This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
File:                     Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft (raw, json)
Hash identifier:          nqoPA8Tvhp/cYJEajhltNvC8vtsPUpvyZGbHB/ZdFfE=
Subject key identifier:   EF:E3:88:A0:1F:64:19:F5:B1:BE:C4:AE:6E:B0:F9:FD:20:4A:E0:C8
Authority key identifier: 67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
Certificate issuer:       /CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Certificate serial:       019AF276BF6DBCDEC13B71A17309D95FC63C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
Manifest number:          1766
Signing time:             Sat 06 Dec 2025 07:00:59 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:59 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:59 +0000
Files and hashes:         1: A6mU_fy2dvWAW9y9y6qPym3VUYU.roa (hash: B8MQ+q91TtenzRFP6rUUzrDHFdogGVA1RdvfKnJNkfY=)
                          2: CEH26SsbgBXa-XRDjPR4dutITU8.roa (hash: 45+vY3NG1v7bfBUPDZYQRwEM4pvEI9SIrsWhw3tfGJE=)
                          3: GCgFGIXy9ORAgY5JZtgQnYO84po.roa (hash: uiQ3pF8ZQYiS46PnIMk3tsXyihLlgICHZ4OO1bUgWLU=)
                          4: Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl (hash: Yo4/rp5X8xT4XiuEraFClan7BmbaF+HEWv8B8DJZxs0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:bf:6d:bc:de:c1:3b:71:a1:73:09:d9:5f:c6:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
        Validity
            Not Before: Dec  6 07:00:59 2025 GMT
            Not After : Dec  7 07:00:59 2025 GMT
        Subject: CN=efe388a01f6419f5b1bec4ae6eb0f9fd204ae0c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:62:1b:75:e1:ae:38:75:a2:49:3a:77:50:e2:
                    fe:b9:82:5c:62:b3:8f:c4:be:41:14:1d:cf:3d:db:
                    1e:26:77:d2:21:f6:43:c6:68:29:30:27:12:10:64:
                    dd:79:b9:cf:c5:a2:03:0b:79:05:a5:aa:e9:20:0f:
                    94:83:0b:4d:82:21:10:4e:c7:45:05:da:ad:ad:c8:
                    04:3c:1a:d4:d5:2b:f7:57:33:c4:1a:8c:a8:2e:4d:
                    47:1e:4a:e7:82:cd:20:2c:2d:12:39:e0:ab:54:6b:
                    7c:a4:32:34:bb:85:78:94:bc:7a:32:4d:81:fa:1e:
                    99:d0:5a:3b:51:2b:93:39:1e:ab:51:5f:a8:20:ee:
                    8c:4c:ff:2c:09:72:5d:d1:7b:ce:66:de:4e:81:d8:
                    77:da:f7:b2:70:d7:b5:c1:3a:25:d8:f1:ea:81:00:
                    72:26:7e:2c:7f:cc:49:e3:42:b1:be:2a:26:2c:c1:
                    94:c8:9e:cc:da:d0:f4:27:58:be:02:ae:eb:c3:d6:
                    e7:80:7c:c3:33:30:2e:58:7d:bf:b0:ff:0e:8f:f7:
                    e0:bc:87:68:49:08:4c:23:93:93:4f:34:57:da:8d:
                    db:09:58:b7:53:73:c7:0a:f2:cf:90:13:8d:ab:c4:
                    ec:8c:02:fc:ae:6e:8e:65:b9:20:b2:9e:28:56:8c:
