This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
File:                     ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft (raw, json)
Hash identifier:          auZRBAD+W521bK5mreE/5t4WGAB6XKO5P6cn37+L8Wg=
Subject key identifier:   E6:62:C5:97:A6:4D:ED:3C:B1:A0:18:B6:98:39:E6:33:E7:D5:A0:B4
Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
Certificate issuer:       /CN=64e7553292af595426ee1d7dc919a2104894752b
Certificate serial:       019B1201959E1CCA489C6A9298829E6E7EC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
Manifest number:          1772
Signing time:             Fri 12 Dec 2025 10:00:52 +0000
Manifest this update:     Fri 12 Dec 2025 10:00:52 +0000
Manifest next update:     Sat 13 Dec 2025 10:00:52 +0000
Files and hashes:         1: 2lhRfHkMgHjBgOEI871xwfstUps.roa (hash: pS6P1vzgUypkZeUsuXFw4LKxiNYTX5RfnQUo/ctpKhE=)
                          2: ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl (hash: 2VhGsqpDdDt+IdKP/6njgSxGJrVtDJrKXrxUOzN7kco=)
                          3: uZvIw4DMtYOiY7JlOgb63vTUcZI.roa (hash: g2eHsXH9Y/MXPOSVAzGV6O9aHOUSDc6gHQknS8yIWx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:12:01:95:9e:1c:ca:48:9c:6a:92:98:82:9e:6e:7e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b
        Validity
            Not Before: Dec 12 10:00:52 2025 GMT
            Not After : Dec 13 10:00:52 2025 GMT
        Subject: CN=e662c597a64ded3cb1a018b69839e633e7d5a0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e1:b5:4d:b9:7e:f8:c0:49:58:fc:95:a4:45:
                    c2:86:94:a9:b3:d3:cf:74:7e:6b:64:4b:5d:99:14:
                    49:49:d9:7e:4c:52:62:c5:10:6c:ff:22:74:88:9b:
                    78:71:ad:4c:02:82:23:88:fe:60:89:dc:2e:34:23:
                    d9:84:75:ca:1f:81:be:9a:8c:9f:9b:e5:ba:87:2d:
                    07:91:58:08:60:2a:ad:53:fb:f7:d3:ba:76:74:4e:
                    06:a5:b9:ed:05:31:c0:10:4d:34:dd:1d:64:60:66:
                    f5:2a:9c:b6:83:98:d5:fd:3b:db:74:f1:de:e1:90:
                    3f:49:5b:70:21:51:b2:3a:b3:b8:8a:1a:50:6d:23:
                    fa:f9:22:5b:f2:a6:8c:0c:76:1c:65:f2:9f:62:8b:
                    fd:69:bf:82:25:65:9c:7e:4f:42:9a:f7:50:cd:65:
                    ba:27:24:08:02:02:38:c7:60:5e:6f:24:c3:f1:4e:
                    1c:ef:84:e4:79:09:ac:12:dc:42:7f:12:bc:55:68:
                    a7:92:98:c8:e0:cd:0d:94:47:d2:1c:26:0e:9d:aa:
                    2a:33:af:53:70:b6:65:73:fb:29:7d:24:29:01:82:
                    58:8d:38:dd:88:34:a0:74:7f:04:4f:85:0b:e7:15:
                    7a:21:4b:4a:96:bb:89:be:a8:ee:df:a6:33:08:e6:
                    dc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:62:C5:97:A6:4D:ED:3C:B1:A0:18:B6:98:39:E6:33:E7:D5:A0:B4
