This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
File:                     g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft (raw, json)
Hash identifier:          z5DgaJ7cTxCSPPKBWBw94bOL5dixnxx10fbeDcm9BO8=
Subject key identifier:   EA:FD:F8:F4:A8:A6:9E:7F:3B:6F:05:43:5F:CD:3D:4F:49:FA:32:93
Authority key identifier: 83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
Certificate issuer:       /CN=83bce35561f541bda97e777e6879a1d704e7b42f
Certificate serial:       019B4C95F7F61135F638CB96ADE3DD02F73A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
Manifest number:          142A
Signing time:             Tue 23 Dec 2025 19:00:55 +0000
Manifest this update:     Tue 23 Dec 2025 19:00:55 +0000
Manifest next update:     Wed 24 Dec 2025 19:00:55 +0000
Files and hashes:         1: O_Wh7DXILbeq2pJ7lbo670WPHcI.roa (hash: 9coM5+TGNwqDkXBfhIBTqYZ9wRzRhg/kPk42ppbDqL4=)
                          2: g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl (hash: MJJzwGQXEv4MV51fBg1bdhBYYeo6KffD0I8oG+4imW8=)
                          3: wurW9HScl5J6v9_HgJ6iitJiiYY.roa (hash: M+hjHy8mpb8e2lyHR4XP7A/L1pzrBL572LaM0RnZ+tY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 19:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4c:95:f7:f6:11:35:f6:38:cb:96:ad:e3:dd:02:f7:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83bce35561f541bda97e777e6879a1d704e7b42f
        Validity
            Not Before: Dec 23 19:00:55 2025 GMT
            Not After : Dec 24 19:00:55 2025 GMT
        Subject: CN=eafdf8f4a8a69e7f3b6f05435fcd3d4f49fa3293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cc:a1:e6:3f:61:76:36:ea:78:ce:8f:6b:90:
                    9b:45:44:9d:c1:4c:07:ac:ab:c8:d8:e9:76:8c:c2:
                    1f:1a:30:14:eb:2e:86:a4:40:e2:03:01:c2:5b:a9:
                    f3:6e:9f:56:8c:b0:1e:f3:fd:59:01:9a:d7:4f:f7:
                    74:b2:90:46:78:95:2d:d9:4f:53:e5:49:10:a7:e4:
                    a1:f8:4f:68:e3:6e:fc:47:ee:b4:0d:26:d6:c0:7d:
                    a9:e3:03:56:1b:8e:20:72:27:15:2c:38:6c:df:7d:
                    a1:26:86:bd:a4:2e:f4:aa:b7:3b:88:6a:2f:38:44:
                    79:c9:d6:d2:04:96:0a:12:3d:c8:89:60:56:76:fc:
                    16:ad:1c:0d:c5:36:27:7e:29:ed:64:fa:9f:16:d5:
                    d1:62:71:9a:98:77:7f:31:ec:80:2a:f1:75:7e:e6:
                    89:c9:fc:00:b6:4b:cc:d4:91:09:03:e9:b5:d8:6c:
                    03:ad:f8:02:78:ed:66:df:9f:52:e1:ce:08:5b:ef:
                    06:f2:e2:ca:6e:13:83:15:00:9c:c3:bf:bd:9d:8a:
                    bc:fc:6b:a6:8d:67:d0:58:85:fd:d2:e9:9a:eb:5f:
                    f9:a0:07:db:c5:cf:c0:07:e7:65:b3:e7:c8:4e:47:
                    1e:a2:45:06:cd:e8:ef:f3:15:f3:dc:5b:22:2e:e2:
