This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File:                     mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier:          vziTDToOqVRCuIdrFDDVVbOV6cdxDHzIoUj+LFbRn54=
Subject key identifier:   78:66:92:A5:08:03:77:94:18:A4:37:C0:5D:CC:D5:C8:3C:7B:90:72
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer:       /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial:       019B3AFDCBC9D8A8AC86FC0B8FB7AFB36E80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number:          178B
Signing time:             Sat 20 Dec 2025 09:01:09 +0000
Manifest this update:     Sat 20 Dec 2025 09:01:09 +0000
Manifest next update:     Sun 21 Dec 2025 09:01:09 +0000
Files and hashes:         1: 4in_MuHKKTofxeC0GNnkZQgqzos.roa (hash: UqmJZKo8HH99QGUUYifQW7Jr1FD5FrWiTWus6JXbUPs=)
                          2: SNHPOOFKUgc1zNBN9wxr7FeAdRs.roa (hash: Hb2HBizkzgimQbuN29+MCl8e5+WlfhI+P1/UM2vwUU0=)
                          3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: bYPWtrkeqov/fCerSkJdKEzVLb/aEVfucr7l2+ipI/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:fd:cb:c9:d8:a8:ac:86:fc:0b:8f:b7:af:b3:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
        Validity
            Not Before: Dec 20 09:01:09 2025 GMT
            Not After : Dec 21 09:01:09 2025 GMT
        Subject: CN=786692a50803779418a437c05dccd5c83c7b9072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fe:6b:05:ba:22:ea:c6:d7:ee:ba:04:09:98:
                    31:31:e3:bc:0e:c4:50:0d:43:a7:0c:70:99:d9:24:
                    7a:3d:56:59:75:e8:6f:58:35:84:f7:11:ca:b2:c7:
                    48:94:3f:92:2f:d2:24:5b:cc:f4:c7:c2:24:0e:b2:
                    80:54:55:1b:09:96:b0:d2:32:4f:2e:cb:8c:cc:d9:
                    fa:f5:0a:13:49:70:7b:b0:f4:ea:3f:3b:48:b6:c1:
                    9c:1c:0f:aa:bb:97:f8:b9:0b:2b:c8:fa:b0:f0:4f:
                    ea:ef:f6:2c:03:04:61:3c:42:2b:f8:08:87:a8:1a:
                    d0:40:ea:26:b1:f8:26:13:eb:4a:ec:27:bc:e4:57:
                    36:55:aa:ec:55:e7:08:fe:27:e6:00:c5:3f:67:00:
                    50:32:eb:a9:ec:ba:a3:cb:1f:7c:52:85:d5:7c:87:
                    b3:a9:40:06:71:e6:61:c8:a0:c7:ea:90:7f:2e:24:
                    f3:e2:6e:a6:28:16:55:c5:90:d5:85:07:79:da:32:
                    94:aa:af:82:d3:9f:74:3d:db:10:91:37:70:5b:1a:
                    f5:c1:40:0c:84:e7:48:8c:71:c3:29:98:32:0a:31:
                    95:d9:90:08:66:34:9a:5b:a2:0c:da:f7:e4:58:c1:
                    ec:b6:8c:12:f3:6e:24:af:74:c0:48:34:51:71:3a:
                    cd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:66:92:A5:08:03:77:94:18:A4:37:C0:5D:CC:D5:C8:3C:7B:90:72
            X509v3 Authority Key Identifier:
                keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e9:be:06:0e:13:75:59:41:23:eb:13:11:4f:6e:af:52:14:
         88:bf:6b:ea:6e:9c:9d:13:84:5e:ed:1e:6e:0c:8d:79:a8:86:
         2f:00:15:70:c4:0d:c2:9c:2f:24:89:4c:41:8f:a2:6a:6f:4e:
         47:f7:f0:a2:83:73:30:83:3b:44:f8:28:68:08:a3:e1:34:c1:
         26:e6:3a:fd:2b:99:92:a0:1d:70:be:4e:18:53:d4:81:96:e7:
         11:15:74:87:73:fe:e8:83:57:d7:4c:f8:0f:a8:91:3c:da:05:
         a7:0f:14:0f:bb:34:76:d9:85:30:31:24:6f:0e:bc:58:74:f7:
         85:b2:a8:33:d9:8b:45:91:47:74:c3:03:97:cd:58:e3:65:68:
         ef:c7:8a:c7:45:25:fa:c2:31:7b:ab:1f:d1:1b:ab:54:7d:b7:
         5c:2c:ef:74:a5:f1:ec:29:85:a0:e2:ea:12:9b:9d:d4:20:c7:
         e9:13:32:16:e5:bf:95:a2:45:8b:7c:40:5f:6d:15:f1:67:2a:
         12:1d:f3:da:a1:75:11:74:60:81:09:18:e9:ca:8f:8d:31:9d:
         fd:9b:38:1a:2f:18:33:5d:d2:e7:0c:23:ab:4a:41:5b:0d:87:
         5f:a2:88:2d:70:ef:c1:70:d0:0c:2c:2d:f8:65:86:0d:f3:31:
         f7:18:3f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:17:31 2025 by rpki-client