This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
File:                     zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft (raw, json)
Hash identifier:          IyrJKVepeYSReBXWkXZnZ6SJ52S9I3NlGrIKLXp8xsw=
Subject key identifier:   29:52:4E:90:56:79:87:8D:CF:7B:38:85:92:6C:33:54:8A:BF:01:0D
Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Certificate issuer:       /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Certificate serial:       019AF19B6D62E7718C46D0B993662A7A7C20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
Manifest number:          07FD
Signing time:             Sat 06 Dec 2025 03:01:26 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:26 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:26 +0000
Files and hashes:         1: CaWXYpKvbSJzF_mYByH9muE8M1Y.roa (hash: EeYUCquk5ABf/u1PAGxiO+fxjOU9b4kobfLQPidgSUo=)
                          2: FF0ktv0OPoF7jCtMQNOnbF5wwXU.roa (hash: HLhVlsk2Unfze1/M/TFW88bBXMX8DWQaGu5Q6NyMGnM=)
                          3: kZ7eyrCVE9sgtqrKRokEj4qTgAo.roa (hash: +7Bcl0ExuY0MXzkJn8UI65AlETMnOzrxtQ5UBzKR/Pk=)
                          4: nhH0f8YrsZbPIXW8xTSorKAhQWg.roa (hash: UkA3IcBbEJENHBzSBQlkD9Qpnz5ghpEJH4gNaI8ZrkE=)
                          5: vgmzsk5mJlVpOvg90oBMOrzEyD8.roa (hash: mlh/51JI3/xnvn2/YPy/vMvMSrdR3vTjEtNddu6PauM=)
                          6: zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl (hash: 6zpG47snadR61+pdJONPEvqbTCSt3aviq+rXAbcFPjs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:6d:62:e7:71:8c:46:d0:b9:93:66:2a:7a:7c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
        Validity
            Not Before: Dec  6 03:01:26 2025 GMT
            Not After : Dec  7 03:01:26 2025 GMT
        Subject: CN=29524e905679878dcf7b3885926c33548abf010d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:11:77:e9:69:f8:b7:bd:78:2f:f9:f9:41:4e:
                    a8:c4:46:90:3c:0e:e7:bb:e6:4c:a0:02:90:ba:81:
                    81:f4:90:31:fe:55:65:7d:1d:e3:e1:b2:fd:93:9f:
                    e5:3b:b9:2a:34:fe:28:c3:f7:12:d0:c7:67:be:cd:
                    fb:bd:43:57:a2:5b:a0:7c:06:41:af:33:4a:eb:c9:
                    e4:cb:4f:56:90:6b:6f:f0:bb:8c:1e:ef:bf:8a:b8:
                    23:7a:8a:ad:65:a8:b7:43:97:97:5b:8b:76:92:3a:
                    7c:bf:2f:26:36:dc:21:fb:e6:da:53:fd:af:b0:17:
                    aa:6d:44:dc:36:0e:50:f7:0c:32:2b:09:7d:44:02:
                    2e:6f:36:30:75:ba:e0:bc:82:7b:9f:f5:be:5d:b5:
                    8c:30:27:58:c8:01:68:a3:2e:65:b9:4b:ce:75:1c:
                    17:79:a2:64:b0:6a:4a:21:48:8f:aa:6f:4d:11:6b:
                    db:9e:ff:dc:6c:3c:9e:80:56:f3:17:70:2e:ee:c4:
                    b1:8d:a6:10:fe:e8:4c:7a:62:d4:73:de:4f:76:6c:
                    d4:ce:52:9a:4e:3c:0d:3e:aa:1d:49:ca:c6:5a:22:
                    4b:3e:41:8e:cb:13:cf:c0:88:00:a2:d5:e2:45:b1:
                    7e:28:32:f6:b1:28:bd:86:b8:a9:c0:2c:41:ed:86:
                    c2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:52:4E:90:56:79:87:8D:CF:7B:38:85:92:6C:33:54:8A:BF:01:0D
            X509v3 Authority Key Identifier:
                keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:f3:46:de:57:61:8a:01:92:b2:43:76:92:06:8d:7b:59:d6:
         8f:ab:57:df:e9:f3:59:29:25:c5:ca:5d:0b:5c:1c:9c:14:29:
         f5:fb:32:db:6d:37:f5:55:d8:7c:8d:38:ff:25:ae:31:74:d5:
         4d:c3:09:fe:27:a6:ee:72:1a:44:e2:d3:8b:48:1a:05:4d:1c:
         5e:db:3a:38:de:38:17:0d:86:df:1e:48:51:33:3a:ce:5c:bd:
         6d:ac:21:f4:1e:a4:f5:4d:43:27:f1:1c:04:a8:19:66:ee:3e:
         b4:58:2a:0f:34:b0:86:c9:1c:54:38:a3:1c:b3:10:98:1d:6e:
         e6:32:d3:89:22:54:1d:3a:9c:c9:6c:fa:34:32:ce:97:0b:e9:
         da:8d:55:b7:71:f5:87:c4:2e:cf:ae:2b:04:01:22:62:95:48:
         6c:5a:f1:b4:59:32:b3:fe:80:6b:6b:60:a8:ac:29:bf:b2:1b:
         b7:99:f5:ae:7e:41:3f:87:61:77:8f:d5:0f:3e:05:e9:7a:d8:
         cc:03:32:9f:2b:ca:8a:96:14:59:28:71:96:99:6c:87:f3:b3:
         4f:9b:6c:4f:05:fe:0f:10:8d:8c:88:e8:3c:4e:ac:63:ca:0c:
         03:fa:e6:bc:33:29:9e:f2:4d:3f:f7:f8:1d:01:0e:b2:70:b1:
         32:fa:aa:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:03:23 2025 by rpki-client