This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.mft
File:                     ZzWoKVow19_KwqVwuN7LJcRlIUA.mft (raw, json)
Hash identifier:          lJFZ59tYNXinulOVBMa9/erKgFe+tP47NoWoUSddsvU=
Subject key identifier:   DB:34:9E:DE:92:41:39:DA:B7:10:9C:F0:33:95:04:0E:23:74:87:BA
Authority key identifier: 67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
Certificate issuer:       /CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Certificate serial:       019AF42E7A5EC0AB832BB7E2344C99C94D42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.mft
Manifest number:          1768
Signing time:             Sat 06 Dec 2025 15:01:17 +0000
Manifest this update:     Sat 06 Dec 2025 15:01:17 +0000
Manifest next update:     Sun 07 Dec 2025 15:01:17 +0000
Files and hashes:         1: IpzjC4IjNKQlHY9yw24HUI5AwOY.roa (hash: crc2yZ6SMrwciJiwNJfPgyelZyMM2pzm9n4dGXes79A=)
                          2: X5RlewC5bmJsU2AA_nG7P3SPzxI.roa (hash: 18DAWZzyQ6VtlL5sHWgvKbknV3HFWhJr4tURlsmGnvY=)
                          3: ZFzG2Urgwcii60PFRNZJQmyT55Y.roa (hash: T4M5s/DWglLYO7Z4Yo9jCDb8SkEn/Y8+68oe74EWKQs=)
                          4: ZzWoKVow19_KwqVwuN7LJcRlIUA.crl (hash: hVbUEVkcn+ryldo6tzXpEPa1a9R1tRziVxzUS1yHFQQ=)
                          5: qpsCNwwHbknEaaKytIMeg-iyJrI.roa (hash: TsRtBKifaH7yUNxGo/mtxzGd6NziDUel8ySXbzGH1Xs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:2e:7a:5e:c0:ab:83:2b:b7:e2:34:4c:99:c9:4d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6735a8295a30d7dfcac2a570b8decb25c4652140
        Validity
            Not Before: Dec  6 15:01:17 2025 GMT
            Not After : Dec  7 15:01:17 2025 GMT
        Subject: CN=db349ede924139dab7109cf03395040e237487ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d6:11:8b:9e:77:c3:4d:4d:b2:14:d5:11:4f:
                    d5:be:6a:22:39:58:de:dd:4a:23:77:a3:69:d6:0b:
                    e4:8e:27:91:b7:3f:42:71:7a:f4:8b:c8:53:f8:b1:
                    d4:5c:3a:0c:3d:34:aa:b2:3f:92:c4:d7:60:af:69:
                    6e:b4:4c:b5:fb:4e:83:de:d4:52:76:94:ab:f5:06:
                    1b:b9:39:de:db:6d:a6:d8:ea:16:14:fb:0e:f1:a8:
                    12:96:61:5e:41:98:22:09:79:a8:90:7c:5f:53:38:
                    89:4b:78:2a:54:78:46:a6:6f:ab:07:5c:14:ed:dc:
                    15:e4:06:32:bf:78:80:be:0c:28:c0:b6:17:1c:ff:
                    c3:f2:11:4b:6c:d2:eb:6e:56:57:8f:79:22:4e:e7:
                    32:c7:f2:78:54:d9:0e:f6:78:be:8f:11:08:1c:7e:
                    5e:07:43:ed:27:51:8c:4b:fa:94:6e:e1:46:1b:51:
                    79:b8:00:5a:f4:04:83:fb:59:3c:b3:76:5d:ee:fd:
                    84:8a:ab:dc:1c:e2:7a:39:9a:5f:d7:c5:6b:e6:52:
                    8f:f5:d9:e7:70:a3:93:24:61:a9:86:d5:1e:0d:b4:
                    37:64:67:ec:96:59:d6:05:33:f8:f5:36:79:44:6e:
                    c4:19:96:05:ce:e4:d0:9f:6e:4a:ae:f8:37:96:93:
