This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
File:                     Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft (raw, json)
Hash identifier:          z7lx1Jwhfkge5tc128URdkwXes10JEVBjEez7lCm9z0=
Subject key identifier:   F0:FD:AD:69:BD:8E:B0:68:C6:6A:C7:2A:5D:63:2F:29:A8:4E:34:60
Authority key identifier: 67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
Certificate issuer:       /CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Certificate serial:       019B5F77D9FE9216679F4F2A9238A36514F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
Manifest number:          179A
Signing time:             Sat 27 Dec 2025 11:00:48 +0000
Manifest this update:     Sat 27 Dec 2025 11:00:48 +0000
Manifest next update:     Sun 28 Dec 2025 11:00:48 +0000
Files and hashes:         1: Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl (hash: IFFZ2oQxag2XXcNln7FjXMJvyh7kP7LdOylGWA+L+ZE=)
                          2: bhq2oKJsXiAPmHmxil5SZXJs2hk.roa (hash: y1Ce6WtfvZHZo4j+/NRj6oK2WGjHyCLTganiUlBZ6fg=)
                          3: fvEaZhW-GGMhhdbn7EzYzxhTO0Y.roa (hash: PejnUWHJu/zM/xe0xcdnKnBLQ6bQFTtLgmD+7o4mD/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Dec 2025 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5f:77:d9:fe:92:16:67:9f:4f:2a:92:38:a3:65:14:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
        Validity
            Not Before: Dec 27 11:00:48 2025 GMT
            Not After : Dec 28 11:00:48 2025 GMT
        Subject: CN=f0fdad69bd8eb068c66ac72a5d632f29a84e3460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3b:ac:f3:a9:3c:2c:4b:06:76:33:a8:2e:ad:
                    2d:66:f1:da:f7:d2:82:73:0b:49:45:c6:23:32:14:
                    00:00:c8:8b:ec:12:d9:72:cc:f1:b8:37:c7:bc:2b:
                    33:89:b7:c5:f0:ed:52:0e:a3:e0:b5:27:7e:2d:a7:
                    3a:e4:41:9f:0e:2f:29:18:67:08:ec:45:8a:da:bd:
                    c1:6d:69:ef:c3:c0:9f:28:d7:fa:fa:63:fb:13:f7:
                    02:02:fb:8d:91:32:69:ea:2f:57:61:27:f5:a4:13:
                    f8:91:7e:0c:f9:5e:18:56:7a:d9:a8:71:f3:bc:bb:
                    32:f6:f3:ac:e0:2d:d4:54:f2:34:f0:1c:b4:c2:0a:
                    cf:ad:4b:cd:b0:a4:54:5d:48:3a:3d:65:ce:d1:7f:
                    e1:33:ee:60:7c:e8:41:6c:69:d6:d0:46:4d:85:77:
                    e1:1f:c8:f1:24:bc:cf:57:d9:bc:2c:b6:8b:26:4a:
                    c3:1b:7b:ca:51:1f:2c:68:bd:45:14:da:ce:9f:38:
                    58:0f:9c:f6:79:dd:bc:38:b8:71:d2:ae:f8:b9:5e:
                    f9:e2:6d:71:b7:41:56:5e:2b:a0:6f:ca:c0:c6:f4:
                    44:e1:a3:6f:f0:f9:94:8b:61:9f:13:89:7c:3c:1b:
                    40:13:1f:6e:d6:31:02:84:2f:45:26:7e:25:00:2f:
                    6f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FD:AD:69:BD:8E:B0:68:C6:6A:C7:2A:5D:63:2F:29:A8:4E:34:60
            X509v3 Authority Key Identifier:
                keyid:67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ad:d3:ce:0c:e3:e7:44:1a:1d:84:b7:80:6d:19:6b:df:63:
         38:ab:13:85:93:a2:89:e8:a9:31:26:9a:16:8b:b3:b7:28:15:
         2b:7f:6f:49:39:de:66:9c:5a:38:f6:fc:ad:c6:01:39:34:c6:
         9a:69:5c:40:d7:39:5d:92:9b:04:b9:41:be:5f:4b:30:ef:5d:
         b8:51:d7:44:ab:fb:1a:59:e7:7d:c3:46:58:22:17:69:f3:7d:
         47:7a:92:61:d5:dd:6a:6e:a6:88:bd:03:ce:8c:2d:28:15:d5:
         00:4a:2b:ef:25:ac:34:aa:1c:7e:ba:0a:3a:75:ca:63:d9:92:
         b4:d6:ec:a2:85:5a:89:0b:18:63:b0:b3:68:8e:53:42:dd:8d:
         91:6a:a0:0e:0c:2e:a5:2f:d6:7c:d5:5b:56:b2:77:36:39:14:
         7e:90:c1:23:2c:f4:14:85:6e:d0:61:69:08:a3:2c:d5:bd:ad:
         cd:1d:e9:fa:86:fe:65:c0:22:42:7f:61:56:1f:46:cb:c2:4e:
         ac:7e:e1:60:f1:cd:4a:15:d1:4f:b9:ee:15:2a:0c:1d:25:12:
         46:0b:67:0c:fe:e2:6a:c3:5b:b5:be:a6:0f:f2:93:5f:96:8f:
         29:16:89:9d:d7:3b:8f:50:00:cc:c8:48:b9:7a:f7:f3:43:7e:
         d3:5a:a6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 19:27:50 2025 by rpki-client