This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
File:                     9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft (raw, json)
Hash identifier:          57Wp63PkO2BTxkwEanvuE+jwFp4LBPdw3jAo9c+ny9g=
Subject key identifier:   3F:19:BE:03:AA:0E:EC:AA:03:BE:90:46:E3:54:3B:9C:5C:02:66:8D
Authority key identifier: F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
Certificate issuer:       /CN=f73cdc6751d7c59073e4b706402d3691af09086f
Certificate serial:       019AF23F9AD331E067095B34FA2197F49D38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
Manifest number:          16BF
Signing time:             Sat 06 Dec 2025 06:00:45 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:45 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:45 +0000
Files and hashes:         1: 0YWWGLY2ws5dEm_54FSQZ1sndS4.roa (hash: NrM8b8iTRjQj/SggeT540k8LBz4kUfRyQupPzxIyzNo=)
                          2: 9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl (hash: 8Np4A/WWwddysV0sJkjmD7Bin1GpVvkYXVrY+8vW/XE=)
                          3: QvYuctjlOUmpEgpvzgB4c1se_Qc.roa (hash: eYNoK8Wy+9Zr1JqWLRbHBLeE5t+d/AXQdx/gVhz5wA0=)
                          4: SgIFzdX6JcgyEvIi1tU7tEpqzs0.roa (hash: p6RL3L68zCciLtwZlC4lGEQ9Tf1FF1+MJetEEftOp98=)
                          5: WC5kYAaNv3dBMoN7rOV1Dk7R1Eo.roa (hash: IM898uPAV6VmuESMyy3MG48B0cB42EspCAHOuXpg7Io=)
                          6: wW0iKtg9bPCx0wfkjNfecHkB2Ck.roa (hash: UM3eZveIrytl53yxFS6AdW4CNHF0JEQaT47qsF3G7tI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:9a:d3:31:e0:67:09:5b:34:fa:21:97:f4:9d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f73cdc6751d7c59073e4b706402d3691af09086f
        Validity
            Not Before: Dec  6 06:00:45 2025 GMT
            Not After : Dec  7 06:00:45 2025 GMT
        Subject: CN=3f19be03aa0eecaa03be9046e3543b9c5c02668d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e0:90:cf:ea:33:b9:18:f5:10:7b:e0:29:8e:
                    d4:81:3f:d7:39:03:9b:8e:ef:ba:13:f2:38:14:7b:
                    c8:ff:3a:96:a2:fa:e3:86:02:6f:86:31:f4:48:e4:
                    f4:19:80:c3:bd:d0:00:63:47:a2:0d:04:63:44:29:
                    03:82:eb:03:a3:b8:07:19:d4:8f:ef:21:e3:05:5d:
                    3b:44:19:84:d9:83:c0:26:38:da:fc:27:87:30:59:
                    91:5b:1d:cb:87:e2:4f:cd:2b:44:87:68:e9:ad:3a:
                    e6:68:1f:54:6c:a9:07:3b:fc:9d:b7:d2:cd:6a:b5:
                    4a:db:19:ea:81:ad:9c:99:d6:f7:a7:f6:96:2a:08:
                    bf:9d:42:68:d5:9b:ba:eb:5a:ef:a3:f1:3b:a7:63:
                    d1:c8:20:1f:8c:ef:77:a5:5a:24:c2:fc:10:36:1c:
                    dc:c4:64:2f:e5:e8:b3:79:ff:39:a9:5e:a5:a3:6e:
                    1d:87:9a:db:7e:1d:3a:ac:4b:19:e9:e3:59:12:53:
                    73:b4:e4:97:28:52:aa:c4:50:9a:82:1a:f3:9c:95:
                    cc:b0:b9:87:65:06:85:8f:67:48:8b:64:d7:8c:e7:
                    ea:a3:1b:45:44:4e:ce:8f:87:d7:25:ef:f2:8d:24:
                    51:ff:5f:55:5e:64:6c:bb:74:e2:17:6a:85:28:bd:
                    10:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:19:BE:03:AA:0E:EC:AA:03:BE:90:46:E3:54:3B:9C:5C:02:66:8D
            X509v3 Authority Key Identifier:
                keyid:F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:2c:02:ec:b3:0e:37:a2:bb:ed:9c:58:10:a2:a9:94:f9:c0:
         a2:42:a4:95:71:1b:4f:68:ce:d2:aa:64:2e:05:ea:55:d7:dc:
         8f:09:48:34:28:c9:cb:e1:28:45:86:53:af:91:9a:27:98:ab:
         c9:9b:cc:d5:d8:eb:0e:b9:a9:64:9f:e0:3b:33:d6:2d:59:08:
         c0:f0:fd:a7:78:dd:b4:b2:02:8b:ad:e3:d0:e7:73:b7:96:00:
         6e:5b:a2:d2:1c:6e:9c:08:26:64:f6:b9:3b:8b:68:06:db:d1:
         27:17:78:24:21:29:75:aa:c5:98:52:db:ed:1b:d8:1d:21:a0:
         69:80:c9:b7:ba:5d:cc:b0:2c:65:b9:67:45:cb:74:e6:f7:87:
         b6:1a:7b:b7:79:7c:0d:c2:fb:d9:91:f3:b1:58:2b:6e:95:1f:
         3a:4e:fe:b2:62:13:b4:78:e0:22:84:14:8e:48:17:9a:ba:e3:
         5e:e3:3f:85:34:f0:fd:41:1e:cb:ed:65:37:7a:27:a4:82:06:
         ce:19:39:11:25:07:e7:f7:06:4e:a4:32:5d:30:78:4a:5b:8d:
         8b:8d:77:26:9e:3a:4c:10:91:a3:47:98:dd:73:f2:ae:c1:9e:
         78:10:10:2f:f8:ea:bb:bd:f5:a4:6c:a5:95:a3:1e:44:f4:fa:
         79:bf:0a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:34:11 2025 by rpki-client