This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
File:                     znBIWLZDJm98cQdyHJjyupPdUmU.mft (raw, json)
Hash identifier:          TIbbDptWlvEUqXiZeX8lENICViaxbwHjW+liWnOIddg=
Subject key identifier:   BF:EF:CC:5A:C0:A7:05:83:36:1E:D4:7B:80:4B:5C:FB:68:30:FD:BE
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Certificate issuer:       /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial:       019AF209632EBA0ED9CB5D1C6E789D469B02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
Manifest number:          1765
Signing time:             Sat 06 Dec 2025 05:01:32 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:32 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:32 +0000
Files and hashes:         1: AlHpyxCGMtfizbttFRiRDBrpWE8.roa (hash: HEta5iZuaZfWfkQQtCG/hwIx007nSp0VAlOWKt9bqno=)
                          2: YnxGCtZHjBins_u7hbvZvkt5GP0.roa (hash: h0irCh3dXAANqMbOKNJ1CMyoogPZbPx+cpJ+hvCcEkU=)
                          3: sCibVmGvlfhOnP7xuISl7fg77mg.roa (hash: zU3gdGka1CEw6yQdMuB6aUaLsTOoMwjYj0HnH6sxIvc=)
                          4: znBIWLZDJm98cQdyHJjyupPdUmU.crl (hash: 8hsd6a8lc8XFslTEShs5ZqvcgEkPfvewL7LRUQn6+vA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:63:2e:ba:0e:d9:cb:5d:1c:6e:78:9d:46:9b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
        Validity
            Not Before: Dec  6 05:01:32 2025 GMT
            Not After : Dec  7 05:01:32 2025 GMT
        Subject: CN=bfefcc5ac0a70583361ed47b804b5cfb6830fdbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d1:6d:93:9a:7c:87:e0:66:9c:4e:f4:b3:7a:
                    16:ae:58:29:1f:7e:e9:ff:f2:38:43:77:5a:10:fd:
                    12:62:6f:c7:19:b0:ca:4d:b7:e3:ee:38:6f:11:d5:
                    a3:51:fc:5f:77:1f:c3:c9:3a:77:47:25:5b:1b:bf:
                    dd:e7:b1:74:a0:55:ef:d2:cf:52:2c:b0:cb:eb:e8:
                    a1:19:41:f6:9a:91:f0:bb:76:b6:ac:08:06:8a:a7:
                    d9:12:c5:05:dc:3c:a5:09:63:79:02:be:3f:c0:81:
                    5a:14:da:50:a4:c4:50:d7:59:49:6e:90:76:5a:a8:
                    8e:51:c1:2b:b5:b2:e3:7c:2b:f0:f4:5f:00:6b:ea:
                    c7:73:66:30:00:6a:39:4b:60:7b:fb:cd:6b:3f:97:
                    81:1e:b6:af:7f:de:e8:a3:18:83:21:b8:3d:33:d3:
                    49:f6:a7:78:1b:f2:c1:16:88:10:7d:61:02:ee:19:
                    76:30:b9:e9:0e:27:59:45:90:e1:40:db:e9:fe:0e:
                    d6:e9:f4:c8:aa:e2:2c:32:a1:ca:33:1f:fa:92:44:
                    ce:93:9b:36:56:21:36:ce:8d:46:fd:0a:0c:87:62:
                    10:19:d3:45:3c:7f:20:66:fc:b6:f8:47:53:8b:62:
                    19:15:51:00:99:ce:b6:02:0b:5f:20:33:60:30:db:
                    29:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EF:CC:5A:C0:A7:05:83:36:1E:D4:7B:80:4B:5C:FB:68:30:FD:BE
            X509v3 Authority Key Identifier:
                keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:bb:c4:2e:59:2a:ce:44:cf:c6:70:69:e5:1a:18:c7:51:4b:
         d9:4a:88:8f:d5:64:7b:69:13:05:d3:54:96:91:a5:9b:c9:09:
         87:5c:9c:29:b8:f0:20:18:56:d2:2d:d5:09:37:a4:a2:27:8c:
         31:a1:db:20:14:54:59:e1:ed:a8:91:33:47:bc:27:6e:9f:64:
         89:c5:29:4b:79:df:fc:d1:13:50:60:07:e4:7c:95:1d:bf:d9:
         d5:ae:9d:59:3f:dc:61:ef:ec:9e:5a:24:78:b2:1c:a8:ba:ed:
         ac:40:3a:ce:cb:b9:c7:8e:3f:53:35:4e:37:9b:8f:55:74:a1:
         0d:42:e1:cc:52:29:87:cd:cf:8c:15:e7:bf:3b:5f:14:b9:70:
         37:e6:2c:cc:f7:bc:57:e1:ff:a3:46:35:ac:cb:ca:5d:81:c7:
         2a:0c:ff:99:e3:cc:32:ca:b5:51:44:dd:83:07:99:af:51:bf:
         e9:24:19:9f:6c:66:ab:62:31:55:db:b9:83:b1:44:26:3c:8f:
         1d:e9:05:ac:f0:1d:2a:39:ea:0e:f5:55:e7:b7:be:06:4f:26:
         2d:47:43:6a:92:52:86:cc:d5:55:05:32:02:20:66:6b:45:3e:
         df:90:eb:7b:2b:9b:74:2c:9c:06:d0:69:90:27:54:e4:b7:ad:
         52:15:16:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:06:46 2025 by rpki-client