This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File:                     mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier:          ttWPPhU7rRV1XKy4/tJqy6RBIKS2qOguP2uxRs6qxNI=
Subject key identifier:   F4:07:11:42:53:53:FC:8B:EE:33:0F:9C:62:C4:7F:33:E6:E4:58:F4
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer:       /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial:       019B10812780347557A5E75A699D1C5EAB60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number:          1775
Signing time:             Fri 12 Dec 2025 03:00:58 +0000
Manifest this update:     Fri 12 Dec 2025 03:00:58 +0000
Manifest next update:     Sat 13 Dec 2025 03:00:58 +0000
Files and hashes:         1: 4in_MuHKKTofxeC0GNnkZQgqzos.roa (hash: UqmJZKo8HH99QGUUYifQW7Jr1FD5FrWiTWus6JXbUPs=)
                          2: SNHPOOFKUgc1zNBN9wxr7FeAdRs.roa (hash: Hb2HBizkzgimQbuN29+MCl8e5+WlfhI+P1/UM2vwUU0=)
                          3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: IUsCINiNVnIh7Jhz9fLPED3+L+NPc6H5QEqkmDPRgXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 03:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:10:81:27:80:34:75:57:a5:e7:5a:69:9d:1c:5e:ab:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
        Validity
            Not Before: Dec 12 03:00:58 2025 GMT
            Not After : Dec 13 03:00:58 2025 GMT
        Subject: CN=f40711425353fc8bee330f9c62c47f33e6e458f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e3:8f:c3:37:7d:ab:63:b5:b3:5b:75:05:77:
                    80:9e:b4:25:70:cb:0d:d3:4e:71:4d:7d:44:b6:d9:
                    93:b9:a6:e9:b7:2b:fe:b6:ec:11:1a:38:7a:8c:0e:
                    78:e7:2f:7e:99:2d:8b:07:a6:51:c6:a0:7a:53:fe:
                    13:4e:c0:90:a3:c3:a3:e7:8f:a9:93:ed:eb:16:fd:
                    b9:3f:70:42:8b:6f:b0:1f:36:d9:e6:ec:d4:e1:d3:
                    95:80:ac:c9:69:d3:39:cf:f4:92:14:57:7e:2c:ff:
                    80:54:ab:69:88:32:99:43:9a:60:cc:0b:4e:10:35:
                    5c:e2:fc:b1:78:3e:16:3b:a0:f5:e5:37:08:7f:db:
                    ff:3d:36:c4:92:ad:40:2f:0e:76:65:1a:94:e0:dd:
                    fb:e5:91:ad:64:53:08:c1:d1:50:88:93:2b:63:32:
                    c0:5d:ed:77:f8:b0:ad:4e:db:b6:65:df:02:e2:d6:
                    3e:e1:7f:3f:a7:a6:88:d4:c3:92:cc:db:55:1f:17:
                    6e:73:5a:e2:bd:f6:8a:a5:9a:b8:8d:6a:7d:ac:fe:
                    f1:33:3c:38:8b:58:c1:00:18:1a:50:ac:d9:43:7f:
                    ab:10:a8:bc:7f:c3:ae:45:97:7b:9e:51:ed:6a:7a:
                    ae:fb:f5:55:a9:82:48:09:b3:f8:84:a9:11:3a:40:
                    36:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:07:11:42:53:53:FC:8B:EE:33:0F:9C:62:C4:7F:33:E6:E4:58:F4
            X509v3 Authority Key Identifier:
                keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:fb:cc:47:5d:a1:3a:49:18:59:19:88:cd:97:95:2e:21:5e:
         47:b4:24:28:a3:a1:0e:5e:38:ee:7a:c9:8e:2b:98:b0:15:f6:
         63:00:ef:0e:38:08:9f:b1:a2:a3:4c:00:cd:1f:67:84:04:81:
         7f:cd:6f:bc:36:5a:56:b3:51:f4:cb:b4:1e:69:6f:7f:e8:77:
         e7:11:c3:38:d4:0a:4e:49:04:74:1b:b5:2a:69:29:ea:b7:cb:
         54:c2:94:64:96:6a:64:4b:f6:ec:df:1b:48:33:9e:6b:fc:0e:
         5b:dc:b2:e6:67:1d:f6:b6:ca:a2:0a:a7:20:e5:c3:c5:01:aa:
         27:0b:58:dd:fd:50:db:96:73:93:44:cc:62:43:a5:20:a8:3d:
         f1:4d:96:81:a7:e2:f5:5e:eb:8e:bc:30:b3:1e:29:f9:97:77:
         db:03:e9:4f:47:0f:81:47:de:76:c6:b8:bc:2d:72:32:24:a5:
         54:a9:3b:f3:b1:c2:5e:b2:85:ea:38:1d:af:12:a9:ff:3e:cb:
         38:aa:72:ca:72:32:97:a3:0f:e6:86:a9:98:1a:cd:10:53:2d:
         c4:64:2f:71:87:b3:07:92:80:cf:fc:44:b1:39:ac:ad:99:7c:
         58:7c:96:0c:36:5f:6b:24:c6:ce:1a:d0:cc:25:e5:df:b9:c9:
         92:24:43:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 12:39:34 2025 by rpki-client