This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
File:                     ZvmDE4lp-NpnT3tcATPgwtAptMg.mft (raw, json)
Hash identifier:          28k7nyt3A6NcJqE52/OyXrCW73as/excsUGMTV0urV8=
Subject key identifier:   B3:3A:30:C8:79:2E:BE:A9:8D:83:25:B0:6D:AB:9C:3C:C0:41:06:10
Authority key identifier: 66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
Certificate issuer:       /CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Certificate serial:       019AF276C980B69E5488DF07D0186A0231CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
Manifest number:          1760
Signing time:             Sat 06 Dec 2025 07:01:02 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:02 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:02 +0000
Files and hashes:         1: 1-mam0MNYijlsUMBvUuzN8saQbSA.roa (hash: 7/MiQ2GbC+9P+jtI1s6HZozavARFckuLPrIIYS9KDUU=)
                          2: P1AdxUyUjVnpvB2qJGHDHOSGgqE.roa (hash: X7W16uCiCg3Hk2XdddLjkg7PZ/jHsdu8vmq4ZCQC5eQ=)
                          3: ZvmDE4lp-NpnT3tcATPgwtAptMg.crl (hash: wO0GyJi0qBzTsyxxJ5Iz4MDwDBAHALnGrT3WHFf27uk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:c9:80:b6:9e:54:88:df:07:d0:18:6a:02:31:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
        Validity
            Not Before: Dec  6 07:01:02 2025 GMT
            Not After : Dec  7 07:01:02 2025 GMT
        Subject: CN=b33a30c8792ebea98d8325b06dab9c3cc0410610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:91:7e:d0:34:08:9f:09:5c:bb:e2:04:2d:0c:
                    af:13:33:49:4f:b0:e2:45:3b:57:b0:3b:d9:af:52:
                    a0:04:9c:79:a3:c6:e3:be:66:9f:0f:ec:25:53:a1:
                    ef:2d:cd:90:1a:18:e6:75:54:1a:8e:fb:7f:42:66:
                    2d:81:74:1f:0a:93:f4:4c:9c:b7:c2:21:70:11:27:
                    a2:51:28:7c:ec:8a:5f:de:22:9c:76:83:2f:70:5e:
                    2c:41:a9:77:f4:3d:5a:cd:75:04:87:18:e7:a8:5e:
                    47:ad:35:13:72:31:06:97:cd:55:ea:a7:10:78:50:
                    ca:17:43:22:df:83:e8:b4:2a:0d:4d:2c:75:bc:21:
                    b1:4c:46:c6:e9:99:22:97:a4:43:da:a1:f1:36:fb:
                    7c:b1:04:af:d5:9d:c2:a4:82:68:a1:fc:db:1a:0f:
                    53:02:cb:ec:a6:36:38:4d:a2:c1:20:ed:1a:98:5f:
                    de:5a:16:d4:80:28:86:48:3b:f6:48:95:18:f8:c2:
                    42:a4:94:cb:96:7e:41:3d:ab:bd:79:04:9d:12:9f:
                    fa:c8:3a:21:d8:8a:78:22:cf:b8:2d:07:b4:47:74:
                    c7:b8:fe:77:43:7c:0b:2e:d3:4e:16:11:5a:ac:39:
                    89:3e:62:86:3d:ac:42:af:fc:3c:84:07:d0:48:69:
                    19:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3A:30:C8:79:2E:BE:A9:8D:83:25:B0:6D:AB:9C:3C:C0:41:06:10
            X509v3 Authority Key Identifier:
                keyid:66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:72:14:d4:5a:3d:39:74:27:cb:0c:bf:83:f8:df:61:6a:ec:
         c0:9d:2d:45:37:a1:58:a9:51:49:27:81:ba:e8:4d:13:93:03:
         69:15:fa:cc:95:32:df:5f:1b:ab:d8:48:64:fe:d4:4c:b0:15:
         8e:4d:50:6f:7a:71:77:3c:ba:7b:e3:00:b3:2c:bc:0a:c3:31:
         8c:f4:f2:f8:b7:08:6c:31:20:93:77:9d:0d:bb:e1:be:8e:86:
         3b:d4:d7:45:84:4e:8c:33:65:1f:84:b3:f6:de:d8:f8:3c:e0:
         98:c7:d8:45:18:d3:ea:db:fe:82:d7:14:25:b3:c4:d0:04:d6:
         cd:3f:98:9f:f4:d3:ff:62:86:cc:b8:cc:ca:7d:25:0d:2a:06:
         c0:f2:a9:67:dd:0b:dc:b0:11:19:02:c9:29:a6:fd:fa:6d:27:
         89:88:c3:84:b9:a0:43:5c:77:e5:80:01:a1:5e:b5:e3:2f:cd:
         29:34:16:c8:3b:d5:6c:e8:43:cd:ec:13:66:1a:91:5c:52:77:
         e5:52:a0:98:f5:5f:80:2d:ba:41:75:8f:2a:33:f1:27:b0:8c:
         1d:e0:13:cb:61:a0:cf:58:fe:f7:f5:ff:90:51:59:6c:af:a5:
         5e:85:5e:1a:19:9d:12:ee:8c:12:93:af:67:20:41:b7:2b:64:
         1c:d3:a4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:16:55 2025 by rpki-client