            Not Before: Dec  6 13:00:43 2025 GMT
            Not After : Dec  7 13:00:43 2025 GMT
        Subject: CN=466c340847c8e78d4e039c8821953472f8868620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:36:0f:7f:e6:8c:39:6b:91:c0:e4:f2:51:10:
                    ac:e2:99:e7:05:df:70:b5:32:4b:92:44:29:1c:ed:
                    fe:eb:60:c3:53:01:68:76:53:38:3d:6f:82:2f:17:
                    d4:b2:87:85:e0:dd:0f:22:c9:6e:02:51:fc:02:f2:
                    1c:3a:be:a2:d0:1e:cf:86:2d:11:5e:f1:d9:54:0d:
                    99:7e:d4:b1:02:ae:45:a0:29:88:98:64:72:f6:ab:
                    fb:ab:a6:2f:b4:cb:81:9f:b5:76:f7:9c:fd:09:06:
                    fd:f8:9b:75:b8:03:62:6f:b8:95:e3:bb:87:99:3b:
                    68:fd:17:2f:75:ed:b7:e9:ec:e5:c8:90:c9:de:37:
                    13:de:39:6b:ba:92:99:cf:3f:76:13:4a:68:83:b5:
                    51:35:8a:99:d5:62:22:39:9c:36:a9:a7:79:ac:fb:
                    9b:ef:f7:e4:b2:95:d6:58:96:24:42:16:94:75:7f:
                    79:9f:91:38:c8:71:cc:98:80:8f:d4:d6:fa:c5:0f:
                    61:56:d6:f7:95:4e:13:0f:07:f8:49:ef:c7:0f:58:
                    b6:93:ba:33:d8:cc:62:24:da:e1:8b:73:d9:92:76:
                    81:84:60:74:dc:c1:48:9c:7c:10:61:08:6b:80:ff:
                    bb:7b:f2:18:c1:e3:1f:3f:75:35:fa:34:15:de:68:
                    1e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6C:34:08:47:C8:E7:8D:4E:03:9C:88:21:95:34:72:F8:86:86:20
            X509v3 Authority Key Identifier:
                keyid:67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:38:d0:ff:b7:31:5c:6f:9f:cb:f2:71:e2:70:08:1c:bf:73:
         02:11:0f:04:15:8f:81:6c:14:b3:3f:8f:b7:c6:c5:76:1b:d8:
         bc:64:92:e8:27:28:ce:d4:6c:35:2c:45:74:cd:4c:02:af:05:
         cd:5b:de:5f:31:87:b7:d7:8b:ea:84:d0:8b:d6:94:5e:5b:b2:
         11:04:22:d0:2b:f3:05:8b:78:4a:33:64:90:94:e5:2e:12:1f:
         e4:ff:bc:d4:0a:49:47:81:27:03:c7:f8:0d:97:55:9e:07:ff:
         f1:b7:31:33:d8:11:56:23:b9:68:b6:2c:35:b6:7b:80:24:67:
         49:16:c6:a0:bd:58:92:12:e6:7f:ef:2a:bc:00:c3:d4:1c:62:
         c4:b0:c6:f3:09:ac:4d:da:7f:1c:35:68:03:c2:8c:e4:65:f5:
         d5:10:78:69:78:05:d3:10:10:af:df:d8:c0:a7:4e:29:2c:32:
         32:5b:55:13:37:0b:6d:f8:c7:78:0d:94:ab:1d:14:18:59:07:
         9a:0f:88:04:e6:3f:55:cf:e3:9a:9c:82:d5:58:d3:ef:d8:b1:
         5f:25:c9:16:19:a2:08:67:eb:4a:10:5c:e0:bc:1a:51:c0:8e:
         99:72:2a:a7:3b:5a:2e:47:6c:75:c1:7f:96:0c:ee:e4:41:7c:
         4c:be:54:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:38:51 2025 by rpki-client