This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
File:                     zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft (raw, json)
Hash identifier:          VpEcI0odzmnmxdDE3gryAlo7iMhxA2uNWGNw1jq97cY=
Subject key identifier:   D3:51:45:CC:87:EE:E1:7E:86:D6:15:F8:95:7A:BE:3D:88:2A:E9:9B
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Certificate issuer:       /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial:       019B30435E89AFBB7095DB31751331478B5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
Manifest number:          178F
Signing time:             Thu 18 Dec 2025 07:01:20 +0000
Manifest this update:     Thu 18 Dec 2025 07:01:20 +0000
Manifest next update:     Fri 19 Dec 2025 07:01:20 +0000
Files and hashes:         1: 51l0ZaazViO-9DNCdW3GnWR4GwI.roa (hash: UwPqa23rEDmYBVT49o12uDR12sWWmyh1Kinzo0LGRpA=)
                          2: 6MwiHlH7brP7gkYxWGSzNKL3O8w.roa (hash: uucPBDwTY0D+/18evXxrCTaPjIOWXa7urOwmQvZx8kM=)
                          3: Mm7HYiP_1vnYW3J82fX3wCESTvw.roa (hash: xaFYkDwgR40Vgrh0kc+VfgTZztWDJTezEXCbvse9oig=)
                          4: Vf3KOZmAgXwsv3aJ9v6n81tZxJk.roa (hash: VIja1t2wHpssk2GDc0sbNbLZHRB1tapmUzbQerIfxjw=)
                          5: nX9e-Y8BTdCoEM6_BJNC6l6Sdrk.roa (hash: XhxPnrvDqx0alyntNHd6QEfUT7v4BfXJpEnK8r6nu/w=)
                          6: zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl (hash: L2r2BkIdDRv7E8ClMuYbsZguKh6xFHZhRdQVJ/3oKiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:30:43:5e:89:af:bb:70:95:db:31:75:13:31:47:8b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
        Validity
            Not Before: Dec 18 07:01:20 2025 GMT
            Not After : Dec 19 07:01:20 2025 GMT
        Subject: CN=d35145cc87eee17e86d615f8957abe3d882ae99b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2c:2f:68:ed:4a:9f:3b:1a:5f:97:87:f3:09:
                    c1:e3:02:2d:4a:2a:66:5e:52:81:5b:ff:90:be:b2:
                    78:ec:9b:35:c9:0d:c4:f9:d8:ee:f7:cd:67:be:73:
                    e6:82:98:e9:67:1a:f4:aa:ca:73:5a:10:3f:09:36:
                    23:4f:6b:8e:c9:21:ab:ba:fa:29:1f:34:67:33:44:
                    b3:15:49:80:15:90:42:7e:5f:00:96:e3:a3:1b:5f:
                    ad:77:d9:29:d9:13:64:e9:f8:4c:e3:6d:83:da:1a:
                    9b:8b:8d:86:28:e8:55:f3:cf:7a:0d:0d:e3:98:77:
                    7b:5a:2d:db:e1:f5:90:86:ca:b4:9f:ea:56:13:b7:
                    d8:ac:f9:c2:a9:a6:c8:22:a7:ca:aa:1d:4f:8f:58:
                    da:73:c3:ea:0c:42:46:04:d3:de:37:d5:c9:3a:b9:
                    bf:14:6b:f4:1b:28:8d:49:c9:a3:5d:f8:04:4b:eb:
                    ba:6f:e8:ec:31:cc:06:05:42:fb:db:4e:05:34:74:
                    89:ed:be:ef:6c:61:4b:77:3c:e9:8e:90:53:df:52:
                    9a:59:c9:be:f6:2a:7c:84:5c:cf:1e:f0:a8:c3:4a:
                    65:1e:87:7d:eb:b7:80:cc:96:ec:72:bd:a5:20:f9:
                    f7:eb:9b:71:8c:b3:3b:fe:9f:e4:13:ab:47:7d:8d:
                    f8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:51:45:CC:87:EE:E1:7E:86:D6:15:F8:95:7A:BE:3D:88:2A:E9:9B
            X509v3 Authority Key Identifier:
                keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:0d:8c:df:64:55:44:9a:13:f4:bf:cd:84:03:9f:be:d0:29:
         c3:17:a2:97:58:6d:99:50:9c:4a:c7:f8:b6:67:1f:e5:fa:26:
         34:91:36:81:39:a7:1a:e8:c4:da:29:1a:7e:96:9a:9d:21:e7:
         df:93:cf:87:2d:9c:40:5e:21:3e:20:94:89:f5:4e:55:bd:e2:
         74:44:ba:75:80:7e:a5:4f:c2:cb:04:19:4f:45:5c:4b:32:6d:
         a1:f7:d6:72:fa:7f:89:d4:53:56:c9:55:dc:36:26:5a:24:ea:
         b1:3b:58:56:cc:f9:e5:ad:64:0f:7d:08:26:73:35:6d:09:9b:
         f0:4f:ca:d0:c3:3d:d7:48:89:ca:6c:be:8e:33:80:b4:69:5a:
         d1:90:0a:75:ec:5f:c1:37:2e:54:bc:68:f4:a5:a6:69:55:34:
         dc:34:14:b9:ee:89:6e:6a:f2:58:a2:3c:2b:53:8e:32:23:05:
         ef:a9:75:96:03:8c:4a:f4:65:4d:e5:58:f7:d5:29:92:3f:1f:
         9e:c6:e9:85:b9:46:d7:97:db:5f:a9:91:87:0c:78:5c:3a:96:
         08:e8:37:fc:0f:4b:05:3c:21:1f:4b:2b:cb:25:04:49:8b:e9:
         ba:c3:8f:c3:25:a2:e2:f9:46:94:39:58:e2:1f:5c:0f:e9:e9:
         91:36:1e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 14:08:19 2025 by rpki-client