This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
File:                     znBIWLZDJm98cQdyHJjyupPdUmU.mft (raw, json)
Hash identifier:          AiE0fx8U8ejsQ0VnoB9FcWuDWRyjVFa0fK+u6/IQ90U=
Subject key identifier:   00:DE:20:7B:32:A0:46:EE:8B:55:BA:67:0E:B4:87:E9:70:7B:5C:81
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Certificate issuer:       /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial:       019AEE2CDFF683BF76E0CB4503D3CB07BD0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
Manifest number:          1763
Signing time:             Fri 05 Dec 2025 11:01:49 +0000
Manifest this update:     Fri 05 Dec 2025 11:01:49 +0000
Manifest next update:     Sat 06 Dec 2025 11:01:49 +0000
Files and hashes:         1: AlHpyxCGMtfizbttFRiRDBrpWE8.roa (hash: HEta5iZuaZfWfkQQtCG/hwIx007nSp0VAlOWKt9bqno=)
                          2: YnxGCtZHjBins_u7hbvZvkt5GP0.roa (hash: h0irCh3dXAANqMbOKNJ1CMyoogPZbPx+cpJ+hvCcEkU=)
                          3: sCibVmGvlfhOnP7xuISl7fg77mg.roa (hash: zU3gdGka1CEw6yQdMuB6aUaLsTOoMwjYj0HnH6sxIvc=)
                          4: znBIWLZDJm98cQdyHJjyupPdUmU.crl (hash: ANaxNnvZPHNJKzHNIhjfH/tuw5FeUFkrFD/DhU7xTtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ee:2c:df:f6:83:bf:76:e0:cb:45:03:d3:cb:07:bd:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
        Validity
            Not Before: Dec  5 11:01:49 2025 GMT
            Not After : Dec  6 11:01:49 2025 GMT
        Subject: CN=00de207b32a046ee8b55ba670eb487e9707b5c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a0:3e:18:9d:a2:22:41:e5:f0:f6:91:62:37:
                    74:60:00:be:e8:bc:85:aa:65:78:eb:49:93:4e:c7:
                    3e:06:25:49:4d:29:1d:d5:d9:82:04:3e:9d:c2:18:
                    80:f2:a7:30:2e:e9:e5:1b:ce:fe:c8:8d:6a:91:25:
                    ef:83:ff:5a:3f:2f:38:10:68:ba:f7:77:d2:17:ef:
                    de:a5:ed:e0:c5:55:30:33:a3:8e:c5:20:13:29:de:
                    ed:7a:0c:ff:8e:b8:d2:a5:f9:76:cc:8a:d3:44:10:
                    09:14:3e:b9:d8:8f:c2:ad:70:17:1d:83:75:5a:86:
                    2b:8b:6e:8f:ea:a8:8e:c1:94:11:9c:5d:f1:5c:40:
                    c2:31:92:8c:4a:bc:7d:c2:c3:f4:60:e5:37:ec:e5:
                    50:60:0f:c5:62:e5:3c:4f:ca:7f:b7:c8:6c:d4:4c:
                    f5:27:e6:80:f0:ab:75:c7:73:b9:a2:aa:97:a7:f8:
                    49:a8:32:0e:9b:cf:58:7a:69:50:d8:9c:4f:79:74:
                    4c:3d:51:0d:af:cc:8c:b5:c5:2b:04:47:55:cc:59:
                    29:3b:57:4b:f0:9a:9a:e1:51:74:ad:b6:ce:da:23:
                    7a:b7:59:1d:bb:b6:54:aa:07:fb:b0:dc:55:60:68:
                    a3:ad:97:6c:4c:96:10:94:cc:2e:4d:c5:ab:9e:0c:
                    5e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DE:20:7B:32:A0:46:EE:8B:55:BA:67:0E:B4:87:E9:70:7B:5C:81
            X509v3 Authority Key Identifier:
                keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:86:94:6a:f2:e5:72:30:f5:7b:c7:a3:8f:24:eb:81:1a:47:
         07:a4:d8:b6:7e:55:bc:0f:0d:f9:63:15:d3:af:47:9a:95:87:
         98:e6:6f:68:3b:de:29:ca:9b:3a:8c:92:4f:d3:c7:36:2b:26:
         85:cc:09:1e:ef:da:91:45:9c:3e:8b:f3:10:04:7e:f2:c2:ba:
         ce:04:e2:86:f2:1d:83:5e:25:39:14:5c:e2:14:8d:84:15:94:
         b3:15:71:47:1a:b1:a5:37:5a:b0:85:64:23:db:4d:d7:4e:1a:
         13:34:50:61:99:33:e6:3d:67:42:e5:cf:c9:e0:12:d6:d9:8f:
         12:d5:41:3e:36:6b:a6:42:e2:99:31:7a:f2:6f:66:75:3c:dc:
         c8:77:81:5a:f7:bb:ee:37:aa:29:df:9c:78:06:c5:8a:9f:fe:
         73:48:65:10:89:ef:ca:69:9a:89:a4:86:26:bb:0f:1b:96:6b:
         32:67:d4:a0:47:88:da:69:da:8d:65:1f:23:cf:39:95:44:96:
         2f:30:82:94:8b:c8:76:71:47:e1:52:56:3b:9c:93:54:09:5e:
         28:9a:9c:dc:c8:ef:74:ee:e2:c2:f1:8a:ee:43:31:56:ae:cb:
         14:30:65:da:7d:4a:f8:12:26:a9:45:ff:8b:ba:aa:c4:24:bf:
         39:5c:46:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 15:47:09 2025 by rpki-client