This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
File:                     NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft (raw, json)
Hash identifier:          KPKnWkQevq1CoYe6V3wEAkKOWXGIr90DYvnPfzYrrf8=
Subject key identifier:   3D:FE:45:1C:D3:25:DB:33:F3:7E:30:11:1F:88:FA:0C:A9:CE:4D:C3
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Certificate issuer:       /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial:       019AF2E43F1ECF47B0F2293779E477867112
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
Manifest number:          1782
Signing time:             Sat 06 Dec 2025 09:00:35 +0000
Manifest this update:     Sat 06 Dec 2025 09:00:35 +0000
Manifest next update:     Sun 07 Dec 2025 09:00:35 +0000
Files and hashes:         1: 1NJrUEv9Bt0x372X5yweG9JeKbk.roa (hash: S6OqBfqA27CZ5lgQWoDV23LfWwUs3uLESRa+vcboqbA=)
                          2: 2UrKpNpXwQRG_RCEBy6jwKiUGY0.roa (hash: ga3NEHKHpZo6kUdfR8ZMTo0qgNot+btN7z+ZQk3zhiI=)
                          3: 4qMGWpgEfUvVfuYkCpl-cDfdOi8.roa (hash: 38HpzPTEyuA+scZwZQcFdTVJsXUC8CY1Kfy5zMrptq8=)
                          4: 77pFQYmLGFFV08L576oEHW3GDp0.roa (hash: w0kLGHk3jpcfZ/BQP6p+01FDOOb/LMYSuRYLEGuQI/g=)
                          5: FEemRqWNX5xhq2yBrzr1C3dcawc.roa (hash: zrzqLUFgS0O6VfPSR/q7YlCpjaLeDHcdItec7nZ4p/I=)
                          6: Gc4moE6h-0LPBafiLK_GmYOfnf8.roa (hash: B7ulvc5vYjfcQvRj4GAOq2Tqzy61ptY6XfnMhYDDe+Y=)
                          7: IoRXomrFNDnoBIF4qoE29SIUorU.roa (hash: 1sHe1bcx24ru9glaxoxQWRHjWb8ipfsqMRJr8SbCC/s=)
                          8: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl (hash: 3yEnIm3SOZ0RIdwZZjCah5avGDUJckUtLxiANo9kPlU=)
                          9: TNCpqe-GffYO9Oy5tCERO1-eUvc.roa (hash: tEekWUTWURynqaTdFQTnecYYou9fV3Tv2zuhFon83g0=)
                          10: VFBedq1I_YG5NP5YD9No0ItCqAI.roa (hash: Cca2YTmO6sfJdE+XLr3wI40Aj8jX93VIto7rInwpMCo=)
                          11: WW-Eg4lD08WXRjKIyMf5a9JN3sI.roa (hash: 4fdk3ZCxEVJ8pj7G/mfXogiKk5sTyJuf3rTPCLrHXpA=)
                          12: _yddHTNEel0GBu-2Argpr_u83GQ.roa (hash: ZAIghD2GFPvhVjpWbd6Zm9RJtXdqLd2jsS/IulWaoyc=)
                          13: aNywjk-hRURwFzlW2WgXo-tyI7k.roa (hash: 7GvPvCBbcDqco5BuG4uUSLpM+i4KeC8ZMy4qhRktBZ8=)
                          14: b1B34JvO-GcunbVTm8j4sBQw6MA.roa (hash: 0+rTmm2udmOGJ/v+UrcQLZyo966itB803WI6uUxjsqQ=)
                          15: d3a2WBeR1A3tJcpu4fWQBY6byfA.roa (hash: Zp2NY2sCUEQGxT621HkEtGngfanR7ZMZDlkAzEAeyIw=)
                          16: iFRYVznuoLn764Hzk0y8UncknZI.roa (hash: uIDffq/3bRoUd9ry3L4WiOXaxdw7ef/Tzoj8TcFGzHc=)
                          17: kUh2F-fVmltK7tW5jk5XUjsjxVQ.roa (hash: F9Uv120hAnV+E46AVbmB2sboaMIO2I3P8j+LmwLqm1M=)
                          18: mq2NxcwMUGbKqpSJLEjhdlVNidw.roa (hash: vE05RIMpgESTy8av4PcX8xn6jeiXKLqRql6sXAZ5+aE=)
                          19: rI3BUUNmmdz_A7GTMa-NmL7qtcI.roa (hash: aUp66qmmCZlHuRPbWVjj6jt7emRrai3ZD6hH/ipGctU=)
