This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
File:                     znys-nNc7q_dKiFMCe5yRpQlJQ4.mft (raw, json)
Hash identifier:          p980tzaUBdf2aeQ5/8SWCze3Rryr7DGO2sVMo0rSlgw=
Subject key identifier:   46:67:32:4F:08:CD:CA:54:5B:B8:ED:CD:F9:64:07:D9:E7:AD:6B:4C
Authority key identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
Certificate issuer:       /CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Certificate serial:       019B37206B4D201615EACF195613CE65AAEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
Manifest number:          07CC
Signing time:             Fri 19 Dec 2025 15:00:30 +0000
Manifest this update:     Fri 19 Dec 2025 15:00:30 +0000
Manifest next update:     Sat 20 Dec 2025 15:00:30 +0000
Files and hashes:         1: 0KTmbSRfcRK8-n1qcmKR418DNUs.roa (hash: P50v6XitnoLdzzBD57fVGVtkTs/as999tNUAveVrHNg=)
                          2: SBa7BiJFT-mIs1J1piv1ATsLy8Y.roa (hash: IPgzHNDHbety+MkOooZgTafgMRF/usWyWiKxf6WdA3E=)
                          3: dd3Agc5TCDHtIQ62hjbQNZkWxY4.roa (hash: yPBeMJO0RoRNX6fs06ij/fwJ13bpNgiBqfocAHDtu4U=)
                          4: znys-nNc7q_dKiFMCe5yRpQlJQ4.crl (hash: IkKU5dnE9T6wp6dSI8f3h4/acXrWEFzQP3BZ8t2jbP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 15:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:20:6b:4d:20:16:15:ea:cf:19:56:13:ce:65:aa:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
        Validity
            Not Before: Dec 19 15:00:30 2025 GMT
            Not After : Dec 20 15:00:30 2025 GMT
        Subject: CN=4667324f08cdca545bb8edcdf96407d9e7ad6b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e4:4c:8a:f7:55:32:5c:7d:4b:03:94:d3:94:
                    98:79:39:5b:c2:e5:32:b0:83:6f:d0:88:7d:7a:e5:
                    a1:76:d5:7b:12:4c:dc:22:e6:ad:0c:ef:29:49:a7:
                    77:89:4f:de:e8:4f:65:06:a4:4c:3c:b2:3b:73:22:
                    dd:f1:f6:2a:e2:41:23:9b:04:84:c4:cd:d3:19:25:
                    fa:a4:21:90:53:be:58:b2:56:a8:9f:8e:43:f4:08:
                    ab:ce:59:94:8a:2a:59:b7:f7:9b:8a:75:bc:5c:c6:
                    63:5b:07:63:83:10:8f:ca:44:a8:59:e2:e9:56:b4:
                    d4:ca:1a:96:73:f0:86:93:5f:29:2d:7e:f9:74:8f:
                    0e:1c:78:ce:84:ca:38:a3:e4:c9:6a:aa:07:69:3a:
                    03:a2:52:e8:27:56:4b:1a:2c:7d:c1:03:4c:fd:38:
                    98:5c:37:27:99:91:52:14:b9:a5:40:d7:29:e9:99:
                    39:23:aa:e3:92:dd:ca:64:aa:b2:11:c4:87:16:5c:
                    30:fb:d8:f2:fa:38:98:27:69:74:af:fd:aa:95:ff:
                    21:02:c9:dd:8a:e6:a4:cf:b0:a1:f1:89:65:b2:e1:
                    5c:be:76:6b:9a:8a:4b:3f:59:8c:ab:fe:e9:ae:03:
                    dc:35:cd:51:f9:74:e9:44:44:91:19:f4:5d:87:11:
                    d3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:67:32:4F:08:CD:CA:54:5B:B8:ED:CD:F9:64:07:D9:E7:AD:6B:4C
            X509v3 Authority Key Identifier:
                keyid:CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:13:69:a7:91:b4:11:18:47:d0:6b:c0:56:f0:5d:40:ce:ff:
         6e:5e:b4:3d:3b:6f:07:e8:22:b6:50:99:44:55:c9:0c:41:c7:
         2a:a0:3a:09:b6:18:45:87:b1:5a:15:66:48:79:2b:b2:29:38:
         82:5a:47:8c:4b:ba:52:2b:78:9a:b2:f2:39:2e:63:25:49:91:
         d2:d5:2e:38:bd:6f:41:b3:5f:fc:63:16:13:a8:15:45:bc:f1:
         58:cf:39:e7:0e:14:71:44:96:48:f9:b2:18:4e:85:dd:c1:af:
         6d:30:38:d5:6a:db:e2:21:86:cf:4a:12:55:ad:2b:50:6e:06:
         5e:08:5c:04:1b:e4:a7:66:04:a9:17:0f:36:f2:98:ee:94:06:
         74:1c:ca:4f:a4:0e:6f:be:fc:52:26:04:34:1a:5b:5e:e4:cc:
         aa:d0:4f:db:45:2a:c4:b4:c5:c0:d6:9e:df:70:e0:f5:7a:bf:
         c9:49:85:a4:9c:1d:61:01:75:fb:83:a4:48:0e:f9:a6:d1:7f:
         83:70:ee:1b:0a:6f:7c:09:f0:ad:6c:92:6d:b8:4e:3b:9c:58:
         14:1b:0e:15:ae:de:9b:a7:e2:83:09:b1:6b:7a:05:a1:61:7c:
         8b:52:48:48:1d:59:63:e1:06:f8:19:14:88:52:3a:7e:8a:1e:
         d8:78:da:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:31:40 2025 by rpki-client