This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
File:                     zbg8_lSJg18pTQr03U2249wl8fM.mft (raw, json)
Hash identifier:          cJPe+acGob54K/dFXaKnJPRa0lJDS0fylLvYRpXyark=
Subject key identifier:   E6:1D:96:B0:A3:7A:9E:3B:9F:43:88:BE:90:46:D7:8B:60:66:42:60
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Certificate issuer:       /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial:       019AFB7A464E62E2FCA85C77185BAE1D17A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
Manifest number:          1780
Signing time:             Mon 08 Dec 2025 01:01:25 +0000
Manifest this update:     Mon 08 Dec 2025 01:01:25 +0000
Manifest next update:     Tue 09 Dec 2025 01:01:25 +0000
Files and hashes:         1: 0jypa2Y6gbHdmPjB5cUrL6HFbjY.roa (hash: /hz8ZuFYY6yHXSyTdbZx1ueR0hVf4uL/YlGGZn54tJc=)
                          2: 1-UmZ0qaeCWaJjSQeWdowEec2Vgs.roa (hash: rtV+AgS70YkljbsF1mLGSzdsR69goFmM5hHoLdiWS/M=)
                          3: 21E38ZJn3Y3wnYOg6rZryW7jINU.roa (hash: SAUPXrysKyx0/ciMHZtWkr2xOaCTGgvaZdUfJqupJuQ=)
                          4: HzNyysceRKeRdA1hjWYRZPbP3bg.roa (hash: LjbMsGUdE/LEpP15YVSK6PhMb+v41cEg4eSzCdw3tFc=)
                          5: JkkdgtULLN5YFOoQYdjnkQtxRiA.roa (hash: WC9ErWl9RKhrEYqpczI/9k3EhKFlr59+yinuHTpWjE8=)
                          6: O-Hk60iWFBySjfmtIEbOjzMsIwE.roa (hash: DMf7R1BlmQppApyXpHiUTsmI5ATEPn/jHL+WMkSNnPM=)
                          7: Po-xudB0HE48UZHOpupwvz9yrbQ.roa (hash: lVFatq2L+Iy6QmpWtRbFHS1vI3rllhStxmnJByjduMY=)
                          8: QOlU2_199XSOE961RlohguyMUYA.roa (hash: lKmPNrtTDIHyXPpE+Nt8+JIY99D22fB//poGRt2tIMg=)
                          9: V6zEBzayoar1bRNapjv0e_aKUGw.roa (hash: vKxfd+7Tf7rGFq+FI1UaxDCPBksjmSItIcWGviDha9E=)
                          10: ___AQ3LSe3WVBreiiJRB_AYfZx0.roa (hash: wcJBacx0bgBybMykDVZxbki0j6CqQ53t27MFPiiNswk=)
                          11: b0tYC7kbQ5yQLuO0rNO86tSY9_M.roa (hash: JhPFYcaqWvvNtwLm0T45vgJgebIRB5cWijzT6ON31V0=)
                          12: e5M5ScLaYw3XnoOsMxW_rdC-Zy8.roa (hash: v9RrKSRn6Graw0XMotW5Q/F2MEOdN/akjPpJcokpNts=)
                          13: koxHsCOglgaz0t3iqVnSlyxk1ow.roa (hash: ezCqjwYzx/s/HM4jbyHE+jja9xXjGxsuVYdaEiacu30=)
                          14: mJZPhz5T9AlnY5d-UbrRSZKK3MI.roa (hash: lDzuVpP6RmyH8wWHb3wCkNQZZMUB33h0hM3H0/qcoZw=)
                          15: pvRIKp7ter4l53fy9my93MgYKtc.roa (hash: YhNOC9YS9JUzZo1Ux+veDSPjyhDLIExrmW905QsVrpI=)
                          16: tAcjFos5oDT4EzynP-yphmNjnYw.roa (hash: VWOhT61czYSeN9S1ms3okP9vpKMGiU0IJN+FU1lJ6sQ=)
                          17: uVnErfl-xwbjkgiYLPvKRi9Q_KQ.roa (hash: wUoD3qQGS3ZnrXf66OJ6AmxAYBOVrPCIA6y9gHjS9Js=)
                          18: upmvRKLP0ZU9huQZm3R45yCba8w.roa (hash: Ze4hSd6gSnJhj9RVYqePJmO26WqF9E8nQZjA9SW32Gg=)