                          20: xX9yJEiYtOsEPk6D2Z_dgnJG6u8.roa (hash: brPlifO1VEl2vFMFC83o8IYbgEjTUIbuxorWEUgGfc8=)
                          21: xXju9qGmfbY7jtuhCeomjVXSGgc.roa (hash: aLsgVbOegZpDj1KVoAXCqtR2JSEILQDuwOxScth37yg=)
                          22: ziTaHEBzu703E1AnoRdGaeDxKDM.roa (hash: eQUr4D3nQGW0Uu+rc2TbhNUKE96ryh4ra9nO6RUZ5yo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:e4:3f:1e:cf:47:b0:f2:29:37:79:e4:77:86:71:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
        Validity
            Not Before: Dec  6 09:00:35 2025 GMT
            Not After : Dec  7 09:00:35 2025 GMT
        Subject: CN=3dfe451cd325db33f37e30111f88fa0ca9ce4dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:81:f3:0c:c3:d6:d1:e2:42:58:64:b7:be:5d:
                    2d:0d:b2:3f:63:0b:d3:92:df:d3:2c:4e:a7:e1:d9:
                    96:18:cc:e3:4e:6b:b6:78:3b:85:ca:17:a4:06:2b:
                    e8:20:30:6a:97:44:9f:ef:02:17:06:33:20:b8:a5:
                    28:46:d7:44:b0:3d:4b:0b:73:35:16:14:d4:77:45:
                    e8:e6:ef:25:3c:93:7c:94:81:12:df:1a:46:1f:65:
                    88:ff:71:25:8c:00:f0:d4:80:75:5d:a2:ef:3e:49:
                    4a:ef:fd:d1:91:e1:58:52:2f:bd:87:df:1b:e2:cd:
                    63:a9:f9:b2:34:33:8b:8a:bf:0a:70:04:68:82:74:
                    24:54:ce:15:0d:c2:1f:14:9e:c2:8f:86:1f:c8:4e:
                    8d:5c:a3:fa:a2:84:52:7b:09:5b:0f:47:f1:d8:91:
                    4a:2c:82:49:00:25:01:ef:45:ad:f9:9e:3d:9b:a6:
                    56:38:5e:19:10:95:fb:b6:5b:84:93:0c:c5:2d:fe:
                    bc:ff:21:96:ff:71:dc:1d:dd:f9:23:22:6f:29:14:
                    16:76:79:37:6a:f5:63:a7:1b:e2:b3:1c:63:58:f1:
                    28:6d:6c:7d:0d:6e:3a:68:30:74:f8:8e:83:00:20:
                    03:7b:e5:a4:f6:63:4d:87:9c:45:43:cf:69:a2:50:
                    68:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FE:45:1C:D3:25:DB:33:F3:7E:30:11:1F:88:FA:0C:A9:CE:4D:C3
            X509v3 Authority Key Identifier:
                keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:71:13:11:4c:14:ef:00:cc:0b:dd:ca:82:37:56:53:aa:e8:
         05:f8:a8:cd:79:8e:eb:d9:47:aa:15:cd:b9:fe:0d:03:bf:d8:
         ff:fb:f3:17:d0:26:e7:24:0b:75:07:25:3e:05:8a:06:3b:6f:
         0d:7b:89:32:46:1b:b5:29:18:6b:44:8f:29:a6:d6:7c:c1:41:
         03:6c:95:49:83:7d:8e:54:b0:1d:f0:7d:80:cf:99:19:a3:70:
         93:a2:dd:dd:54:f2:46:b1:80:b1:56:26:16:86:bc:2a:b0:3a:
         81:cc:57:10:93:94:28:3f:31:54:92:3d:1b:1f:5d:db:43:1f:
         0b:2e:78:be:8a:64:20:c1:91:35:83:64:23:49:de:48:af:45:
         ed:26:db:2c:69:e1:82:96:a9:37:10:09:74:c2:67:84:95:3c:
         f4:8b:99:9b:23:b9:e0:24:81:41:f3:2b:54:40:1c:24:0f:82:
         ee:22:e0:6c:cd:8a:f1:63:3f:f8:11:76:f9:eb:f7:db:c1:59:
         d0:5f:a5:90:4b:8c:ce:40:cf:10:ca:c5:75:7d:44:67:d9:b1:
         73:0c:b2:a8:4d:0f:9b:19:1f:56:fd:6d:d5:bf:6b:30:34:3b:
         c7:34:97:7b:14:a2:35:5c:19:fa:cd:af:bc:47:c6:13:8b:43:
         dd:2e:93:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:27:22 2025 by rpki-client