                    2e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E3:88:A0:1F:64:19:F5:B1:BE:C4:AE:6E:B0:F9:FD:20:4A:E0:C8
            X509v3 Authority Key Identifier:
                keyid:67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:67:ac:ed:ca:7e:82:78:84:02:1c:86:ba:a3:e9:6b:4c:c5:
         b0:96:9e:9d:84:69:e1:c0:21:0f:10:a8:ae:97:13:e9:94:7d:
         93:68:e3:6b:23:95:7b:2a:8e:65:f0:19:62:a8:05:e8:8d:55:
         19:c1:44:bf:72:34:cf:a9:41:f9:c2:cf:81:a0:43:ba:83:df:
         82:52:f9:e5:ae:47:80:03:d4:10:6d:9f:c5:36:ce:43:a1:22:
         c3:ef:b2:da:16:cb:b4:32:bb:53:07:f4:51:86:64:b9:24:a6:
         f0:13:07:70:f5:e7:a6:8f:69:d6:c2:b9:1a:c8:09:33:da:dc:
         db:a6:e2:b2:07:f6:57:df:d8:d7:84:fb:16:29:ed:3c:a3:a8:
         f9:6b:db:38:8b:20:73:d2:6e:8f:56:aa:95:ca:60:98:e1:bb:
         0a:8b:eb:7b:d1:4a:47:0d:69:81:e5:9a:e0:5b:8b:ec:fe:70:
         1a:8d:f7:96:03:4a:bc:44:7c:78:60:4a:0a:dd:34:8c:47:d8:
         05:e9:ff:20:ef:99:8b:ca:9b:5c:77:5c:d6:72:3c:e0:1d:3f:
         69:67:dd:3c:44:f6:02:e1:2a:fe:8f:47:52:95:33:7c:5c:c6:
         96:41:69:24:d2:dc:b4:f9:9f:ff:6b:8c:f6:d1:1b:1f:3c:51:
         e7:87:2a:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrydr9tvN7BO3GhcwnZX8Y8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YWY5MDE0YjBkZWRkMmMwNDg0MGFlMzg1YjUzMzlmNmM2
NzkwZjUwHhcNMjUxMjA2MDcwMDU5WhcNMjUxMjA3MDcwMDU5WjAzMTEwLwYDVQQD
EyhlZmUzODhhMDFmNjQxOWY1YjFiZWM0YWU2ZWIwZjlmZDIwNGFlMGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2IbdeGuOHWiSTp3UOL+uYJcYrOP
xL5BFB3PPdseJnfSIfZDxmgpMCcSEGTdebnPxaIDC3kFparpIA+UgwtNgiEQTsdF
BdqtrcgEPBrU1Sv3VzPEGoyoLk1HHkrngs0gLC0SOeCrVGt8pDI0u4V4lLx6Mk2B
+h6Z0Fo7USuTOR6rUV+oIO6MTP8sCXJd0XvOZt5Ogdh32veycNe1wTol2PHqgQBy
Jn4sf8xJ40KxviomLMGUyJ7M2tD0J1i+Aq7rw9bngHzDMzAuWH2/sP8Oj/fgvIdo
SQhMI5OTTzRX2o3bCVi3U3PHCvLPkBONq8TsjAL8rm6OZbkgsp4oVowuywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/jiKAfZBn1sb7Erm6w+f0gSuDIMB8GA1UdIwQY
MBaAFGevkBSw3t0sBIQK44W1M59sZ5D1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjYtUUZMRGUzU3dFaEFyamhiVXpuMnhua1BVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC83YzY2YjAtYzgwOC00NWExLTliNTAt
NWU3NThlODFlZmY2LzEvWjYtUUZMRGUzU3dFaEFyamhiVXpuMnhua1BVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC83YzY2YjAtYzgwOC00NWExLTliNTAtNWU3NThlODFlZmY2
LzEvWjYtUUZMRGUzU3dFaEFyamhiVXpuMnhua1BVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGes7cp+
gniEAhyGuqPpa0zFsJaenYRp4cAhDxCorpcT6ZR9k2jjayOVeyqOZfAZYqgF6I1V
GcFEv3I0z6lB+cLPgaBDuoPfglL55a5HgAPUEG2fxTbOQ6Eiw++y2hbLtDK7Uwf0
UYZkuSSm8BMHcPXnpo9p1sK5GsgJM9rc26bisgf2V9/Y14T7FintPKOo+WvbOIsg
c9Juj1aqlcpgmOG7Covre9FKRw1pgeWa4FuL7P5wGo33lgNKvER8eGBKCt00jEfY
Ben/IO+Zi8qbXHdc1nI84B0/aWfdPET2AuEq/o9HUpUzfFzGlkFpJNLctPmf/2uM
9tEbHzxR54cqAQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:31:03 2025 by rpki-client