This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
File:                     sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft (raw, json)
Hash identifier:          OIsi5fG0Ukc3NxgAtk8oZUQa0dUk80eeQZ22l/iL8oc=
Subject key identifier:   FD:82:6E:E0:F0:51:20:DE:1F:C5:B2:15:16:27:32:A7:87:72:FD:6A
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Certificate issuer:       /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial:       019AF3F78B7FDF40613ECC03C17671A3D7C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 14:01:17 +0000
Manifest this update:     Sat 06 Dec 2025 14:01:17 +0000
Manifest next update:     Sun 07 Dec 2025 14:01:17 +0000
Files and hashes:         1: 3XfxhYPaNkk8RYgtHf2GQ9-31bw.roa (hash: IyuGzJvfjXAVgnfQEKPJlaaX+BmI0xIhxqPUz3ur7Ug=)
                          2: K-1wTW4J6sLpv-6DuCiwUF12vdI.roa (hash: n2u+VQEAXcWUcGFe9BbTAMBCmji0TY4jRMY2BGuQA34=)
                          3: Npx18kARbKwhPsVOQp9AGtW-IRk.roa (hash: vuiB+5rGT82oxQbwKjm+/1tHrIOrr/bLoXItiD0HcWA=)
                          4: NsYwUgzVMnXieGE8ET2TEjto6eg.roa (hash: oLZXFnzZzj9unXv5slzpUpxTvQH/LdOTTYWq8r8y++4=)
                          5: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl (hash: XlELONY+lXzCku1pL58o1zP0VoxUgaaw4zclqqd69UU=)
                          6: zeoM8BTDMIvmahMcB90qnpwzClY.roa (hash: kC/8T/vBTQ+SF6IsbbebB8UCkgdezLGje3ANXS8WqT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f7:8b:7f:df:40:61:3e:cc:03:c1:76:71:a3:d7:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
        Validity
            Not Before: Dec  6 14:01:17 2025 GMT
            Not After : Dec  7 14:01:17 2025 GMT
        Subject: CN=fd826ee0f05120de1fc5b215162732a78772fd6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:79:79:d0:c9:cc:9a:a4:b1:60:90:0f:07:e2:
                    fd:c9:8a:29:74:40:4b:5b:1e:bb:88:84:66:a0:d0:
                    19:9b:bf:b3:86:4e:9a:d5:52:6f:a7:32:97:20:a2:
                    e4:f3:06:c6:26:e2:05:27:14:3f:9f:d0:b8:03:53:
                    a9:b2:5e:8c:b3:5b:c1:a8:8c:6b:e6:93:70:c8:1f:
                    cd:98:69:7a:89:95:dd:e1:14:87:cc:b8:a1:84:07:
                    9b:4c:20:fd:3e:3d:c5:6f:1a:d3:24:a0:bf:e3:9b:
                    18:bd:0f:88:c0:da:b5:aa:7c:f0:b0:d0:16:e6:00:
                    a7:ff:f4:7f:77:e8:f4:7b:69:7e:a0:c4:53:e2:1e:
                    cb:05:bb:3c:26:68:16:f4:7e:3e:0d:6f:57:8c:c0:
                    bd:6a:f5:84:b5:61:2f:0d:9a:45:5c:42:d0:9b:e1:
                    3e:e5:9f:26:dd:7b:fc:31:cf:ae:f6:8a:bd:cb:a6:
                    9d:66:c5:13:6a:40:6f:3e:a3:e1:68:74:a2:54:4e:
                    0a:ee:54:6d:9f:99:39:35:df:b3:2c:85:29:19:19:
                    ae:95:1c:6c:a1:6b:51:05:d2:a2:8c:f0:0d:b8:44:
                    63:e2:0b:2a:01:a1:71:3c:99:bb:18:9e:64:c0:9c:
                    f0:b3:9f:36:a1:6c:fb:be:91:e3:2d:f9:10:db:da:
                    3f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:82:6E:E0:F0:51:20:DE:1F:C5:B2:15:16:27:32:A7:87:72:FD:6A
            X509v3 Authority Key Identifier:
                keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:49:a8:fd:e9:2d:68:8b:3e:8c:65:4f:e2:5f:0d:94:af:46:
         28:c1:31:1b:30:36:d7:b5:71:22:80:98:b0:fb:75:96:ee:9f:
         00:b4:f0:fd:22:b1:23:bd:7d:0b:27:26:72:fa:b3:62:47:7f:
         27:61:df:c1:57:f8:2e:24:4d:34:4d:fd:46:51:05:bc:d3:cd:
         04:2e:d4:f7:e5:31:62:b5:0f:04:5a:7f:3f:08:9e:91:12:71:
         7d:25:01:2e:24:a3:7c:68:d1:29:8a:06:fa:9d:b9:28:89:ea:
         ae:9d:fe:ef:b8:b3:df:79:e5:45:0c:f4:67:ab:f9:2f:ec:db:
         60:3f:98:85:e5:06:4d:fe:77:96:de:be:df:a6:fd:7c:86:a8:
         ee:31:a0:3c:d8:b2:07:b8:67:4c:c2:1d:91:4d:73:a3:ef:9e:
         a5:68:62:38:88:d8:b2:e0:43:73:38:1d:ef:52:d9:23:bc:65:
         e5:5f:29:ad:56:5f:92:36:eb:4f:16:5c:80:bc:2b:7f:52:70:
         0a:e6:9b:0d:b7:af:d7:34:02:5d:f4:d2:93:72:a0:e6:d8:0a:
         42:d9:68:30:23:be:4f:64:f5:b6:c7:08:6a:1f:9c:f3:74:ce:
         5d:60:cd:e7:ee:e7:83:f9:df:63:cd:22:11:7d:91:54:27:87:
         a3:35:c7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:42:31 2025 by rpki-client