This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
File:                     NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft (raw, json)
Hash identifier:          oLfs8iYldmLpelsdfbY5zsp4C+aJ+wZNc9NQcC1BwJs=
Subject key identifier:   69:27:6B:91:5D:1D:28:63:01:F3:A0:D2:47:16:4A:CB:67:DC:68:D8
Authority key identifier: 34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63
Certificate issuer:       /CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563
Certificate serial:       019AF389CE240C3D6D7E621063A54576EE97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
Manifest number:          1767
Signing time:             Sat 06 Dec 2025 12:01:25 +0000
Manifest this update:     Sat 06 Dec 2025 12:01:25 +0000
Manifest next update:     Sun 07 Dec 2025 12:01:25 +0000
Files and hashes:         1: 94wGpzC6dKW4wCyBuNwgbCmu0YI.roa (hash: HmlUsbHYgnjwmvm0Ep06MITWSKS8pcY785u7DkFvmwU=)
                          2: N1_eJlCZb3ETGGXcyIle3qD0zxM.roa (hash: ZUSIabtzDxcJVnD57wreF1I3FajQaelaynE8r9qpwLA=)
                          3: NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl (hash: IRt1eqLufQoXErNoSUI52qaYiy57oeuUbSDJIbZaAPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:89:ce:24:0c:3d:6d:7e:62:10:63:a5:45:76:ee:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563
        Validity
            Not Before: Dec  6 12:01:25 2025 GMT
            Not After : Dec  7 12:01:25 2025 GMT
        Subject: CN=69276b915d1d286301f3a0d247164acb67dc68d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:85:4a:68:53:25:22:ab:f9:ce:8f:af:61:5a:
                    76:8d:59:ba:97:d2:db:e8:47:54:5e:3f:31:54:83:
                    97:e2:40:f0:d7:d8:b1:a7:73:7a:97:01:d9:bc:b9:
                    27:4c:08:74:12:ac:b4:51:67:14:66:4c:9c:92:d7:
                    07:2c:c8:68:44:ea:0d:41:66:86:78:de:bc:34:d0:
                    db:a3:74:84:60:ac:e3:87:e9:26:d7:9b:73:fa:6e:
                    19:b3:d9:16:b6:18:10:fe:70:e6:7f:1d:69:75:86:
                    05:d3:71:b0:8a:57:2f:37:c3:3a:72:0d:88:d4:8d:
                    0e:54:46:ef:60:7e:44:c9:95:5e:79:ae:05:64:0b:
                    65:5d:da:d7:79:ea:aa:d6:ed:82:3d:0e:a3:4e:34:
                    4b:59:8e:d2:ef:fc:e3:97:d0:a3:4b:ae:4b:97:ef:
                    fe:de:15:ad:ff:8c:d5:3f:45:ad:bf:9e:a4:a6:a0:
                    9a:b1:1d:e8:5a:9e:e4:63:28:9a:ed:0c:06:54:4d:
                    85:b7:b7:19:37:7e:4b:95:dc:d3:53:c8:d5:00:a8:
                    11:a6:b7:64:2b:9d:3a:82:a6:f9:28:69:51:13:55:
                    8f:df:49:07:b5:cb:7e:8c:18:81:ba:9a:07:ef:b9:
                    c3:13:ec:d2:d6:0c:b6:c8:5b:5d:8b:c2:8b:64:31:
                    9c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:27:6B:91:5D:1D:28:63:01:F3:A0:D2:47:16:4A:CB:67:DC:68:D8
