This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft
File:                     67wNYL06kL1eMVCd6t9EcHaweNg.mft (raw, json)
Hash identifier:          SF6tCPoqAVz8FQOCbAXOI2r6sQJWbUsHjV9/a++QK3o=
Subject key identifier:   69:FA:93:F1:F3:2C:75:00:9E:F5:A3:9B:03:40:74:5B:E7:46:2B:71
Authority key identifier: EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8
Certificate issuer:       /CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8
Certificate serial:       019AF50A4AC405E52DDD4E4182224B1C8B04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft
Manifest number:          1764
Signing time:             Sat 06 Dec 2025 19:01:23 +0000
Manifest this update:     Sat 06 Dec 2025 19:01:23 +0000
Manifest next update:     Sun 07 Dec 2025 19:01:23 +0000
Files and hashes:         1: 5zUKmRm-wVqTunF2tT-7Cqs_OWs.roa (hash: 9aHvAui4+yZdhtJErGw75MAtLb8+QGjtqwMfMZbFd3M=)
                          2: 67wNYL06kL1eMVCd6t9EcHaweNg.crl (hash: LG7M6K7qjmncxQnX3z7IWD4wPKaDEdNqAkM5+NU/D+c=)
                          3: QvxWT4xY-nx_D6ZNWO2yetZnnpQ.roa (hash: 5hYT1EwCoWhfN9hDbCeHVlJcTh6HqFEGgKcOBfv7338=)
                          4: lzphi4MxBp9BaUcphSOwLVmwZEE.roa (hash: P65ZeDMhywEETdGJgUa5vU1aMaDLOyoDprfHHXlTBBM=)
                          5: v3SWv1n837zLkNGdleDKsMBQDv0.roa (hash: O8MJh8aunH8A9IiDr50FU3GzSB/FL6Wl7jBlBla6VVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:0a:4a:c4:05:e5:2d:dd:4e:41:82:22:4b:1c:8b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8
        Validity
            Not Before: Dec  6 19:01:23 2025 GMT
            Not After : Dec  7 19:01:23 2025 GMT
        Subject: CN=69fa93f1f32c75009ef5a39b0340745be7462b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6c:cc:92:3f:9b:12:fb:f4:2e:af:c8:e4:53:
                    c6:40:7e:bb:5c:a5:e0:f5:7b:f5:3b:ec:62:b8:be:
                    f9:bb:57:b9:d5:91:05:0a:17:25:47:48:e8:11:98:
                    7d:e1:12:93:b2:04:bf:e3:a8:db:93:b7:57:e0:4d:
                    c5:4b:19:d8:dc:a9:25:68:f0:39:69:21:eb:3e:63:
                    87:40:30:e7:a6:73:e7:35:94:15:1f:ae:d5:3a:0e:
                    ba:0c:bf:51:b4:bb:34:95:b8:d3:2e:59:29:a1:7d:
                    21:2a:06:94:c6:77:a3:19:63:07:54:7f:48:5c:58:
                    8f:29:fa:3d:08:cd:1d:42:e0:91:a2:ff:18:7c:c9:
                    3a:96:17:1b:8b:7f:31:56:68:7f:be:1c:cb:bd:a1:
                    f8:df:47:23:e7:5d:ca:a8:09:24:80:05:55:b3:79:
                    cc:93:a6:bd:9e:52:ad:51:39:43:ab:38:cc:34:4f:
                    d2:cd:d2:35:c5:75:85:fd:28:22:7f:51:eb:94:ff:
                    c5:9d:72:d9:f4:2e:54:ba:d0:8a:7d:4c:82:62:57:
                    be:a7:5b:be:75:59:da:17:a9:32:23:7e:51:44:21:
                    5c:bc:20:24:10:65:bd:ae:b9:9a:3e:15:00:96:31:
                    fa:14:f1:84:3f:6d:0c:f7:c4:af:6f:a3:e7:4d:c8:
                    56:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FA:93:F1:F3:2C:75:00:9E:F5:A3:9B:03:40:74:5B:E7:46:2B:71
            X509v3 Authority Key Identifier:
                keyid:EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:dd:0b:21:d0:58:21:02:71:c1:5f:a8:dd:7c:2d:d6:d5:b4:
         a0:bb:35:15:fc:df:f2:7e:44:80:b3:fe:17:7b:d9:7c:a6:8a:
         c2:55:50:70:cf:ad:c3:d5:4d:3e:13:1a:52:7a:ea:ab:2a:0f:
         c2:3f:88:45:6c:cf:ed:a7:58:17:6c:62:9f:06:ff:4b:79:a9:
         17:96:cf:f3:c2:87:ab:fc:0b:1b:19:4a:28:b2:d1:cf:af:41:
         99:cd:0b:d6:19:38:2c:73:4c:88:39:61:bb:a1:da:7d:ca:83:
         fa:10:b5:9e:93:d0:90:3e:c8:0b:81:bf:22:c9:e2:e7:d2:30:
         17:52:d5:7e:c7:8c:74:07:27:15:02:f9:1a:f3:d0:2b:0e:46:
         64:c7:76:dc:2b:bb:48:d3:8e:22:2e:11:03:a8:07:dc:c0:38:
         4b:b6:ab:20:c7:b2:4d:20:36:f1:17:b4:ed:54:30:db:6b:e1:
         ee:86:84:81:9d:ee:3e:be:36:51:cc:11:95:a0:67:f2:27:f3:
         8c:c7:17:e1:09:03:9e:2b:9f:21:90:41:a9:3e:8e:4e:e1:4b:
         4e:3d:9b:64:10:40:ea:87:27:ad:e5:4b:ba:5d:a4:3b:f8:35:
         23:80:8e:2f:ce:f6:ce:7a:bd:68:b8:1d:a7:bd:5c:42:b7:80:
         28:67:44:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:33:23 2025 by rpki-client