This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
File:                     znBIWLZDJm98cQdyHJjyupPdUmU.mft (raw, json)
Hash identifier:          031FDS9mIg4Yc8cDNMk/O4rZFhs162Y+/Ix/eL2jkSo=
Subject key identifier:   80:CE:3D:A8:BA:3E:B6:70:BA:49:5E:D1:EA:06:32:E4:DF:5E:E4:08
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Certificate issuer:       /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial:       019B6DA1618C13D6D97A9386A04C767B779A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
Manifest number:          17A5
Signing time:             Tue 30 Dec 2025 05:00:51 +0000
Manifest this update:     Tue 30 Dec 2025 05:00:51 +0000
Manifest next update:     Wed 31 Dec 2025 05:00:51 +0000
Files and hashes:         1: AlHpyxCGMtfizbttFRiRDBrpWE8.roa (hash: HEta5iZuaZfWfkQQtCG/hwIx007nSp0VAlOWKt9bqno=)
                          2: YnxGCtZHjBins_u7hbvZvkt5GP0.roa (hash: h0irCh3dXAANqMbOKNJ1CMyoogPZbPx+cpJ+hvCcEkU=)
                          3: sCibVmGvlfhOnP7xuISl7fg77mg.roa (hash: zU3gdGka1CEw6yQdMuB6aUaLsTOoMwjYj0HnH6sxIvc=)
                          4: znBIWLZDJm98cQdyHJjyupPdUmU.crl (hash: N+94xrNFf98DkBumeg2BTcg9DQH4HebFMgih52XqCoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 31 Dec 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6d:a1:61:8c:13:d6:d9:7a:93:86:a0:4c:76:7b:77:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
        Validity
            Not Before: Dec 30 05:00:51 2025 GMT
            Not After : Dec 31 05:00:51 2025 GMT
        Subject: CN=80ce3da8ba3eb670ba495ed1ea0632e4df5ee408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:51:2b:e4:42:02:3a:0b:c6:09:7e:5b:5f:d0:
                    77:1c:53:f5:42:23:3a:48:9c:87:9a:fd:6c:3f:60:
                    42:f7:59:47:fc:b0:89:fd:5e:34:77:a8:1a:5c:82:
                    c5:5c:34:ac:a0:4d:00:21:a4:21:12:99:86:3e:c6:
                    54:73:4f:54:e6:f9:c6:d9:b3:1f:96:c8:fa:18:b3:
                    1c:50:ba:0f:dd:8e:89:42:46:97:e7:70:e9:70:8b:
                    9a:50:f1:2e:96:d1:f1:59:a0:c6:e8:52:f1:44:6a:
                    ec:59:30:fc:91:d4:de:3e:ab:69:be:af:2f:bb:bb:
                    7a:78:e8:d5:f6:21:a7:b7:60:39:6f:b5:dc:81:79:
                    94:b0:55:a6:18:6a:0c:ae:f0:7e:f8:f9:65:9b:87:
                    c3:ab:69:2e:c0:4f:9d:81:11:8b:1d:a7:10:f9:35:
                    25:18:cc:34:92:96:2a:60:aa:99:e9:23:dc:57:88:
                    dc:a4:e7:50:91:19:e9:83:02:63:99:8c:11:73:f8:
                    79:46:fd:27:13:be:59:f6:b4:65:9a:16:f3:0c:a5:
                    e1:8e:5a:37:a6:67:94:13:86:f2:e4:4b:9d:ec:57:
                    6c:ba:1b:14:fc:b5:9a:ea:eb:f5:b2:bf:99:29:85:
                    f8:c8:5a:0c:5b:17:bc:cd:41:44:7c:c0:11:6b:c6:
                    8c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CE:3D:A8:BA:3E:B6:70:BA:49:5E:D1:EA:06:32:E4:DF:5E:E4:08
            X509v3 Authority Key Identifier:
                keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:6c:a9:9e:3e:85:46:73:f3:14:cb:f5:05:43:91:81:b0:c9:
         43:6e:45:e1:ea:1a:9b:8a:70:b2:0c:69:f6:b1:65:64:6d:57:
         fa:21:7f:26:d5:64:5f:01:63:84:63:1d:da:f1:c4:90:ff:f3:
         4f:fc:54:d2:a2:d1:bb:b3:8d:9f:3c:a9:ab:ed:1e:23:09:6c:
         ab:9d:f1:92:8f:3d:39:c2:f7:03:2e:94:f1:ec:f9:99:01:64:
         1f:28:cf:50:54:ed:3e:44:4a:d8:28:b5:8c:99:c4:63:11:60:
         40:f9:08:39:6c:14:54:ac:da:fc:2d:1d:a9:00:81:ee:6a:50:
         87:3b:38:7f:1a:5e:75:37:1b:a2:00:9c:a9:e3:3c:6b:2b:50:
         4c:f3:f5:25:f7:c1:94:7d:e9:10:4c:21:c6:92:bb:6b:c7:74:
         f9:2c:c4:2a:f2:e9:35:0b:cf:95:a4:27:0a:73:c9:b9:12:b8:
         7a:b0:da:7a:f6:b9:52:3a:89:dc:49:fd:ea:90:d4:1a:93:60:
         d4:ac:04:09:44:79:73:1b:d0:09:33:3c:66:ff:ca:93:e3:7c:
         03:f2:a6:a7:23:ae:5b:c6:18:26:53:fa:28:cf:e9:ec:7f:be:
         bf:6f:65:54:fe:1d:17:31:25:ab:b2:dd:eb:8e:cd:83:28:9d:
         e6:2b:76:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 07:14:00 2025 by rpki-client