This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft
File:                     zeHP7MkrEE_Pqe_saljwwZeQFlI.mft (raw, json)
Hash identifier:          jrp66Tfw57NA0BGjj3fyDUyxkDZhf3yCRklQCrkgMUE=
Subject key identifier:   47:14:58:DD:A8:55:54:EC:CA:FC:83:71:00:12:4D:F4:E3:E7:E1:47
Authority key identifier: CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52
Certificate issuer:       /CN=cde1cfecc92b104fcfa9efec6a58f0c197901652
Certificate serial:       019AF57880511B8D989E606F8B57FD98565F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft
Manifest number:          0710
Signing time:             Sat 06 Dec 2025 21:01:46 +0000
Manifest this update:     Sat 06 Dec 2025 21:01:46 +0000
Manifest next update:     Sun 07 Dec 2025 21:01:46 +0000
Files and hashes:         1: 1-JHgt-ZQU1UU2pYlcDXWChQ_trM.roa (hash: yS33rGnHpW6HJXuqZSuiPg2Imum1UpLaSAJvk6KL/qY=)
                          2: P1bLQZtUuJyCpYxMgBMGx1ZJUng.roa (hash: m9T9zLQ/HMGQbc2J9yvmErwcUnY6b6rs3FjEYV4pKxg=)
                          3: t5moBycZzdoljDyxSfMleeT1QmQ.roa (hash: OjS5x25lUmVQxo2WB7ZV1aQad26d91TsKsihXCHFfH4=)
                          4: zeHP7MkrEE_Pqe_saljwwZeQFlI.crl (hash: ULkTFh/gGfdkAjZrQv5mUCOiVhmcfJld/Jum2HGeP78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:78:80:51:1b:8d:98:9e:60:6f:8b:57:fd:98:56:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cde1cfecc92b104fcfa9efec6a58f0c197901652
        Validity
            Not Before: Dec  6 21:01:46 2025 GMT
            Not After : Dec  7 21:01:46 2025 GMT
        Subject: CN=471458dda85554eccafc837100124df4e3e7e147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:85:32:18:75:81:d6:87:f7:a0:d8:36:06:6f:
                    1a:25:05:58:17:59:e3:b2:2f:51:18:06:13:89:19:
                    1c:bc:0c:92:f8:1d:01:64:9a:66:df:75:8e:0e:9f:
                    66:d5:32:9c:62:52:07:fc:ea:11:d3:1c:6e:44:57:
                    53:7e:ac:6d:8a:a3:e0:75:c2:4f:54:3e:29:95:47:
                    5a:5f:74:cc:23:38:c2:bc:72:e5:9a:d8:1e:1a:0e:
                    9b:51:bb:1d:79:e9:ad:ae:9c:a4:58:84:0e:f6:1a:
                    f2:cb:64:3e:7d:28:12:d1:44:b4:bc:1a:60:25:3e:
                    11:7f:4b:b6:ea:d5:a2:93:fc:7d:47:c1:c0:bb:b5:
                    d4:c0:19:f9:5c:3f:05:c1:97:af:9f:0b:04:06:4b:
                    4b:10:0f:6e:c2:54:9e:99:df:c2:48:0c:d9:51:bc:
                    cc:39:a9:29:88:6a:8e:97:6a:aa:35:3e:52:e7:da:
                    e6:8d:51:26:b9:bb:47:50:3e:16:92:56:d1:a5:b0:
                    af:9f:d9:ba:15:42:fd:f1:fd:f2:2c:ed:2b:75:65:
                    c5:94:af:9a:18:90:19:01:d2:44:4c:66:b4:00:6b:
                    23:ab:8c:f4:cc:ec:41:d4:d5:88:0e:e8:14:8e:7e:
                    86:8c:50:a6:d5:f4:b7:13:5d:79:50:78:51:a3:6e:
                    9c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:14:58:DD:A8:55:54:EC:CA:FC:83:71:00:12:4D:F4:E3:E7:E1:47
            X509v3 Authority Key Identifier:
                keyid:CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ec:6f:a9:dc:61:fc:02:a4:eb:05:c8:7b:c6:c2:22:02:44:
         99:29:ae:a8:37:38:70:4e:db:ee:4c:d7:03:e2:40:56:4e:93:
         53:32:84:93:4b:8d:e6:0a:66:5d:fb:b7:ca:f6:4a:b8:ec:ce:
         5a:ed:16:0a:e0:d0:16:b7:87:11:52:3d:cd:f0:94:74:ea:8f:
         37:8c:6b:f9:e5:dd:9b:51:1c:d4:a3:f2:18:81:48:65:f5:96:
         c8:ed:6c:9f:d0:68:62:7a:61:e6:f6:b2:56:d5:8e:65:0a:4d:
         65:a4:7a:aa:39:3c:d9:3d:6b:6d:52:5c:31:b3:9c:3b:cd:ab:
         57:08:f6:ad:c6:64:3a:7c:28:0e:b0:cc:6d:38:8b:56:af:23:
         75:52:9e:5f:0c:16:ff:34:c5:b0:7d:e8:a5:68:f7:30:d2:54:
         1e:64:4b:aa:af:f3:46:91:c6:b1:52:83:69:e9:4e:a5:18:6a:
         e0:84:31:02:2a:f4:4e:ce:82:9c:7b:0c:06:f8:33:7d:3f:d4:
         ec:4f:d3:3d:f9:30:7b:af:56:f8:fd:c7:a0:4c:d5:af:d2:f6:
         36:2d:f7:65:1b:68:1a:e3:92:0c:31:f1:1e:34:78:a2:d6:87:
         f0:ec:59:e4:b5:a0:cb:40:4c:7c:ee:18:a1:35:4a:61:26:5f:
         0c:04:21:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:16:13 2025 by rpki-client