This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft
File:                     pLZmyw5UlhFut65nFNkFUwm6aaw.mft (raw, json)
Hash identifier:          efVoAXLenLkd3m7rcuiX3oGRkZnlRW1VM6KhCS44fwk=
Subject key identifier:   A2:F8:F2:E6:57:8E:3F:C4:4E:F8:28:34:94:BF:19:ED:D9:31:F4:F6
Authority key identifier: A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC
Certificate issuer:       /CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
Certificate serial:       019B1C4E854D4873D2B5E2CCCD61652DD0D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft
Manifest number:          16D0
Signing time:             Sun 14 Dec 2025 10:01:06 +0000
Manifest this update:     Sun 14 Dec 2025 10:01:06 +0000
Manifest next update:     Mon 15 Dec 2025 10:01:06 +0000
Files and hashes:         1: 1O6glI2J2K4CEfuTTXBO1vPcs9w.roa (hash: lezbWuEr+xxfjQ7K9R9BpiVCkdmnmto7Hh0jNYxUOOU=)
                          2: BZYwSHkSU1KLWpbHc8NjRQbLSb8.roa (hash: dhnOSGwwFwvObL8RZcLi9yQu3vNONDGpXOnywWVyiUg=)
                          3: LAaUd0NVNQpIHaZR5SUI6LgA7Gg.roa (hash: 5+5FAzOXQkcdtdzGOCWdlxMwXUctAKUK6y8PfDSvH9Q=)
                          4: pLZmyw5UlhFut65nFNkFUwm6aaw.crl (hash: uDB2Ctt6YlKZhYDM1rxp/syfn3fH6QSQwiDgp47MFDU=)
                          5: pwv5QI-H4M6f8xqRbONZQS_upNs.roa (hash: MTYzagqMIxomjqD/t1bUXqZqEQSCcmHou8AqaJZXYe0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 10:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1c:4e:85:4d:48:73:d2:b5:e2:cc:cd:61:65:2d:d0:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
        Validity
            Not Before: Dec 14 10:01:06 2025 GMT
            Not After : Dec 15 10:01:06 2025 GMT
        Subject: CN=a2f8f2e6578e3fc44ef8283494bf19edd931f4f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e8:d2:37:8b:54:a9:db:81:7d:30:64:b3:f2:
                    46:63:0e:23:47:55:fe:2c:3e:fb:e9:69:85:cf:b4:
                    fa:df:da:c3:27:13:36:a8:1d:0b:c6:f0:13:9e:85:
                    c3:89:35:0a:e3:4d:3c:aa:a5:e4:1c:e3:52:34:03:
                    00:16:94:6e:46:1d:a9:bc:1d:ee:eb:a3:7b:38:ca:
                    1d:07:53:aa:4b:ae:74:b2:ea:f9:26:a7:51:cb:e2:
                    f0:ab:98:33:0e:a2:bd:fa:d6:90:ee:18:62:11:b5:
                    b8:af:0e:04:6b:9d:58:b9:80:99:48:e2:4a:4e:16:
                    28:3e:04:61:b9:8e:a2:17:b2:81:c8:00:16:a8:72:
                    ba:88:7c:7c:a2:97:13:34:e2:28:82:50:81:dc:ed:
                    3d:59:20:1d:09:5e:20:7e:b8:2d:6d:ce:ac:36:1a:
                    44:4a:53:75:21:67:38:81:5a:12:52:90:6e:50:76:
                    a7:72:d5:8d:2f:c4:e8:87:cf:9c:7c:9c:5c:43:88:
                    66:a8:70:5a:88:c4:76:b4:26:d8:22:50:54:25:dd:
                    ca:cf:19:8d:0c:31:13:d9:d9:ab:0f:b5:08:de:e1:
                    46:c1:4e:8b:9b:3a:ad:b0:b8:14:5f:e0:23:a0:d9:
                    47:ac:bb:3a:6f:8b:72:4c:62:bf:45:30:6a:ab:42:
                    eb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F8:F2:E6:57:8E:3F:C4:4E:F8:28:34:94:BF:19:ED:D9:31:F4:F6
            X509v3 Authority Key Identifier:
                keyid:A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:8d:25:52:b8:36:ed:fb:1c:5e:88:6c:d8:dd:34:86:d0:0b:
         01:c6:53:89:67:fc:a8:06:b5:e8:dd:eb:c5:2c:72:c5:82:1c:
         90:40:a0:ab:f1:25:bc:f4:fa:c4:fd:4e:95:be:3e:d0:11:87:
         3d:05:38:83:f8:b7:21:1a:ff:77:1b:1e:55:60:50:19:db:b7:
         51:4c:56:de:21:8e:ee:79:e9:3b:1a:df:a1:2c:ca:e0:8e:47:
         3f:ef:03:82:26:78:c8:0a:c6:fb:d3:e2:16:ac:f7:ef:72:97:
         08:ab:5d:f2:27:2a:90:c9:00:ff:ef:90:a3:16:df:72:17:87:
         d0:cf:55:57:43:02:21:c9:53:dc:bc:ff:2f:44:c6:e2:f3:78:
         3a:74:a8:13:ae:71:ab:d5:e3:d1:9f:5d:af:d3:0f:b8:dc:c3:
         db:ef:bf:a9:d4:c3:62:41:cf:9b:ae:a5:c6:5d:03:f7:27:ca:
         5f:8e:5e:31:93:33:43:27:18:d2:38:73:83:26:63:17:ad:8d:
         b7:96:3c:1c:68:4f:a2:d6:49:79:e0:14:dd:e8:45:f0:5b:62:
         fb:a4:24:b0:36:3b:d7:0e:e5:f2:da:57:b9:1d:00:70:6b:9d:
         2d:37:04:9e:bc:7b:43:eb:90:61:f4:e1:28:9f:a2:5b:2f:40:
         62:f4:9f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 17:31:31 2025 by rpki-client