This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
File:                     ZeqT2IogLVHTTSqQNZfna48X8Oo.mft (raw, json)
Hash identifier:          CwiwduCHo5zqYdNwpGydoWVR80SpNpyzdbLUf77fIpI=
Subject key identifier:   7A:3F:7D:E3:0B:8A:A4:E7:17:31:B2:61:B8:86:F8:58:1C:56:97:A6
Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA
Certificate issuer:       /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
Certificate serial:       019B3A588D96A6068D40D08F9FF1F99AE732
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
Manifest number:          01A7
Signing time:             Sat 20 Dec 2025 06:00:40 +0000
Manifest this update:     Sat 20 Dec 2025 06:00:40 +0000
Manifest next update:     Sun 21 Dec 2025 06:00:40 +0000
Files and hashes:         1: I-x_UPcw9sQTN9WaL1gNO5Jv8pU.roa (hash: kQYNPTEIQCpAe0+UIMCFb30JlCdHhzOSGG9E3Bksfn4=)
                          2: No384ukQ7PMzR7ysdXQqiI23V0U.roa (hash: WQHcVAZUYgrUok+kLmgQEzlX1mU+gj90+MGfNi8ZR3g=)
                          3: V4pBXU1PZiQxs_5q_J-RR8u4p6I.roa (hash: eo5F6jAlKraDD9oeFZGJ6cw6s1Keo3V6+IqIlcUTCHA=)
                          4: ZeqT2IogLVHTTSqQNZfna48X8Oo.crl (hash: ibFBWx+EaeSUvLzSrF4arnMc+uJ3D6K86Rvco31E0Vs=)
                          5: ce8LRFwM6wCXX-cKMVilSCLACTA.roa (hash: SjdlAeta3OBEM6FH48Ybj415juI53asPm3ETveUv2Eg=)
                          6: gitklWD7TllTa09uVT2HYtJ2HAc.roa (hash: 4UXSpGqlkDuQDI9lXYLAHQ9HNN6MyyLOEemk6yCC+m8=)
                          7: iI0xJWiiKKg47j1BbOpuFVTDI4Q.roa (hash: yH7jkiJqUFQwZGfRfwZf6K3F352BuafwDzi8n2IlGMk=)
                          8: mSfH0G_iARcbQlaJSIXQlk05LS4.roa (hash: 0FkMJZ2bnxCxc3Hk8tjYTkCS9FPgkLmBQCWnnshE9e0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:58:8d:96:a6:06:8d:40:d0:8f:9f:f1:f9:9a:e7:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
        Validity
            Not Before: Dec 20 06:00:40 2025 GMT
            Not After : Dec 21 06:00:40 2025 GMT
        Subject: CN=7a3f7de30b8aa4e71731b261b886f8581c5697a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:95:81:43:0a:d1:e3:e8:6c:aa:4a:29:f9:37:
                    64:70:76:e7:30:f6:f4:99:81:06:a1:b0:f9:6e:14:
                    20:3a:98:fb:15:55:62:ce:10:3c:bb:91:bf:12:06:
                    53:77:58:e5:3d:d0:01:73:99:9d:90:ad:6a:3b:cf:
                    bd:41:95:a2:e2:c5:0a:93:4e:e1:ec:be:d9:03:42:
                    44:f1:4e:0e:d7:e1:28:2c:8f:52:74:62:3d:fa:66:
                    7e:e9:0b:bf:d8:f1:d1:a5:86:df:bb:9f:1a:80:e6:
                    25:14:3b:e0:31:51:ad:9c:74:20:02:45:32:be:4d:
                    19:d2:24:c1:e2:23:f5:7f:cd:dd:a1:ae:36:f9:5e:
                    a3:98:06:3d:71:e7:1a:8c:c3:f2:d9:76:e8:28:9a:
                    d6:d7:6e:c5:9b:a5:81:d5:b8:b9:41:40:39:86:9a:
                    3e:14:5c:65:6f:95:84:b3:0b:2c:a8:0a:61:81:a3:
                    45:86:18:95:f3:26:3c:8a:c8:b0:26:60:68:37:d1:
                    bb:4a:e0:d3:81:08:1e:3e:67:c4:2c:f7:bf:87:ef:
                    2d:ae:78:fb:3a:ca:d7:4b:e4:c5:31:cf:07:69:bd:
                    46:73:4c:94:c9:22:65:ce:d9:13:ae:3b:78:d7:bd:
                    6c:83:fd:37:62:0b:43:33:11:eb:28:5b:a3:64:01:
                    ce:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3F:7D:E3:0B:8A:A4:E7:17:31:B2:61:B8:86:F8:58:1C:56:97:A6
            X509v3 Authority Key Identifier:
                keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c4:77:c9:87:8e:e0:84:42:84:44:96:fe:31:09:45:2d:0e:
         db:bc:a4:47:cf:03:4c:46:a5:56:36:87:5a:94:24:39:75:a0:
         f9:b1:66:53:08:5c:c2:9e:3c:5e:c9:dd:ac:bc:55:4f:be:c1:
         41:6a:4d:7e:89:ab:2e:09:28:18:8a:d5:9e:7d:98:1c:8f:87:
         38:f8:72:7e:95:3c:d7:a8:ca:23:49:80:6b:69:be:37:54:27:
         47:12:1e:02:2a:53:a6:be:d5:04:a5:73:61:b1:63:45:bb:59:
         c0:ef:01:2b:79:73:72:a9:1b:f5:0c:72:77:05:f5:dd:94:b4:
         09:f8:38:7d:b3:9c:a1:49:b3:7b:9b:dd:5f:5d:9e:ea:8f:70:
         3a:9f:3d:60:68:1c:04:49:fd:82:09:90:47:46:3a:34:18:b6:
         fc:5f:bf:d7:91:9c:0f:c5:0a:28:e8:d5:5c:fe:71:e4:07:08:
         66:26:a5:35:8b:b7:9b:86:73:bf:88:26:9a:05:fe:c3:b7:94:
         4d:1c:5f:a1:73:01:c3:95:2f:25:3d:e4:a2:39:82:d9:f9:35:
         e5:0d:60:6d:e1:a9:2b:4a:c2:0e:d2:22:ea:fc:37:82:68:87:
         da:c2:3c:e5:ef:f0:b0:76:e1:71:1f:77:1c:cd:99:be:ec:0c:
         de:cd:32:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:20:32 2025 by rpki-client