            X509v3 Authority Key Identifier:
                keyid:34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:32:31:6b:ac:f9:41:60:8a:4a:34:fc:79:aa:51:24:db:81:
         43:ef:b5:ab:6c:f8:09:6c:cf:ef:4f:44:8a:c7:89:98:dc:82:
         32:4f:8c:97:6f:15:ca:97:5e:82:d4:fc:46:66:99:94:58:07:
         18:47:03:04:a6:b7:7d:77:b3:a7:1c:22:16:5d:5c:82:18:a7:
         63:15:bd:c7:0e:7f:6b:86:fa:01:6a:d8:04:c5:d8:d1:c0:b7:
         08:b2:ce:c5:67:75:74:bf:bd:0a:fc:91:40:50:9f:e9:d8:9f:
         8a:bb:7d:c6:e6:9a:35:86:ff:4e:47:14:50:ee:c7:42:4e:42:
         60:79:eb:b8:bb:70:cd:9e:d2:c5:51:23:1c:23:72:72:6f:e6:
         89:11:d4:eb:e6:99:16:b7:f4:ef:cc:d1:2a:57:0a:a2:9e:ca:
         be:18:b8:5c:48:32:92:2f:3b:b2:bc:1a:d1:14:08:06:ab:45:
         3e:e3:84:a3:d8:47:d4:a5:d9:38:db:1e:e8:70:6a:c3:4a:f4:
         52:3a:3f:3d:c0:38:10:58:32:a3:84:31:3f:bf:36:41:20:28:
         9a:3d:52:0f:ee:94:3b:7d:84:0f:84:1d:af:b6:47:ac:53:29:
         76:40:5a:b4:ff:9d:1c:8a:ac:77:79:ab:6e:af:e7:a0:4a:28:
         03:cb:8b:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzic4kDD1tfmIQY6VFdu6XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZjQ3YjczZWU4ZmJlZGQyNWY0MWIzYjE3YjJiZTA4ZjVi
ZjY1NjMwHhcNMjUxMjA2MTIwMTI1WhcNMjUxMjA3MTIwMTI1WjAzMTEwLwYDVQQD
Eyg2OTI3NmI5MTVkMWQyODYzMDFmM2EwZDI0NzE2NGFjYjY3ZGM2OGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIVKaFMlIqv5zo+vYVp2jVm6l9Lb
6EdUXj8xVIOX4kDw19ixp3N6lwHZvLknTAh0Eqy0UWcUZkycktcHLMhoROoNQWaG
eN68NNDbo3SEYKzjh+km15tz+m4Zs9kWthgQ/nDmfx1pdYYF03GwilcvN8M6cg2I
1I0OVEbvYH5EyZVeea4FZAtlXdrXeeqq1u2CPQ6jTjRLWY7S7/zjl9CjS65Ll+/+
3hWt/4zVP0Wtv56kpqCasR3oWp7kYyia7QwGVE2Ft7cZN35LldzTU8jVAKgRprdk
K506gqb5KGlRE1WP30kHtct+jBiBupoH77nDE+zS1gy2yFtdi8KLZDGc0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkna5FdHShjAfOg0kcWSstn3GjYMB8GA1UdIwQY
MBaAFDT0e3Puj77dJfQbOxeyvgj1v2VjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlBSN2MtNlB2dDBsOUJzN0Y3Sy1DUFdfWldNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wZmM1YzktNGVjNi00ZGY2LTgyYzQt
ZDg3ZTQwNDdmODUzLzEvTlBSN2MtNlB2dDBsOUJzN0Y3Sy1DUFdfWldNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wZmM1YzktNGVjNi00ZGY2LTgyYzQtZDg3ZTQwNDdmODUz
LzEvTlBSN2MtNlB2dDBsOUJzN0Y3Sy1DUFdfWldNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuDIxa6z5
QWCKSjT8eapRJNuBQ++1q2z4CWzP709EiseJmNyCMk+Ml28VypdegtT8RmaZlFgH
GEcDBKa3fXezpxwiFl1cghinYxW9xw5/a4b6AWrYBMXY0cC3CLLOxWd1dL+9CvyR
QFCf6difirt9xuaaNYb/TkcUUO7HQk5CYHnruLtwzZ7SxVEjHCNycm/miRHU6+aZ
Frf078zRKlcKop7Kvhi4XEgyki87srwa0RQIBqtFPuOEo9hH1KXZONse6HBqw0r0
Ujo/PcA4EFgyo4QxP782QSAomj1SD+6UO32ED4Qdr7ZHrFMpdkBatP+dHIqsd3mr
bq/noEooA8uLcw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:00:57 2025 by rpki-client