This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft
File:                     Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft (raw, json)
Hash identifier:          mjM7oGV23fkDftkrP0n7HGvIeMYr/n8pMOSto0ElwZI=
Subject key identifier:   F2:E7:9D:40:36:1B:2C:C5:8B:20:17:0A:20:F8:80:80:6A:82:A1:00
Authority key identifier: 66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41
Certificate issuer:       /CN=667d377dd4c830c246cb48a934699699e4b37741
Certificate serial:       019AF12D0341D163F944CB0428D89CEEF31B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft
Manifest number:          0FD6
Signing time:             Sat 06 Dec 2025 01:00:50 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:50 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:50 +0000
Files and hashes:         1: Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl (hash: 11MHLfDdJNUXdi3+/somC4g5+amGw+gy086qn1DlBmo=)
                          2: gBvfSY4X722osdS0oGwbWca756o.roa (hash: qRD13MOAWh4vkqsKDndu25MB5rnSOvhlh2YKABBiyH4=)
                          3: x-oHQjnwxvG7zZvcQkuRXWO2h4Q.roa (hash: QRsXLezrt6W9iYwytMlCkOMS0u3CyU/UmS4vgAyjWJg=)
                          4: yFVTSR_CTrclIRPPye7JgJhB-BE.roa (hash: 02rS4vnA9A+lQ0jM0xxD7zUGWNZmGUrpLvyYuEGWcEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:03:41:d1:63:f9:44:cb:04:28:d8:9c:ee:f3:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667d377dd4c830c246cb48a934699699e4b37741
        Validity
            Not Before: Dec  6 01:00:50 2025 GMT
            Not After : Dec  7 01:00:50 2025 GMT
        Subject: CN=f2e79d40361b2cc58b20170a20f880806a82a100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1b:cb:a9:41:a6:25:58:24:f7:34:00:ad:12:
                    f7:ed:2c:89:95:5c:97:df:85:66:fb:49:c7:74:38:
                    87:45:75:a2:b6:c0:cf:0e:00:42:f6:86:c0:6e:a9:
                    43:e7:da:eb:fa:84:97:9d:82:6d:a5:bf:c6:fd:47:
                    6b:4e:89:8f:be:bf:b8:02:33:14:0d:dd:a4:7f:4c:
                    bd:05:fb:4d:d2:f9:90:4b:91:54:d7:4d:1b:4f:e5:
                    86:8f:08:50:38:84:ea:8a:59:6d:92:c1:20:f9:16:
                    ec:58:da:49:b8:e1:ed:15:d7:53:11:9c:fd:d8:74:
                    13:fd:54:3d:86:d3:f1:78:84:d7:33:53:0d:87:45:
                    7c:94:85:54:38:7c:73:85:39:2b:d9:e2:c9:3b:fa:
                    1a:c6:c9:2a:8d:b3:a7:c1:9f:75:1c:96:a4:9c:48:
                    d4:4b:1e:fe:cb:6e:96:d7:72:17:9a:11:72:fc:10:
                    06:05:cd:33:81:8e:80:0f:ba:e1:8c:01:f6:7d:dc:
                    21:b1:fe:53:25:a6:e9:09:e4:d6:0f:45:7d:fb:72:
                    1d:85:7a:23:a1:68:d4:5d:74:73:8a:93:6a:a2:81:
                    d4:2f:32:35:a3:cd:3f:ae:74:b2:9f:f0:17:a7:25:
                    76:b4:61:64:8c:e4:97:ed:7b:36:6b:1f:5e:4b:f6:
                    64:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E7:9D:40:36:1B:2C:C5:8B:20:17:0A:20:F8:80:80:6A:82:A1:00
            X509v3 Authority Key Identifier:
                keyid:66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:9e:d3:7c:de:bd:d3:42:30:f0:d8:05:bb:08:6e:0c:35:d5:
         05:a1:36:7b:24:64:9c:b1:75:64:34:2c:c4:3d:17:12:a1:1b:
         00:ef:c3:36:49:fa:dd:f8:9e:58:e4:fe:1a:6e:f5:3e:47:10:
         13:8b:40:49:41:8a:6b:14:da:3f:ae:9a:a0:89:55:29:2c:7c:
         51:96:bf:e9:e7:a8:d5:81:11:ec:15:ae:a2:b9:49:77:36:ca:
         28:7a:55:f1:31:7e:f3:a0:01:7c:12:26:65:5a:b7:2b:43:80:
         09:a8:d0:bf:a4:f9:a7:c2:cc:d0:87:1e:3e:1f:8e:bb:b1:bd:
         7a:bb:a2:49:7d:69:a9:48:3a:10:04:43:7a:65:02:43:45:4c:
         bf:77:cf:4a:60:c1:1c:6b:47:53:03:26:c5:95:0e:b1:46:e4:
         d1:a1:6b:ea:e8:56:70:33:a2:43:19:47:85:7c:69:7a:78:49:
         5d:9b:0c:e0:53:1a:24:62:dc:5a:3c:42:97:b5:13:8c:8a:13:
         d0:68:c4:22:c2:8e:1d:2a:cb:91:52:08:45:96:f1:46:5d:96:
         fb:98:ff:3a:85:db:d5:33:ac:cb:72:24:d3:02:42:42:a7:ea:
         38:18:32:fc:03:f4:79:da:8c:f5:29:08:34:6c:69:83:09:7a:
         fa:f0:00:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:45:36 2025 by rpki-client