This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
File:                     k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft (raw, json)
Hash identifier:          Ow1Gf59mrAJgIPwXpT0jLAuLF7WN+AtvN5zZz1Ofw5s=
Subject key identifier:   5D:07:02:CF:0B:3B:7F:B3:A4:A8:32:7F:2C:D9:C5:0F:6D:69:DA:34
Authority key identifier: 93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
Certificate issuer:       /CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Certificate serial:       019AF5E62C5AA945981F7274E303FD605607
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
Manifest number:          059D
Signing time:             Sat 06 Dec 2025 23:01:33 +0000
Manifest this update:     Sat 06 Dec 2025 23:01:33 +0000
Manifest next update:     Sun 07 Dec 2025 23:01:33 +0000
Files and hashes:         1: KKWZx28likyMVAb14zfohn79Yug.roa (hash: 4ZDQZPMsx4Sy0wYZWgttLz8wb3SoAPsBMt6QbOgSD10=)
                          2: V4JFeDwnCAqThlIryfbjYJ96jqI.roa (hash: kiCqOYzNhXEMGFGlKAItyp8yURJWNGMcGMSiUikSSU4=)
                          3: dJ3sMClT1nzY6ah-C08c4xayKh4.roa (hash: y9dD6eZbJdUtirxnu+MfTeTv9qcRoIhNkzIpNqVLlDg=)
                          4: eOWw0hoBD0V8VDv_9KrqRqo9fyA.roa (hash: ZHNmoz5Xj/PvA07453i2fwNiwXlHKUm8tYngOjzHSGA=)
                          5: k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl (hash: LQFykTltbYRMjXNF2mS+ajOpiZUC0KV/laK/lDDbldk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:e6:2c:5a:a9:45:98:1f:72:74:e3:03:fd:60:56:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93ece780dfda43ab4a841727eb20d71fc76528bc
        Validity
            Not Before: Dec  6 23:01:33 2025 GMT
            Not After : Dec  7 23:01:33 2025 GMT
        Subject: CN=5d0702cf0b3b7fb3a4a8327f2cd9c50f6d69da34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3e:92:60:e2:03:2d:46:88:8f:fe:20:c4:9a:
                    55:1d:be:5e:ef:2c:28:f0:cf:5b:b1:6a:e9:07:f0:
                    3f:d0:8a:26:ab:99:4c:dd:97:cc:8b:0c:15:3e:7a:
                    76:fd:11:d7:50:dc:a1:53:67:e2:45:2b:33:e1:75:
                    66:bd:e7:e9:36:bf:39:bf:fb:84:5c:2e:98:15:43:
                    e6:42:0a:4d:1b:06:e5:d4:72:d0:d2:ed:57:39:b8:
                    60:77:1d:3b:71:66:aa:f7:7f:c5:7a:b3:30:fe:b6:
                    49:f3:73:20:17:ba:d9:20:9f:0b:5c:88:f2:ae:a7:
                    a2:39:ef:6a:c7:35:30:34:b8:e7:ad:03:76:27:b8:
                    62:31:d7:58:aa:1f:b1:10:6c:a8:dc:5d:a4:c9:40:
                    77:34:6e:18:b4:7d:2e:ec:59:e8:9f:09:10:06:a2:
                    2c:a2:92:71:9b:64:b5:4a:3f:1c:c7:c3:f5:15:43:
                    6f:52:17:90:47:39:26:a1:8f:88:05:4f:f3:28:86:
                    ec:49:dc:24:38:eb:a4:65:fe:2b:38:4d:35:d6:40:
                    44:29:08:8d:93:c6:f5:eb:eb:95:e3:ce:ef:36:da:
                    43:89:d0:08:ed:d4:a3:46:15:9b:43:4f:7e:72:4f:
                    64:ba:4a:b8:81:17:b8:b1:82:ef:ec:94:14:24:4c:
                    9c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:07:02:CF:0B:3B:7F:B3:A4:A8:32:7F:2C:D9:C5:0F:6D:69:DA:34
            X509v3 Authority Key Identifier:
                keyid:93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:cf:62:e7:e9:ef:84:78:8c:81:4a:59:23:5e:ff:5f:c0:0e:
         c6:bc:d0:d4:e9:07:5b:dd:f6:65:67:bf:38:cf:b4:93:93:0e:
         fc:c0:45:c9:c8:ae:28:05:27:09:56:fe:16:dc:a0:e8:b7:ea:
         d6:30:91:44:a0:b8:f9:ce:01:3d:dd:7f:36:a2:e9:6b:6c:9c:
         94:cf:60:82:a3:f1:02:5b:c0:3e:9f:c7:61:f5:e1:63:d7:8c:
         fc:ed:0f:72:76:1a:f2:0e:5b:3b:6e:e6:3d:da:35:f1:a7:b6:
         11:f6:cb:75:70:ad:8c:0a:28:10:45:82:78:68:43:7c:42:75:
         ea:95:eb:ec:5a:25:02:73:7d:07:d9:f6:ac:7b:f9:31:0b:7b:
         e3:3f:0a:a3:70:63:8b:1f:26:b8:19:10:0d:34:c2:3d:d5:2e:
         94:da:dd:1b:d6:f6:4d:a5:dd:2b:1d:fa:3c:39:35:fa:d1:02:
         69:7a:d5:04:dd:6a:7a:b1:69:9f:4d:88:48:f5:c0:8d:e5:d2:
         a2:f1:38:47:e2:b3:eb:51:49:e4:f6:b5:17:1c:cf:8b:19:0c:
         c9:c5:77:7b:b5:81:0a:b3:ff:13:68:74:71:ac:31:e6:e3:38:
         82:b4:22:0c:e4:54:24:a1:f3:c4:e7:25:1b:2f:9d:26:1a:0b:
         40:f2:68:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:59:15 2025 by rpki-client