This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.mft
File:                     ZzWoKVow19_KwqVwuN7LJcRlIUA.mft (raw, json)
Hash identifier:          Oy7YTuPWACNmsNO9lOQdypNsIiPxhK5EFJ8Cwt1ZNmI=
Subject key identifier:   52:93:A1:08:81:79:EA:01:CC:25:D9:4D:85:E6:98:DC:CE:DC:C1:E3
Authority key identifier: 67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
Certificate issuer:       /CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Certificate serial:       019B31FA942130BA232644EDB62AB213C9A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.mft
Manifest number:          1788
Signing time:             Thu 18 Dec 2025 15:01:04 +0000
Manifest this update:     Thu 18 Dec 2025 15:01:04 +0000
Manifest next update:     Fri 19 Dec 2025 15:01:04 +0000
Files and hashes:         1: IpzjC4IjNKQlHY9yw24HUI5AwOY.roa (hash: crc2yZ6SMrwciJiwNJfPgyelZyMM2pzm9n4dGXes79A=)
                          2: X5RlewC5bmJsU2AA_nG7P3SPzxI.roa (hash: 18DAWZzyQ6VtlL5sHWgvKbknV3HFWhJr4tURlsmGnvY=)
                          3: ZFzG2Urgwcii60PFRNZJQmyT55Y.roa (hash: T4M5s/DWglLYO7Z4Yo9jCDb8SkEn/Y8+68oe74EWKQs=)
                          4: ZzWoKVow19_KwqVwuN7LJcRlIUA.crl (hash: eJMqMHY9h7PNC+OqGGy1naMKqGYAPvzJeF1YR/znfxM=)
                          5: qpsCNwwHbknEaaKytIMeg-iyJrI.roa (hash: TsRtBKifaH7yUNxGo/mtxzGd6NziDUel8ySXbzGH1Xs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:31:fa:94:21:30:ba:23:26:44:ed:b6:2a:b2:13:c9:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6735a8295a30d7dfcac2a570b8decb25c4652140
        Validity
            Not Before: Dec 18 15:01:04 2025 GMT
            Not After : Dec 19 15:01:04 2025 GMT
        Subject: CN=5293a1088179ea01cc25d94d85e698dccedcc1e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:5d:8e:9f:fb:e6:c7:73:9f:7e:d9:f5:22:
                    00:05:8c:35:5b:56:76:4e:f4:d8:7c:1d:e4:14:6e:
                    3c:34:c6:78:a8:64:f8:f5:e5:02:10:81:cf:d6:fd:
                    57:8c:4a:29:17:d1:72:be:0b:69:e5:77:aa:cb:0e:
                    a8:6c:11:4b:d9:47:4d:fd:b6:e9:67:11:f0:73:17:
                    51:04:db:d7:6e:1d:b5:c9:4c:14:b9:a1:a4:32:7b:
                    15:31:e9:d8:99:90:1e:c0:04:11:81:28:78:ab:b2:
                    e2:b2:26:0f:e9:5c:a0:cc:dc:33:04:35:51:ca:d6:
                    db:c4:16:ea:ee:06:85:83:41:20:ba:10:b2:a2:dc:
                    10:cc:32:6b:2b:5b:68:8d:b8:73:cc:3e:00:9f:12:
                    0d:1a:fd:8d:fb:f0:3f:7b:62:f5:9e:65:ab:a8:c1:
                    1a:c3:48:1b:55:3f:9d:42:e1:ab:92:e8:4c:e5:80:
                    3e:d9:1e:d5:97:cf:0c:88:91:5c:52:65:a8:8f:19:
                    a5:3a:31:cc:5f:62:52:13:7c:75:fc:5c:9d:c5:4f:
                    dc:4a:f3:4f:28:d8:bd:4e:be:a7:7c:3e:27:c6:ff:
                    38:c8:04:92:52:ea:25:53:fe:b4:58:51:9f:6b:b8:
                    18:25:b8:44:5a:b6:c2:30:b9:c5:15:fd:cf:39:6d:
                    67:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:93:A1:08:81:79:EA:01:CC:25:D9:4D:85:E6:98:DC:CE:DC:C1:E3
            X509v3 Authority Key Identifier:
                keyid:67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:fb:a1:de:ac:89:97:fb:c5:fe:22:66:28:21:c0:a4:1f:5d:
         63:2c:6c:1f:0e:bb:56:88:6a:78:78:82:ff:db:e8:37:9a:6d:
         a3:c7:09:d9:8e:7a:f3:21:7f:21:30:1b:36:c9:44:1a:cc:ff:
         0c:26:fd:5c:1b:c6:98:b5:c7:51:5c:86:5d:af:47:86:33:e8:
         bb:7d:14:e0:a2:f4:10:6f:a1:69:e0:39:dd:61:1e:14:5a:2a:
         06:49:41:99:c2:f3:5d:cb:14:67:1f:52:15:18:b4:18:18:8d:
         a0:d0:6e:de:6d:05:3e:05:21:d6:f7:57:b2:06:28:bb:43:7b:
         95:73:a0:c0:a6:78:43:b0:2c:7d:90:3c:be:c0:cd:08:c4:2f:
         df:ed:97:2e:1f:35:50:b9:59:ed:ce:2e:1c:10:c1:b7:8b:8d:
         31:07:53:7b:b2:49:f7:66:53:be:a7:6b:63:98:e2:03:53:c6:
         c2:31:2d:9c:05:97:d2:29:0e:90:8b:a0:c6:67:f1:fb:dd:9c:
         2a:af:d1:2a:bd:01:44:16:e7:fa:66:65:0c:ab:24:f0:fb:5e:
         02:90:7f:63:da:60:3e:b0:d0:bd:ad:09:b5:8e:c5:13:f5:54:
         44:82:43:74:43:33:aa:ab:08:5f:e6:20:3a:5d:e0:de:cf:03:
         d3:dc:50:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 20:30:56 2025 by rpki-client