            X509v3 Authority Key Identifier:
                keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:5e:95:ba:94:c1:86:37:95:6e:de:96:2c:0e:bb:ac:44:df:
         5c:38:c0:46:34:f0:58:ac:8c:89:29:b3:11:bb:61:e9:93:06:
         51:e0:35:93:f7:a3:7f:8c:f6:de:13:0c:a7:70:ab:4b:4a:ea:
         ea:48:4a:26:9a:2f:56:4c:b3:14:53:39:63:fa:f9:5d:83:69:
         34:dc:6a:d7:ab:b4:85:60:f9:25:fb:8d:b1:5a:95:5b:6b:fb:
         33:ae:b2:bb:b6:f2:7b:8b:2d:e1:65:fd:03:27:7c:31:b5:af:
         0f:25:53:0f:ae:24:ee:70:b2:17:18:90:db:32:c4:c5:df:f0:
         57:3e:25:d3:81:50:6f:e8:42:c1:5e:92:e4:50:35:03:26:ef:
         da:69:ee:58:33:7f:ca:33:1e:0e:1b:04:d4:a2:83:e1:6c:be:
         ce:98:68:af:67:eb:08:43:c7:2d:e2:58:e7:2d:4c:54:c2:10:
         99:cc:32:e8:96:fa:30:35:77:ce:0a:96:4b:77:27:c9:72:26:
         09:3c:3b:6f:f0:4c:da:c4:57:cb:4e:64:3a:52:97:b8:ee:81:
         b4:1b:79:6a:32:a7:af:31:d2:b4:c0:21:c6:e2:ff:07:92:1b:
         76:f2:9a:50:74:5d:42:a7:4f:bf:cb:2d:f9:a8:65:c6:72:73:
         cb:2e:66:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsSAZWeHMpInGqSmIKebn7GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZTc1NTMyOTJhZjU5NTQyNmVlMWQ3ZGM5MTlhMjEwNDg5
NDc1MmIwHhcNMjUxMjEyMTAwMDUyWhcNMjUxMjEzMTAwMDUyWjAzMTEwLwYDVQQD
EyhlNjYyYzU5N2E2NGRlZDNjYjFhMDE4YjY5ODM5ZTYzM2U3ZDVhMGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOG1Tbl++MBJWPyVpEXChpSps9PP
dH5rZEtdmRRJSdl+TFJixRBs/yJ0iJt4ca1MAoIjiP5gidwuNCPZhHXKH4G+moyf
m+W6hy0HkVgIYCqtU/v307p2dE4GpbntBTHAEE003R1kYGb1Kpy2g5jV/TvbdPHe
4ZA/SVtwIVGyOrO4ihpQbSP6+SJb8qaMDHYcZfKfYov9ab+CJWWcfk9CmvdQzWW6
JyQIAgI4x2BebyTD8U4c74TkeQmsEtxCfxK8VWinkpjI4M0NlEfSHCYOnaoqM69T
cLZlc/spfSQpAYJYjTjdiDSgdH8ET4UL5xV6IUtKlruJvqju36YzCObc+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZixZemTe08saAYtpg55jPn1aC0MB8GA1UdIwQY
MBaAFGTnVTKSr1lUJu4dfckZohBIlHUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk9kVk1wS3ZXVlFtN2gxOXlSbWlFRWlVZFNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lNjZhNTctNjVlZi00NjQ0LThmNTAt
YzE0ZmFmNDNiZTE0LzEvWk9kVk1wS3ZXVlFtN2gxOXlSbWlFRWlVZFNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lNjZhNTctNjVlZi00NjQ0LThmNTAtYzE0ZmFmNDNiZTE0
LzEvWk9kVk1wS3ZXVlFtN2gxOXlSbWlFRWlVZFNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASl6VupTB
hjeVbt6WLA67rETfXDjARjTwWKyMiSmzEbth6ZMGUeA1k/ejf4z23hMMp3CrS0rq
6khKJpovVkyzFFM5Y/r5XYNpNNxq16u0hWD5JfuNsVqVW2v7M66yu7bye4st4WX9
Ayd8MbWvDyVTD64k7nCyFxiQ2zLExd/wVz4l04FQb+hCwV6S5FA1Aybv2mnuWDN/
yjMeDhsE1KKD4Wy+zphor2frCEPHLeJY5y1MVMIQmcwy6Jb6MDV3zgqWS3cnyXIm
CTw7b/BM2sRXy05kOlKXuO6BtBt5ajKnrzHStMAhxuL/B5IbdvKaUHRdQqdPv8st
+ahlxnJzyy5mVw==
-----END CERTIFICATE-----
Generated at Fri Dec 12 15:41:48 2025 by rpki-client