                          19: zbg8_lSJg18pTQr03U2249wl8fM.crl (hash: eRpgflmgPFYqrcR0ssVKbcrcK9HFfHJkcQrllNsLH7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Dec 2025 01:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:fb:7a:46:4e:62:e2:fc:a8:5c:77:18:5b:ae:1d:17:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
        Validity
            Not Before: Dec  8 01:01:25 2025 GMT
            Not After : Dec  9 01:01:25 2025 GMT
        Subject: CN=e61d96b0a37a9e3b9f4388be9046d78b60664260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:87:ce:c9:96:2f:2e:d9:7d:5b:14:d1:d6:e3:
                    b5:4b:7c:69:61:6f:f7:21:c0:07:f2:9b:d5:1d:5c:
                    fd:af:8e:07:ee:f4:e4:d7:15:4f:f6:da:25:55:85:
                    b6:35:8b:9e:2f:22:4a:54:52:70:a3:45:8e:40:f8:
                    4e:25:f7:e8:ea:5e:2a:ef:f3:db:9b:e7:1f:0b:05:
                    08:50:fa:3b:f6:a2:da:e3:34:11:8f:f1:8f:f7:19:
                    5d:88:52:cb:c1:5d:9d:45:02:6f:85:00:8f:9d:64:
                    29:96:1f:ec:8c:10:54:3c:03:88:3f:cc:89:f2:36:
                    fd:2b:68:81:69:c7:1f:3c:ce:c9:bc:02:07:0d:14:
                    68:0b:7a:7e:2a:8b:d3:25:22:9f:63:2d:76:ba:aa:
                    67:cf:ac:f0:5e:bb:78:01:d6:6f:0f:87:29:06:46:
                    d4:8b:04:0e:e5:d7:1a:36:86:db:f0:23:2a:7d:8c:
                    e2:1d:95:fa:ce:5c:a3:14:ad:29:d1:85:c9:dc:ce:
                    77:a6:7c:db:1f:dc:eb:4f:93:96:ce:e2:3a:f6:13:
                    71:58:75:d3:f5:0e:f8:cd:04:cd:ca:21:c0:3e:d5:
                    c3:d4:7d:4b:1d:6a:65:5f:49:5e:11:52:7b:92:cc:
                    6f:50:8c:1b:e7:64:ec:3a:eb:ad:8d:5d:bc:c8:26:
                    e9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1D:96:B0:A3:7A:9E:3B:9F:43:88:BE:90:46:D7:8B:60:66:42:60
            X509v3 Authority Key Identifier:
                keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b7:f4:f3:c5:1e:79:7a:4c:98:79:7c:b8:8a:24:2d:dd:55:
         83:51:50:9d:fe:23:ac:06:1f:ef:85:df:50:ba:a9:5a:51:17:
         f5:59:17:70:a5:67:f3:d5:48:26:a3:52:cc:6e:80:99:31:0d:
         e9:3f:6c:d5:1c:f1:aa:d3:f5:1c:66:0c:df:99:ff:02:ac:e1:
         7e:bc:f8:51:bd:57:eb:42:41:27:23:dd:db:f6:96:43:38:db:
         ea:46:07:2d:50:04:ae:b1:6d:3e:0c:c5:fa:3c:19:7b:55:6b:
         b7:dd:3f:dc:e3:64:fd:98:62:e3:1b:88:40:51:ea:d3:d3:29:
         75:03:73:49:94:8e:43:91:e6:b2:5d:77:5e:66:db:8e:ba:9d:
         dc:52:76:a2:7b:07:3b:32:01:bb:27:de:a4:e8:29:c4:93:41:
         0d:a2:a8:d1:52:09:d4:36:02:81:91:3d:39:f1:6f:4e:12:ae:
         1a:ed:a3:85:e9:ed:3e:4b:5c:45:fa:15:e9:d3:c4:b6:a0:13:
         f1:96:5e:25:db:dc:fc:92:b9:b8:99:13:15:ae:38:d5:6b:39:
         6d:c7:5f:23:db:7b:79:94:a9:a9:ee:af:58:ff:14:49:f0:b1:
         d3:4d:43:36:12:58:83:7a:a3:c8:56:f8:6e:0d:f6:65:d5:db:
         35:f1:2a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 11:32:57 2025 by rpki-client