This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
File:                     9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft (raw, json)
Hash identifier:          vyBsDVGJgOjoDhC+PxoGIg/0KyQttMqesOmupK8PwaE=
Subject key identifier:   D3:88:9B:84:68:30:B1:72:78:A5:4D:90:A7:C5:9D:44:0E:A1:B5:53
Authority key identifier: F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
Certificate issuer:       /CN=f73cdc6751d7c59073e4b706402d3691af09086f
Certificate serial:       019B35D7143C5C8A4E930F7F3A26A3463281
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
Manifest number:          16E2
Signing time:             Fri 19 Dec 2025 09:00:46 +0000
Manifest this update:     Fri 19 Dec 2025 09:00:46 +0000
Manifest next update:     Sat 20 Dec 2025 09:00:46 +0000
Files and hashes:         1: 0YWWGLY2ws5dEm_54FSQZ1sndS4.roa (hash: NrM8b8iTRjQj/SggeT540k8LBz4kUfRyQupPzxIyzNo=)
                          2: 9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl (hash: 7d9OobjpqRLvMwzH2YjbKeoI98B5swPVYZCI4ex376k=)
                          3: QvYuctjlOUmpEgpvzgB4c1se_Qc.roa (hash: eYNoK8Wy+9Zr1JqWLRbHBLeE5t+d/AXQdx/gVhz5wA0=)
                          4: SgIFzdX6JcgyEvIi1tU7tEpqzs0.roa (hash: p6RL3L68zCciLtwZlC4lGEQ9Tf1FF1+MJetEEftOp98=)
                          5: WC5kYAaNv3dBMoN7rOV1Dk7R1Eo.roa (hash: IM898uPAV6VmuESMyy3MG48B0cB42EspCAHOuXpg7Io=)
                          6: wW0iKtg9bPCx0wfkjNfecHkB2Ck.roa (hash: UM3eZveIrytl53yxFS6AdW4CNHF0JEQaT47qsF3G7tI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 09:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:35:d7:14:3c:5c:8a:4e:93:0f:7f:3a:26:a3:46:32:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f73cdc6751d7c59073e4b706402d3691af09086f
        Validity
            Not Before: Dec 19 09:00:46 2025 GMT
            Not After : Dec 20 09:00:46 2025 GMT
        Subject: CN=d3889b846830b17278a54d90a7c59d440ea1b553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d4:6a:96:30:79:af:c9:0c:40:a0:6b:05:13:
                    6d:b3:81:f1:53:6e:f2:7b:47:45:15:65:34:79:e3:
                    18:19:3b:41:ff:a4:09:95:97:76:cb:9e:1d:26:ee:
                    a9:7d:f4:9b:6b:b0:9d:58:22:97:b5:31:c0:99:d4:
                    f2:07:8f:80:e4:b3:b4:88:b7:a4:42:34:6c:97:ae:
                    44:68:c8:08:7e:ce:2e:ad:30:86:59:a9:00:ff:f6:
                    31:58:4d:6c:6b:a3:ac:f3:14:4b:25:91:68:c9:61:
                    95:ed:1e:5f:00:11:b4:1e:9d:61:3d:5c:7c:b5:44:
                    a1:61:6f:b4:2c:04:8a:4f:03:fc:d9:81:d3:9c:26:
                    ca:0e:76:63:01:b6:2c:e8:49:bb:d0:18:08:44:db:
                    63:92:ca:b9:a9:9e:49:db:6e:21:bf:43:2f:1a:d0:
                    a7:95:3a:17:38:fb:89:99:bf:11:03:47:b6:94:63:
                    30:5b:e5:8e:39:b8:42:28:1c:cb:04:d3:ef:e2:14:
                    fc:b1:c2:5d:f2:b2:25:b0:cf:f6:c7:10:75:2d:aa:
                    e2:73:9e:52:f6:9d:23:8e:28:7a:1c:49:ff:04:61:
                    10:13:4a:5e:84:c0:d8:a7:b5:02:71:6d:c7:d6:d5:
                    ef:d2:c0:41:d7:ef:93:16:28:8f:2e:11:4f:0e:09:
                    a9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:88:9B:84:68:30:B1:72:78:A5:4D:90:A7:C5:9D:44:0E:A1:B5:53
            X509v3 Authority Key Identifier:
                keyid:F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:f4:0b:f4:41:3b:c4:72:48:57:af:03:b4:5b:53:15:a5:e6:
         de:c9:ee:a0:14:0c:96:b4:a6:8c:5f:b4:ab:5e:53:75:9e:c0:
         f6:90:e0:61:3a:86:ef:17:20:77:36:5c:0a:58:d1:bd:0f:7c:
         1b:bb:0a:7a:5e:6b:26:61:ae:b7:27:5b:60:4b:a7:57:5e:00:
         f3:28:da:ce:0f:9c:fa:6f:b8:b1:30:36:45:21:2f:46:8d:a9:
         4c:37:7d:82:bd:29:b5:70:06:3a:5f:ef:94:cc:0a:dc:31:2c:
         de:db:58:ac:44:a4:9c:e5:53:7f:01:65:4b:a0:7a:c9:3f:90:
         03:82:2e:4c:b1:a7:81:bc:65:99:cc:81:f5:2b:d4:9b:0e:b7:
         f2:52:7e:68:c2:31:03:16:35:16:68:19:b3:a6:c9:f2:d0:52:
         4d:8f:f5:09:bb:fe:3f:e7:ff:bb:52:0a:d9:ea:f6:04:7a:29:
         71:9e:27:c3:62:44:5d:b8:f6:d6:fc:49:c5:f8:da:85:b4:a1:
         d6:30:c9:06:9e:5b:2c:83:a3:f7:ad:3a:b5:7d:f6:ee:8a:94:
         e5:9c:a1:ea:be:5a:87:e0:e0:60:09:d5:44:d1:0b:0a:9d:61:
         b5:e6:89:b2:15:c1:10:c2:69:a9:4a:f9:00:63:fe:e1:59:67:
         c0:fe:3a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:22:45 2025 by rpki-client