This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
File:                     zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft (raw, json)
Hash identifier:          i/ysm0PzZTWr/wfXFb585Nhp3o+wNax1EZytXCTSFbo=
Subject key identifier:   B2:3F:79:B1:EE:F7:86:94:B7:4A:AB:6E:E8:D4:BC:44:26:96:5E:50
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Certificate issuer:       /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial:       019AF46548C5D64E29D9B3B7983766ABB00D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
Manifest number:          1770
Signing time:             Sat 06 Dec 2025 16:01:09 +0000
Manifest this update:     Sat 06 Dec 2025 16:01:09 +0000
Manifest next update:     Sun 07 Dec 2025 16:01:09 +0000
Files and hashes:         1: 51l0ZaazViO-9DNCdW3GnWR4GwI.roa (hash: UwPqa23rEDmYBVT49o12uDR12sWWmyh1Kinzo0LGRpA=)
                          2: 6MwiHlH7brP7gkYxWGSzNKL3O8w.roa (hash: uucPBDwTY0D+/18evXxrCTaPjIOWXa7urOwmQvZx8kM=)
                          3: Mm7HYiP_1vnYW3J82fX3wCESTvw.roa (hash: xaFYkDwgR40Vgrh0kc+VfgTZztWDJTezEXCbvse9oig=)
                          4: Vf3KOZmAgXwsv3aJ9v6n81tZxJk.roa (hash: VIja1t2wHpssk2GDc0sbNbLZHRB1tapmUzbQerIfxjw=)
                          5: nX9e-Y8BTdCoEM6_BJNC6l6Sdrk.roa (hash: XhxPnrvDqx0alyntNHd6QEfUT7v4BfXJpEnK8r6nu/w=)
                          6: zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl (hash: kGA/TdGRk75D/DoC7BXrd4UgnIZ7/FLMDjCNaiyhTTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:65:48:c5:d6:4e:29:d9:b3:b7:98:37:66:ab:b0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
        Validity
            Not Before: Dec  6 16:01:09 2025 GMT
            Not After : Dec  7 16:01:09 2025 GMT
        Subject: CN=b23f79b1eef78694b74aab6ee8d4bc4426965e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1a:c8:db:28:37:72:15:a8:bd:8d:ab:46:2c:
                    ba:28:34:56:53:92:4e:b5:5f:da:a0:0c:8b:4c:c6:
                    e0:3c:23:ea:ac:da:dc:34:b6:d8:a4:be:31:29:2a:
                    8f:d7:c0:d9:e0:17:d6:3b:5a:26:0f:27:f6:e2:c6:
                    2c:f4:ec:b3:2f:91:67:6e:ba:15:53:31:87:36:c5:
                    5d:65:a6:eb:06:ba:df:3d:15:74:a4:ea:1a:9c:e3:
                    70:fe:b5:53:97:ad:96:49:e4:11:d1:63:ad:62:44:
                    73:f2:c9:aa:36:82:3e:77:2f:85:38:2d:97:c4:c3:
                    7c:78:4e:67:54:f5:a5:05:d0:da:0b:e6:54:e9:8c:
                    6e:c0:ad:b1:eb:59:51:c8:60:a6:2e:99:45:7e:38:
                    8a:e9:ab:5c:19:ce:f3:a5:b7:5d:1c:53:a1:6b:89:
                    3b:0d:78:1c:53:3d:a5:d2:2a:9c:54:a9:65:e9:86:
                    40:2b:e4:53:51:d5:5c:57:2f:9c:96:fa:e0:b5:19:
                    54:99:83:bf:34:85:82:a6:75:ef:f2:c4:4c:08:61:
                    65:f3:24:dd:5e:5d:21:44:f5:51:63:58:5a:89:a1:
                    5d:4f:6c:3b:fe:92:45:3a:37:d5:46:77:23:3f:22:
                    c8:40:8d:bb:46:53:be:d6:78:2f:c9:3f:c6:78:2b:
                    a6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3F:79:B1:EE:F7:86:94:B7:4A:AB:6E:E8:D4:BC:44:26:96:5E:50
            X509v3 Authority Key Identifier:
                keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:0d:6f:1e:fe:b1:5c:25:a5:d6:10:9a:f6:b3:80:12:9e:1f:
         45:0a:6a:12:6e:ae:48:47:43:0b:5a:57:f3:96:78:5a:f8:ac:
         d2:35:b0:e4:13:12:66:b5:9e:ac:59:a5:c3:da:39:8c:71:2f:
         67:94:4f:55:5d:aa:b8:a2:74:1f:0e:eb:44:84:be:8c:cb:8c:
         c0:05:be:b4:5f:ee:70:e4:32:44:9b:80:9f:65:5b:95:ad:4d:
         09:28:d7:12:bd:8a:b2:d4:31:9e:57:0c:b7:f7:f0:43:06:a5:
         54:85:d5:3d:75:a2:30:ae:89:38:d8:6b:61:3d:43:12:99:75:
         3b:bc:15:9c:47:23:ad:4e:f6:de:cd:38:c3:19:b7:c9:c5:2c:
         5d:af:8f:1e:79:a0:9d:8e:b5:86:74:a2:db:b0:02:18:a8:97:
         9e:d2:8f:61:e3:f3:70:72:c3:04:23:c6:88:71:b1:bf:63:55:
         15:36:78:a7:4f:24:31:50:71:6a:3c:35:f0:fa:14:fb:91:9e:
         29:b0:e3:7f:90:48:11:8e:16:eb:32:6a:4e:b7:8f:e8:18:8d:
         cd:49:19:ad:f1:a3:25:b9:47:51:57:bd:81:6d:60:8d:4f:92:
         7b:bc:57:7b:ec:98:50:74:5f:1f:38:a8:4a:34:2f:7e:da:61:
         e2:4b:0f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:34:33 2025 by rpki-client