This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
File:                     AzZPzt1pE1dzPNXM1wKduOYdHjo.mft (raw, json)
Hash identifier:          w869NEh6b51YVBfEAn2/hBwB5ztelw21F0A8/avPABo=
Subject key identifier:   6F:7C:30:CA:93:7E:60:C7:FD:F5:FF:44:28:9E:B3:C5:E4:73:6B:59
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Certificate issuer:       /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial:       019AF164771177598DCB0046E44A3BD5E5FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
Manifest number:          054F
Signing time:             Sat 06 Dec 2025 02:01:24 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:24 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:24 +0000
Files and hashes:         1: AzZPzt1pE1dzPNXM1wKduOYdHjo.crl (hash: CjJqcptcwbZmqbXphl6+hodEcTImGaNkZv1UcEuIz+E=)
                          2: _G4BPEj7ANS0vazxrz5vo4pF7D0.roa (hash: xO167vhfgz0I5ajGU1YeyzUid/SyKj87Sz3pu5PRJWo=)
                          3: dX64oYdO84sYoaZssnfnNSnjjZ8.roa (hash: gsXE0J7PM3QNxgRheiXzLzqDJ2lY8wkV0/36i7HSBdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:77:11:77:59:8d:cb:00:46:e4:4a:3b:d5:e5:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
        Validity
            Not Before: Dec  6 02:01:24 2025 GMT
            Not After : Dec  7 02:01:24 2025 GMT
        Subject: CN=6f7c30ca937e60c7fdf5ff44289eb3c5e4736b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f4:7c:52:33:f5:26:9d:f4:d6:44:d5:e5:97:
                    b6:f2:35:13:c2:23:28:9d:38:96:1d:a3:ed:c9:1d:
                    73:42:42:58:ad:ff:cf:ca:d9:b9:99:08:b3:a9:4d:
                    54:cf:8b:e8:45:6b:c3:d3:b2:56:dd:10:ae:2b:c2:
                    8e:5e:75:71:4d:42:2b:22:11:ce:2f:06:0e:6a:15:
                    d8:d9:8d:2c:03:2c:8d:d7:4e:90:2a:75:0a:5c:35:
                    f4:f5:08:0f:0b:9d:d3:7f:30:36:9c:19:05:aa:66:
                    ff:79:e0:7b:eb:20:6a:17:b9:dc:8f:9a:7f:50:20:
                    35:53:83:5a:1d:5f:08:0e:f1:13:d8:72:99:a1:76:
                    13:e7:ec:fd:28:aa:d8:20:64:de:20:12:b6:aa:83:
                    85:e3:ac:aa:9d:d7:11:79:30:31:c1:99:e3:9c:00:
                    81:8d:88:77:65:b5:99:84:c3:5d:66:ba:c8:40:88:
                    8f:31:85:e7:b5:34:1e:61:2b:01:08:5e:88:98:3a:
                    93:32:f4:03:c5:a0:e3:62:ab:bd:20:16:dd:8f:3e:
                    ad:bb:21:63:b3:49:1d:39:eb:07:cc:e0:75:ea:e1:
                    41:fd:87:1d:83:4d:cf:69:04:98:87:d9:11:ba:83:
                    97:ed:64:de:67:51:54:a5:41:08:f7:5f:e6:0d:8b:
                    45:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7C:30:CA:93:7E:60:C7:FD:F5:FF:44:28:9E:B3:C5:E4:73:6B:59
            X509v3 Authority Key Identifier:
                keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:c3:04:b6:d9:35:9b:d7:84:60:6a:91:38:19:61:6d:81:00:
         e2:de:ce:9e:46:e5:a8:00:4c:e9:f8:d9:68:6e:6f:09:52:39:
         68:69:d5:1d:3b:7c:2d:7b:95:cf:ec:b2:4e:ce:53:f3:c8:9f:
         3a:72:d7:86:e9:c2:c0:a8:2d:aa:96:7e:60:97:16:71:43:fa:
         bb:4c:d9:d7:a9:c2:6f:37:38:be:79:a3:4d:26:ca:2e:fe:9f:
         af:f8:95:7f:ac:3b:38:de:d4:c1:74:be:4e:5b:9e:ae:37:41:
         fa:9d:73:95:fd:c1:fd:86:1d:61:e0:2b:a2:f1:a7:5c:a9:82:
         b5:ac:af:b1:d1:cd:58:0c:b0:ee:f7:3d:e3:c7:cd:8d:c4:6c:
         f1:87:e9:ec:fd:da:80:b8:52:42:54:29:b3:bf:56:7a:53:fb:
         45:74:23:e9:7f:ea:36:a5:05:32:7c:5a:cf:7a:61:ed:3e:c2:
         e5:2f:99:5b:b7:13:ae:8e:56:3a:70:a4:9b:70:59:7c:22:36:
         04:3e:76:23:79:95:3a:fb:d7:c5:d8:b8:cb:4b:71:65:20:e5:
         1c:b2:16:6c:8e:d5:af:d6:b2:18:8e:a7:e6:b1:b0:78:54:b4:
         89:08:97:df:d6:53:f0:b2:f8:57:74:11:7e:a3:5b:ce:2b:9e:
         cd:e1:cb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:09:55 2025 by rpki-client