                    00:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FD:F8:F4:A8:A6:9E:7F:3B:6F:05:43:5F:CD:3D:4F:49:FA:32:93
            X509v3 Authority Key Identifier:
                keyid:83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:98:8f:87:82:cf:3e:b9:4b:a4:70:ca:b4:85:c3:ce:ed:7e:
         9a:11:77:fa:f8:4e:1f:3a:44:da:44:5e:54:7b:36:a0:2b:f5:
         d0:ef:0e:77:11:f1:90:f6:d7:8e:33:f6:7b:61:e5:e6:bd:39:
         b3:58:2e:4c:8c:9f:c5:f7:7a:a7:4b:ef:24:eb:55:76:bc:57:
         54:ba:e7:41:0b:21:9b:f2:02:a4:4d:73:60:0b:ca:b0:df:a1:
         1e:39:5f:ab:f7:3b:3f:c8:46:f8:cd:57:62:6c:67:55:cf:12:
         e4:e3:2e:da:9f:8a:d5:bb:0b:9d:19:bf:2b:25:9a:ee:53:c4:
         38:d1:c1:99:b7:be:77:5d:c5:fa:45:ad:5a:3f:6f:d1:74:06:
         b3:8c:e6:95:84:b7:c7:2b:ba:66:b0:80:0d:a6:a4:fa:01:f7:
         e8:83:5d:40:53:60:90:bc:5e:70:b2:30:51:c7:0b:19:3b:2f:
         da:5d:5b:f6:ff:af:88:4a:2e:2b:cd:9b:98:21:33:49:58:9d:
         fb:06:42:e7:c1:4a:a0:cb:db:40:e2:dc:b3:bf:30:96:07:ac:
         6d:66:c9:84:a9:d5:0a:27:a7:81:ce:79:9a:26:51:5c:7d:10:
         9f:b6:80:56:e5:c1:06:3a:8e:a9:3d:14:7e:47:39:92:ad:2d:
         cb:56:b3:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtMlff2ETX2OMuWrePdAvc6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYmNlMzU1NjFmNTQxYmRhOTdlNzc3ZTY4NzlhMWQ3MDRl
N2I0MmYwHhcNMjUxMjIzMTkwMDU1WhcNMjUxMjI0MTkwMDU1WjAzMTEwLwYDVQQD
EyhlYWZkZjhmNGE4YTY5ZTdmM2I2ZjA1NDM1ZmNkM2Q0ZjQ5ZmEzMjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsyh5j9hdjbqeM6Pa5CbRUSdwUwH
rKvI2Ol2jMIfGjAU6y6GpEDiAwHCW6nzbp9WjLAe8/1ZAZrXT/d0spBGeJUt2U9T
5UkQp+Sh+E9o4278R+60DSbWwH2p4wNWG44gcicVLDhs332hJoa9pC70qrc7iGov
OER5ydbSBJYKEj3IiWBWdvwWrRwNxTYnfintZPqfFtXRYnGamHd/MeyAKvF1fuaJ
yfwAtkvM1JEJA+m12GwDrfgCeO1m359S4c4IW+8G8uLKbhODFQCcw7+9nYq8/Gum
jWfQWIX90uma61/5oAfbxc/AB+dls+fITkceokUGzejv8xXz3FsiLuIAIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOr9+PSopp5/O28FQ1/NPU9J+jKTMB8GA1UdIwQY
MBaAFIO841Vh9UG9qX53fmh5odcE57QvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzd6alZXSDFRYjJwZm5kLWFIbWgxd1RudEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zNTA2NGItN2E1YS00Yzc0LTg3NDMt
ZmQ4NjYwYzRmZDZlLzEvZzd6alZXSDFRYjJwZm5kLWFIbWgxd1RudEM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zNTA2NGItN2E1YS00Yzc0LTg3NDMtZmQ4NjYwYzRmZDZl
LzEvZzd6alZXSDFRYjJwZm5kLWFIbWgxd1RudEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJiPh4LP
PrlLpHDKtIXDzu1+mhF3+vhOHzpE2kReVHs2oCv10O8OdxHxkPbXjjP2e2Hl5r05
s1guTIyfxfd6p0vvJOtVdrxXVLrnQQshm/ICpE1zYAvKsN+hHjlfq/c7P8hG+M1X
YmxnVc8S5OMu2p+K1bsLnRm/KyWa7lPEONHBmbe+d13F+kWtWj9v0XQGs4zmlYS3
xyu6ZrCADaak+gH36INdQFNgkLxecLIwUccLGTsv2l1b9v+viEouK82bmCEzSVid
+wZC58FKoMvbQOLcs78wlgesbWbJhKnVCiengc55miZRXH0Qn7aAVuXBBjqOqT0U
fkc5kq0ty1azTw==
-----END CERTIFICATE-----
Generated at Wed Dec 24 03:03:09 2025 by rpki-client