                    e7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:34:9E:DE:92:41:39:DA:B7:10:9C:F0:33:95:04:0E:23:74:87:BA
            X509v3 Authority Key Identifier:
                keyid:67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:36:c2:af:ad:c6:82:be:29:f7:6f:73:4c:cc:7f:c6:1b:72:
         36:fc:fb:00:85:fd:fa:98:bb:a6:cc:33:fe:a3:82:0f:dd:33:
         e6:74:ce:75:56:3f:42:8c:a0:ce:5c:b5:ce:a9:ba:91:4d:e0:
         9b:06:cc:02:63:eb:ba:45:96:64:3c:a5:7d:2e:13:57:74:2b:
         d1:42:ae:77:ad:b3:7b:36:0c:64:0a:a0:57:6f:d4:32:20:f3:
         ba:3c:dd:62:57:2c:c1:16:8f:85:83:3c:a4:e5:b0:42:80:f8:
         56:9c:83:8f:ba:63:75:d4:50:fe:16:dd:db:8a:da:1f:c1:c6:
         0c:78:61:17:c9:2c:09:81:3c:2e:c8:dc:f8:ca:b8:3c:1b:24:
         84:44:00:1b:76:e4:23:aa:59:1e:c1:d5:a0:58:21:7c:8e:0f:
         14:cb:a1:cc:93:2a:77:89:67:d5:86:a3:54:3d:d8:03:be:5c:
         6e:12:a6:3c:fc:fb:9c:c5:1b:a7:c4:5b:5f:9d:76:e8:ac:ad:
         26:8a:39:a9:d2:95:bb:c6:b8:86:69:5b:53:d6:36:59:fc:b9:
         98:4c:8c:99:f7:7e:ce:b2:5d:2b:7f:68:ca:79:35:4a:98:b0:
         f2:6a:97:ae:2c:fb:ac:3a:17:af:ec:1f:8d:b8:e4:30:b8:1a:
         13:90:bd:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr0LnpewKuDK7fiNEyZyU1CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MzVhODI5NWEzMGQ3ZGZjYWMyYTU3MGI4ZGVjYjI1YzQ2
NTIxNDAwHhcNMjUxMjA2MTUwMTE3WhcNMjUxMjA3MTUwMTE3WjAzMTEwLwYDVQQD
EyhkYjM0OWVkZTkyNDEzOWRhYjcxMDljZjAzMzk1MDQwZTIzNzQ4N2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdYRi553w01NshTVEU/VvmoiOVje
3Uojd6Np1gvkjieRtz9CcXr0i8hT+LHUXDoMPTSqsj+SxNdgr2lutEy1+06D3tRS
dpSr9QYbuTne222m2OoWFPsO8agSlmFeQZgiCXmokHxfUziJS3gqVHhGpm+rB1wU
7dwV5AYyv3iAvgwowLYXHP/D8hFLbNLrblZXj3kiTucyx/J4VNkO9ni+jxEIHH5e
B0PtJ1GMS/qUbuFGG1F5uABa9ASD+1k8s3Zd7v2EiqvcHOJ6OZpf18Vr5lKP9dnn
cKOTJGGphtUeDbQ3ZGfsllnWBTP49TZ5RG7EGZYFzuTQn25Krvg3lpPn+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNs0nt6SQTnatxCc8DOVBA4jdIe6MB8GA1UdIwQY
MBaAFGc1qClaMNffysKlcLjeyyXEZSFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnpXb0tWb3cxOV9Ld3FWd3VON0xKY1JsSVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMGIwZWMtNzA1NS00ZWJjLTk2ZmMt
MThlMThkNjU5ZDhmLzEvWnpXb0tWb3cxOV9Ld3FWd3VON0xKY1JsSVVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xMGIwZWMtNzA1NS00ZWJjLTk2ZmMtMThlMThkNjU5ZDhm
LzEvWnpXb0tWb3cxOV9Ld3FWd3VON0xKY1JsSVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcjbCr63G
gr4p929zTMx/xhtyNvz7AIX9+pi7pswz/qOCD90z5nTOdVY/Qoygzly1zqm6kU3g
mwbMAmPrukWWZDylfS4TV3Qr0UKud62zezYMZAqgV2/UMiDzujzdYlcswRaPhYM8
pOWwQoD4VpyDj7pjddRQ/hbd24raH8HGDHhhF8ksCYE8Lsjc+Mq4PBskhEQAG3bk
I6pZHsHVoFghfI4PFMuhzJMqd4ln1YajVD3YA75cbhKmPPz7nMUbp8RbX5126Kyt
Joo5qdKVu8a4hmlbU9Y2Wfy5mEyMmfd+zrJdK39oynk1Spiw8mqXriz7rDoXr+wf
jbjkMLgaE5C9qA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:58:23 2025 by rpki-client