This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
File:                     TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json)
Hash identifier:          y0+Dqb6Sai+Uebyk2xh2gIiE//eDubDO5ZxR6Pc4zq4=
Subject key identifier:   3C:AD:5B:D7:54:2E:B8:94:EA:BB:D2:4C:32:FC:63:5F:AD:A5:1A:47
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Certificate issuer:       /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial:       019B3BD942F2D34F6C2D7450AE1AB0E557F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
Manifest number:          1775
Signing time:             Sat 20 Dec 2025 13:00:52 +0000
Manifest this update:     Sat 20 Dec 2025 13:00:52 +0000
Manifest next update:     Sun 21 Dec 2025 13:00:52 +0000
Files and hashes:         1: 8Wt50oYgSIhV5-nromefXM1xUHs.roa (hash: nonj7X6EJpkPkTZ26/d/JTxCuBr7E4OqIEl5kLX7Uvc=)
                          2: 8_cQRjzqzZHtBUadp-m1RHbfYtA.roa (hash: UqDtwYBpkHo94AcNyXlmGDGQI5vQH42VfJTVEsv7Dqg=)
                          3: KNr8dCxZSv2tLdivt-ye5q6LflE.roa (hash: OddKT0B3adcsA3ke/HzglyeCPb/vcMLtq5FBhRNFDKs=)
                          4: LlXFwn2Cp-oz5_wkoV4hnOjpZhc.roa (hash: b+9t4WdjfYrQBYgVT5TU7qZAYZFFGjvTZY/AWbdEORo=)
                          5: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: ZHIEhlrh9u1+k4jbmRBCPUpOoWrWE2Q0M+N+waCN4R8=)
                          6: qzzHZUBjcSRGFasL_IeeyUOUJ98.roa (hash: Lhbg0pCg1KfB+dSdb+vO645LuzkQlZQdXs3opMNsPwc=)
                          7: uFl9Jbyr6wsOz0RTyXyU1uLpiuQ.roa (hash: IIGP5wcOQKkgCwi0o8TwNvlGqyYDZZaNOwMVkOIQtWw=)
                          8: ugnRmlrkR8TJKKb_eVy88x5cRBU.roa (hash: wA1+l0+3DAminFs23I5vSPrzOSbWOqFz2PTbS6VlnsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:d9:42:f2:d3:4f:6c:2d:74:50:ae:1a:b0:e5:57:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
        Validity
            Not Before: Dec 20 13:00:52 2025 GMT
            Not After : Dec 21 13:00:52 2025 GMT
        Subject: CN=3cad5bd7542eb894eabbd24c32fc635fada51a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:14:6c:d8:fd:97:83:60:b7:32:a2:81:2c:ad:
                    1e:05:fa:18:89:28:75:8c:1c:1f:6d:71:63:f4:3b:
                    83:6b:42:2f:c5:c7:aa:0b:d2:b9:78:db:0a:d3:b8:
                    4d:0f:f5:3d:cf:44:2c:31:d0:92:e9:be:00:58:f0:
                    a3:22:a8:f2:c2:33:a5:02:58:a0:6b:65:4d:87:76:
                    59:33:40:0b:6a:92:5c:5f:4c:46:0f:dc:9c:43:6d:
                    33:36:89:ed:01:d9:75:a1:98:d7:0a:10:61:78:da:
                    c1:3b:21:c4:6d:a9:4a:45:c7:ad:5a:b9:25:e3:a5:
                    f8:db:70:74:d2:8b:0b:49:4b:54:f0:d5:4d:d9:99:
                    ff:24:2c:41:e1:97:f9:d4:04:09:ae:21:ab:b5:e7:
                    2a:ca:59:a9:ce:28:96:d6:d0:28:98:ee:85:32:23:
                    7d:22:cd:2c:30:c1:6c:fb:2c:48:e8:23:ad:61:e7:
                    c1:a2:60:32:51:c9:5a:99:09:05:7e:5a:2f:b8:dc:
                    ba:be:91:c4:d4:e0:d5:dc:88:4c:ea:39:92:69:a2:
                    92:ce:cc:2d:8d:6e:6b:bb:73:d9:cb:04:c8:16:ee:
                    7f:b9:28:7f:b9:57:89:72:34:a7:c7:a8:20:6d:9c:
                    4f:24:4e:ae:51:a3:bf:2f:a2:d4:00:60:f4:46:65:
                    df:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AD:5B:D7:54:2E:B8:94:EA:BB:D2:4C:32:FC:63:5F:AD:A5:1A:47
            X509v3 Authority Key Identifier:
                keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:22:19:24:96:26:b6:32:ba:40:61:99:58:b1:82:9f:7d:be:
         a5:74:72:06:11:1a:23:78:02:06:b5:93:e9:c2:4c:3a:65:71:
         f4:b2:0e:be:2c:7c:9b:95:ed:22:cf:66:ce:02:73:2d:75:d2:
         0d:72:0f:cf:d2:08:2d:0d:a7:38:c2:eb:10:3e:5e:29:63:28:
         57:af:04:ac:a1:a3:ac:88:d0:a1:27:ad:a6:e2:16:d8:01:69:
         d8:3e:b6:fd:bc:eb:3c:0e:2b:65:80:5b:36:85:cb:c5:f7:0f:
         5a:9c:be:68:ab:3c:de:26:25:54:12:d3:ef:9b:22:47:c4:61:
         c2:0d:0e:c4:62:d6:8f:0e:d7:1a:3e:2e:5c:ca:32:32:4e:cd:
         58:2c:c0:7d:b7:ef:cd:82:79:91:56:c5:96:bb:73:39:c3:3d:
         ff:d4:25:53:71:bc:3b:de:95:f0:8e:6b:98:ac:8e:57:24:0e:
         a8:a9:9e:77:24:3a:e7:e7:7c:88:3f:c5:da:bd:2c:45:98:2a:
         de:c3:e6:d6:c4:34:a9:f4:bc:da:f7:42:e8:ff:4a:5f:b1:41:
         22:55:3f:3e:ed:ac:bd:bc:c2:92:9a:f7:b7:96:b3:66:aa:f5:
         58:70:e3:85:bc:ec:d4:5f:52:e7:42:ab:e8:08:fb:25:01:1c:
         89:7f:85:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:33:30 2025 by rpki-client