This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
File:                     2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft (raw, json)
Hash identifier:          nmsBgIM2MQ3NZJ5QvIVqqRuXlk2hvVIRRgegdfBtrK8=
Subject key identifier:   47:AE:8C:60:26:AB:44:26:76:DC:50:9D:7A:00:63:28:49:DF:D4:04
Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Certificate issuer:       /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Certificate serial:       019B1494A40E3652764E08A1E810531904E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
Manifest number:          06CB
Signing time:             Fri 12 Dec 2025 22:00:44 +0000
Manifest this update:     Fri 12 Dec 2025 22:00:44 +0000
Manifest next update:     Sat 13 Dec 2025 22:00:44 +0000
Files and hashes:         1: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl (hash: zWHlCd6d05D+6shcVohep4CLxxWb5AO9wbSpWXcvSLI=)
                          2: Ifc9NwWgW96DB3jfdAd1eRUTItQ.roa (hash: QwQYTZsG7IIaUp2W464uVveyT3Hy95wxA6B00yVfsE8=)
                          3: xswOfeFYQB8__QySjxBuBlaYjZE.roa (hash: UFudVerFpyGKspIudoEvuO5xASRkVerT3UxaZZDITQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 17:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:14:94:a4:0e:36:52:76:4e:08:a1:e8:10:53:19:04:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
        Validity
            Not Before: Dec 12 22:00:44 2025 GMT
            Not After : Dec 13 22:00:44 2025 GMT
        Subject: CN=47ae8c6026ab442676dc509d7a00632849dfd404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ee:21:4b:39:d2:cc:44:65:08:a0:0a:27:4c:
                    f9:43:3d:e9:af:38:ac:ba:e8:ac:71:c0:42:12:4f:
                    92:d6:ef:86:13:07:b3:ab:20:ef:d1:10:33:f4:86:
                    c7:df:95:d7:28:81:39:fe:d9:16:6f:cb:89:50:df:
                    6c:1f:d1:4b:4d:1b:4b:f8:cd:d0:6c:82:17:b3:74:
                    ce:3c:35:92:de:1e:30:e9:df:0a:17:12:05:18:ce:
                    27:2f:fa:a3:8f:89:20:dd:10:f4:38:f1:8c:1f:05:
                    69:e2:5a:4a:20:cf:0f:d8:09:13:e0:3e:73:2f:8c:
                    2c:35:56:ae:96:28:f6:aa:8d:b7:8a:bf:d8:6e:7b:
                    d1:b1:69:6c:0b:57:d3:7d:4f:f4:c2:4b:25:2d:5b:
                    11:bf:15:be:1a:f0:8e:51:9a:50:69:50:88:96:67:
                    ba:9b:ed:71:96:b4:89:59:00:76:a1:1f:7e:ed:85:
                    7d:52:0f:6b:57:90:09:1a:fe:b4:b8:42:84:a4:48:
                    49:41:25:aa:20:74:fc:ca:31:3e:0b:b1:f4:b5:58:
                    d3:2c:c7:15:b3:46:97:f2:e3:da:d4:1c:69:96:8f:
                    2a:3b:df:ce:1b:0c:76:7a:b0:9c:4b:16:9e:10:a5:
                    58:6a:97:97:81:c6:ea:4c:7e:c8:31:d4:87:af:f4:
                    8d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AE:8C:60:26:AB:44:26:76:DC:50:9D:7A:00:63:28:49:DF:D4:04
            X509v3 Authority Key Identifier:
                keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:db:7f:94:7a:47:cc:6e:63:8c:b4:7b:b3:c8:27:05:57:e5:
         5f:1d:11:2a:f6:f8:30:ba:13:79:6a:b6:4a:ce:b9:91:cb:b8:
         2b:15:8e:d7:78:a5:29:4e:c6:7f:77:e6:e6:f4:43:a5:1c:72:
         dd:2c:e4:b7:96:b3:6b:2a:cf:43:73:0f:1b:f7:31:ec:49:4e:
         0b:09:5e:0d:40:e5:7a:c0:14:fd:ca:3b:af:9d:40:a1:38:2e:
         fa:e1:90:3a:9a:1d:be:22:6e:1c:cc:ed:11:43:69:e5:b0:41:
         6b:7c:f2:2b:fc:83:6d:9c:84:45:03:37:ba:51:aa:12:ad:db:
         6b:15:a1:47:89:3a:b0:77:f0:7c:2c:10:28:33:fd:7c:e9:39:
         05:06:8e:72:f5:94:9c:da:7a:0f:94:cf:4c:b4:0f:5a:8e:eb:
         90:bd:eb:af:77:30:1e:d4:40:8f:d9:3f:87:5e:3e:bf:b9:94:
         96:cf:e7:45:16:0a:b0:4c:c4:20:db:90:2c:09:91:89:da:b9:
         58:1b:38:30:98:da:8d:24:11:3a:cd:8a:fc:e7:b8:1e:80:6d:
         23:e2:ba:15:e3:78:56:d7:c9:f5:86:a9:8f:69:51:8c:c5:f1:
         ae:9d:b1:41:e5:f6:5e:90:18:8f:34:c0:a4:fe:26:34:5b:5b:
         da:d5:9f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 02:22:36 2025 by rpki-client