This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
File:                     ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json)
Hash identifier:          tBu/PIS3F8U2DZ29VoKHGNLcWrzEsxjA7RNz5Qi3epc=
Subject key identifier:   75:22:00:7C:CC:1E:D2:0E:64:C0:9D:5C:92:21:04:39:4A:15:7B:BF
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Certificate issuer:       /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial:       019B390F2397EAE890EF9E0D83FCFF825925
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
Manifest number:          179A
Signing time:             Sat 20 Dec 2025 00:00:51 +0000
Manifest this update:     Sat 20 Dec 2025 00:00:51 +0000
Manifest next update:     Sun 21 Dec 2025 00:00:51 +0000
Files and hashes:         1: 1-mklDANMVJEiPmpBlxf2QE7U4xQ.roa (hash: nYcrxIcojCmllQ6KA3duBQeqM8wo1N5ldpzqFh4IADM=)
                          2: 1eb_RUUKl1wArkM4nQrNO8o6zA4.roa (hash: DnRX9ewfVK8qHRMwGypJDg5WY6eKWtJUTgSgVVUpaxk=)
                          3: 6jIK36Mhaa4Xbj7P1Zh2U_58p-M.roa (hash: U9tg2SAso4TZBWfhZ8a+7jSfIjc4dzku6E3DThi6OYI=)
                          4: GFllu8yCEzYxH4Ih5x02DmBd6d8.roa (hash: MMmyezgzI9GjhXg9IrhVD+9c+IgYTInaNbVAzHZN2q0=)
                          5: MrukXcFUqEow256KAYyeIYLRZog.roa (hash: XtBjKt0dD05c3nHn8KPQ936/hM8bld6aPmDpQ0/ANLw=)
                          6: QbMBVnYbFFojOFc196F2jGwUv80.roa (hash: PfefSPZEQEk15+9V5/IwtgSWUTKXs+bmANRjvJwpNgo=)
                          7: WpJJ_ikBuc-Y0bGUJcEnqRT8GwE.roa (hash: F2+S7SjwnB98jayV0ovfpTJ0OhWt8ofMSB+zMRafvPU=)
                          8: X-Wp2GdoJeyJqzlvdHdTYBcZFbQ.roa (hash: a4lrtqUDOD2jEGfmKJYDLSW6SifymwRthtLHwdcAY4w=)
                          9: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: D7Oc8q3sR3tWYIwa92u4MwF9F27ppAxiFbVLDlZFUTI=)
                          10: i4fVJ23Gnd_yPkuF6n29x3RRNtE.roa (hash: b9PLNQP5kOz4vbwmAcKMWxEW3G7VlFSo/at2gpQ0dIE=)
                          11: pghJNCWH2c3hSWAmOWfyoPTaVCo.roa (hash: 3MgIR2t5YYsTlUp3+6FJ07pdXvIG9/iFEZ56WzoCufA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 00:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:0f:23:97:ea:e8:90:ef:9e:0d:83:fc:ff:82:59:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
        Validity
            Not Before: Dec 20 00:00:51 2025 GMT
            Not After : Dec 21 00:00:51 2025 GMT
        Subject: CN=7522007ccc1ed20e64c09d5c922104394a157bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:74:3e:41:15:14:88:17:b0:cc:df:60:2f:ec:
                    a5:e8:f2:fc:7b:3b:8e:a2:87:01:b5:2f:f8:a4:89:
                    44:8e:9f:95:15:29:59:96:27:fc:72:b3:2b:62:70:
                    62:7f:4c:b2:41:4b:11:e0:b1:4e:a9:65:0f:d6:ec:
                    db:30:ab:e2:32:d1:56:4b:be:f0:dc:98:3e:b3:e2:
                    aa:f3:31:2d:5a:23:a5:2a:ac:ac:e9:eb:b1:f6:cf:
                    e4:4c:95:ef:5a:0b:53:ec:49:80:1b:ac:80:a2:c8:
                    ec:9b:6e:f6:2a:a6:a9:05:c3:db:8e:88:62:b7:8b:
                    26:26:57:f9:89:4e:3d:9b:43:45:d6:af:ca:ba:22:
                    8e:24:cb:fb:9b:e6:a6:82:e6:58:f0:5b:db:5d:4c:
                    36:48:f6:62:f8:66:7a:47:2a:d7:cc:4b:e8:ab:6a:
                    45:6b:99:20:bf:ce:00:4b:3e:05:b2:d5:3a:c7:58:
                    b8:15:fd:11:ad:85:91:85:57:e8:b7:ef:f9:87:89:
                    86:30:62:a1:56:43:96:d1:ef:2c:ca:c4:e0:ef:93:
                    1e:6e:51:c1:44:23:36:f4:50:ed:5a:68:8b:c4:b5:
                    63:2d:ec:eb:22:71:f8:48:9e:00:c0:6b:15:f0:39:
                    70:b5:f4:e2:8a:5f:bc:06:34:37:4d:ae:84:a9:ea:
                    28:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:22:00:7C:CC:1E:D2:0E:64:C0:9D:5C:92:21:04:39:4A:15:7B:BF
            X509v3 Authority Key Identifier:
                keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:32:e1:ca:78:f4:c7:36:82:8d:2c:b0:c4:72:19:51:65:9b:
         7c:88:a7:17:3b:b5:0d:2e:dc:3b:f3:36:5c:6a:93:06:59:c2:
         48:74:64:6c:16:25:14:27:2f:78:d3:95:00:34:90:3c:85:2d:
         2d:d5:f6:29:9f:83:96:a5:14:7a:5d:13:ea:4e:e6:46:8d:05:
         24:77:46:9a:02:b7:55:a3:92:61:eb:bb:af:ff:45:8b:a2:c8:
         bf:50:ca:2d:27:1e:a6:26:1d:b5:e3:55:38:97:0d:55:ab:b7:
         15:b4:23:56:73:95:75:57:fb:05:c2:5e:45:ba:a9:4c:19:22:
         b4:a2:c4:59:0c:62:24:da:6c:2d:f1:5b:55:a5:99:af:89:f3:
         6a:16:ca:ab:9d:7c:f7:e5:12:0c:ac:08:b4:61:f8:d4:df:46:
         b5:38:8a:79:51:df:f3:04:fd:e1:7f:c6:c2:a9:63:00:3c:bd:
         27:eb:2d:87:d6:08:e3:1c:40:11:27:05:c7:93:42:9c:f7:09:
         19:40:4d:4f:fe:21:07:6b:88:e7:7e:20:05:3a:53:cf:58:ac:
         04:55:f1:58:8e:c3:59:5e:48:77:7a:96:ef:e4:24:94:83:d3:
         7a:94:18:99:f9:85:7e:2f:d0:9e:68:f3:1b:90:e2:46:ec:57:
         1a:27:ae:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:30:54 2025 by rpki-client