This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
File:                     ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft (raw, json)
Hash identifier:          40Wia2Si+RS/P7iZuzSASbeGDG3Wvvo+ou041XYu5CI=
Subject key identifier:   2E:92:B2:D9:0C:38:E5:FF:F8:36:56:C0:31:43:9C:84:97:D4:8E:65
Authority key identifier: B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
Certificate issuer:       /CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Certificate serial:       019B3DC7B186943095179C3CCA4A942A5E6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
Manifest number:          065E
Signing time:             Sat 20 Dec 2025 22:00:55 +0000
Manifest this update:     Sat 20 Dec 2025 22:00:55 +0000
Manifest next update:     Sun 21 Dec 2025 22:00:55 +0000
Files and hashes:         1: mgO2bfWYu0Z3yfKtycB0eHY39X8.roa (hash: 60DQx4kpFtDfON86MP27ODodoK2c+Xs/qbF18XYACcg=)
                          2: rg97vUvro1QUCZLNC-zT_PYGVh8.roa (hash: iZBiJSmpj/Q8UocwtFDbOX3xmzAVEyiNjKTvOdI8ZqE=)
                          3: ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl (hash: Q2J4VRFC6v90+AwLAhR8J4Uxc5zikNgkvlprQzr8ILE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 22:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:c7:b1:86:94:30:95:17:9c:3c:ca:4a:94:2a:5e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
        Validity
            Not Before: Dec 20 22:00:55 2025 GMT
            Not After : Dec 21 22:00:55 2025 GMT
        Subject: CN=2e92b2d90c38e5fff83656c031439c8497d48e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4b:5c:78:ab:3f:c1:22:3d:2d:c1:8b:82:c2:
                    7d:00:2d:e0:8a:96:03:2f:38:9d:9f:a3:08:92:35:
                    78:af:ea:8e:82:84:2e:a6:dc:58:2d:ed:54:7b:f5:
                    44:02:2a:5b:6d:f1:da:85:1b:c8:a7:22:97:39:b9:
                    00:f7:9b:8b:cd:f7:65:5b:95:72:52:b5:02:c8:7e:
                    81:cb:4e:47:71:5c:15:c0:02:cc:d2:df:4a:92:c9:
                    e2:46:94:57:55:94:39:4d:2f:cc:33:b5:e5:42:a4:
                    a2:c4:ac:eb:86:86:e0:53:d0:aa:26:2d:4b:5c:7d:
                    1e:f7:3f:07:ea:9e:66:50:d8:c0:2b:ef:ad:48:09:
                    79:e2:5b:e4:e0:29:d9:9b:db:b9:62:05:b1:5c:c2:
                    ad:65:0a:67:d0:c1:d7:ff:f4:21:ad:87:a1:30:56:
                    13:de:de:9f:1c:bc:a3:22:e5:d3:78:6f:27:7a:65:
                    89:c6:59:f6:b1:1c:cf:bb:a5:34:ba:a4:ab:b9:b5:
                    e1:1c:19:33:b2:2f:97:c5:c9:a5:93:aa:df:e9:a3:
                    32:b8:8d:b5:67:4e:85:19:b4:ac:1f:9e:8f:d9:7e:
                    f5:1b:48:c0:a8:5c:44:8b:2d:2c:f0:d5:24:70:67:
                    3a:06:e6:fd:ae:25:1f:33:c3:08:d5:42:fa:4a:81:
                    dd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:92:B2:D9:0C:38:E5:FF:F8:36:56:C0:31:43:9C:84:97:D4:8E:65
            X509v3 Authority Key Identifier:
                keyid:B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:6e:03:9a:6b:ee:4b:bf:67:38:eb:49:d6:3e:65:0f:b5:68:
         60:99:f0:67:13:0b:57:bb:a8:59:3f:20:e2:a0:ac:4b:4e:58:
         30:0e:1f:50:43:3f:7e:ac:7e:57:ab:e8:d5:00:5f:0f:25:7d:
         f6:2c:5e:21:b6:e8:49:3d:8b:c9:84:d8:1d:22:40:95:14:c6:
         fc:e1:b7:45:c0:3a:49:a3:a5:5b:22:9e:e2:6a:95:e0:df:fc:
         83:da:73:28:d1:4d:3b:57:ba:df:24:38:c0:ea:f7:73:33:ef:
         f0:79:4e:12:24:c3:7f:c7:4a:53:5c:49:c6:9c:a4:50:ec:5a:
         12:cc:7c:f1:bb:a0:32:33:34:a0:25:69:f7:03:52:1d:64:a0:
         e2:18:ee:d3:d7:e8:f8:50:f2:f0:a0:57:3a:e3:04:b8:f0:d4:
         c7:98:98:57:c6:3d:e5:8a:12:9a:60:41:05:80:66:0d:eb:e0:
         36:0e:0a:c0:05:c8:c8:18:58:3f:08:03:de:0c:e9:85:bd:3b:
         07:53:40:bd:e2:8a:3a:38:67:dc:49:9e:a4:cc:38:03:af:a5:
         2e:a2:27:80:34:b7:ea:01:a2:9b:54:88:19:fe:39:0b:95:a0:
         f2:20:f4:28:a4:d3:7e:bb:b6:58:84:9e:6d:03:f0:c5:98:a5:
         04:3e:d2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:58:00 2025 by rpki-client