This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
File:                     Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft (raw, json)
Hash identifier:          c2rWHMdzWxB279fPcpzxeizZQYzxLCD0dep4BTnqAiw=
Subject key identifier:   38:0E:24:60:85:C6:30:96:68:06:B0:6A:09:55:0D:2A:16:72:F9:6C
Authority key identifier: 67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
Certificate issuer:       /CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Certificate serial:       019AF540A82C2FBA682D7CB76877A8B35A3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 20:00:46 +0000
Manifest this update:     Sat 06 Dec 2025 20:00:46 +0000
Manifest next update:     Sun 07 Dec 2025 20:00:46 +0000
Files and hashes:         1: Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl (hash: TwXs054MPO1fCWCmb+6m8ZIbrfsClLal5zJpwaFJhbo=)
                          2: bhq2oKJsXiAPmHmxil5SZXJs2hk.roa (hash: y1Ce6WtfvZHZo4j+/NRj6oK2WGjHyCLTganiUlBZ6fg=)
                          3: fvEaZhW-GGMhhdbn7EzYzxhTO0Y.roa (hash: PejnUWHJu/zM/xe0xcdnKnBLQ6bQFTtLgmD+7o4mD/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 20:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:40:a8:2c:2f:ba:68:2d:7c:b7:68:77:a8:b3:5a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
        Validity
            Not Before: Dec  6 20:00:46 2025 GMT
            Not After : Dec  7 20:00:46 2025 GMT
        Subject: CN=380e246085c630966806b06a09550d2a1672f96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3d:63:fc:b7:85:94:dd:18:d4:df:cf:ab:ec:
                    7a:00:19:fb:10:27:4f:ba:68:08:8c:14:cc:1b:e3:
                    da:a4:f9:b9:0f:01:9d:4d:d3:62:4c:a2:cc:18:8e:
                    32:58:53:f4:ea:10:0b:f9:97:8e:0c:fb:8d:44:55:
                    6d:46:2d:d9:c5:2b:d9:60:2f:1f:b0:59:38:59:c2:
                    e3:cb:f9:d5:27:31:8c:73:01:41:b7:ad:d2:14:52:
                    44:0d:cb:25:77:44:2d:4f:d6:e0:3f:c7:20:b9:96:
                    87:03:9a:4a:1a:35:3f:ca:8d:88:88:34:84:b7:c0:
                    23:d7:e3:18:a5:74:26:14:d9:8d:42:63:25:1e:08:
                    e0:b8:60:a6:9d:68:f6:49:98:f0:c1:9d:70:84:63:
                    1c:b8:ad:94:86:7c:c8:f2:bc:51:83:7b:24:f3:60:
                    04:92:11:eb:b9:40:c5:f5:5a:a1:77:90:88:57:9f:
                    5e:bc:17:50:8f:a3:35:d6:44:91:fb:fb:a4:bb:01:
                    f5:84:75:e9:b3:b3:79:08:cf:2c:94:d1:55:dd:43:
                    15:cd:b7:b1:02:95:07:c1:9d:94:ae:1f:a3:12:7c:
                    97:b5:c2:1d:e6:8e:c6:38:91:29:32:df:74:8e:0e:
                    2b:3d:c3:b8:3d:e8:b8:01:c0:85:4f:b9:c8:74:3c:
                    5a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0E:24:60:85:C6:30:96:68:06:B0:6A:09:55:0D:2A:16:72:F9:6C
            X509v3 Authority Key Identifier:
                keyid:67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:7c:6f:e6:69:a8:64:65:c1:1e:a0:1e:10:bc:e0:d9:dc:98:
         83:f2:b6:31:72:8b:da:7c:66:a6:5f:11:20:ff:52:45:0c:1a:
         cc:5b:dc:87:d9:42:77:db:ce:a3:bf:9a:03:87:e5:24:26:54:
         63:20:47:66:46:51:f1:4a:c2:ad:a7:95:3e:e9:dc:df:f3:1e:
         59:a2:80:e3:b1:d0:04:04:c4:74:34:69:51:e9:d0:bb:ac:03:
         fb:07:0c:8c:a3:38:8d:fc:b2:db:08:b6:4d:a6:f0:ce:04:95:
         67:3b:7b:67:72:3f:61:e4:17:0f:6d:7f:a7:60:8e:8f:f8:f6:
         63:a2:b6:cb:2a:09:8a:7f:f7:65:16:82:38:66:51:43:f7:74:
         ae:dc:1e:41:5b:ec:22:29:d9:2b:24:ed:39:96:80:e5:e4:88:
         c3:04:72:88:7c:e9:46:88:6b:4d:47:3d:19:b1:3f:de:95:32:
         8c:c9:43:d4:7e:76:bf:0a:ef:2d:47:7f:52:4d:53:a1:e9:1e:
         df:3e:9b:09:3f:da:8b:d2:4f:f0:cf:28:35:37:aa:b5:fc:72:
         31:32:a6:38:98:6d:d0:77:60:9b:09:3d:d0:5b:36:f0:d7:30:
         3c:47:d3:e4:28:53:64:33:ab:05:d2:fe:a9:1e:95:86:9f:44:
         c4:ce:4b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:30:41 2025 by rpki-client