This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
File:                     ZeqT2IogLVHTTSqQNZfna48X8Oo.mft (raw, json)
Hash identifier:          t4C9QfyeVCClECBChLN9EWI0j8xyVmGWAGC3oZEcYrQ=
Subject key identifier:   25:92:7D:D6:C1:CE:4B:D9:2E:82:05:6F:70:32:9C:DD:D5:F8:95:E3
Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA
Certificate issuer:       /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
Certificate serial:       019AFA9DB6983AB6B37B2943884FBB3A957C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
Manifest number:          0186
Signing time:             Sun 07 Dec 2025 21:00:31 +0000
Manifest this update:     Sun 07 Dec 2025 21:00:31 +0000
Manifest next update:     Mon 08 Dec 2025 21:00:31 +0000
Files and hashes:         1: I-x_UPcw9sQTN9WaL1gNO5Jv8pU.roa (hash: kQYNPTEIQCpAe0+UIMCFb30JlCdHhzOSGG9E3Bksfn4=)
                          2: No384ukQ7PMzR7ysdXQqiI23V0U.roa (hash: WQHcVAZUYgrUok+kLmgQEzlX1mU+gj90+MGfNi8ZR3g=)
                          3: V4pBXU1PZiQxs_5q_J-RR8u4p6I.roa (hash: eo5F6jAlKraDD9oeFZGJ6cw6s1Keo3V6+IqIlcUTCHA=)
                          4: ZeqT2IogLVHTTSqQNZfna48X8Oo.crl (hash: 2tXwPgETJzR7lMrqtS/9shN2IwumBrzHq0n1B+WwXr0=)
                          5: ce8LRFwM6wCXX-cKMVilSCLACTA.roa (hash: SjdlAeta3OBEM6FH48Ybj415juI53asPm3ETveUv2Eg=)
                          6: gitklWD7TllTa09uVT2HYtJ2HAc.roa (hash: 4UXSpGqlkDuQDI9lXYLAHQ9HNN6MyyLOEemk6yCC+m8=)
                          7: iI0xJWiiKKg47j1BbOpuFVTDI4Q.roa (hash: yH7jkiJqUFQwZGfRfwZf6K3F352BuafwDzi8n2IlGMk=)
                          8: mSfH0G_iARcbQlaJSIXQlk05LS4.roa (hash: 0FkMJZ2bnxCxc3Hk8tjYTkCS9FPgkLmBQCWnnshE9e0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 17:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:fa:9d:b6:98:3a:b6:b3:7b:29:43:88:4f:bb:3a:95:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
        Validity
            Not Before: Dec  7 21:00:31 2025 GMT
            Not After : Dec  8 21:00:31 2025 GMT
        Subject: CN=25927dd6c1ce4bd92e82056f70329cddd5f895e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:10:34:c0:9e:56:5f:ee:3b:fa:9d:b7:6e:
                    89:f9:31:98:a3:65:92:1a:b0:39:dd:fb:97:ec:b7:
                    9c:56:c0:39:8d:12:64:05:01:da:8f:ad:ea:93:0f:
                    20:7a:bd:32:f6:80:88:24:43:3c:86:55:04:74:2a:
                    e4:44:c2:78:df:d2:c0:99:5a:6c:71:1e:87:c3:9e:
                    69:96:d1:08:fe:ef:21:2e:e6:e4:c0:5e:c0:65:fc:
                    9c:9f:00:ba:4e:eb:37:df:85:96:30:fd:67:34:cb:
                    e1:f2:db:6f:80:1d:0f:74:1c:a4:2a:f7:8a:b4:d0:
                    46:73:7a:da:2c:60:52:b6:aa:4b:ce:3c:ef:0b:f5:
                    c2:54:81:ad:99:40:b8:a6:96:5d:ed:90:fb:42:e1:
                    37:80:a6:bf:75:10:94:81:97:a8:02:68:e4:9d:09:
                    f4:f7:3f:1a:0d:ba:53:a4:30:85:89:48:ca:0a:a4:
                    83:30:2e:4c:1c:ac:5d:e9:57:4d:af:11:68:b0:4b:
                    e1:60:66:c2:25:15:ca:ba:42:4d:a0:23:c1:b7:8c:
                    71:36:82:19:5b:0a:5a:52:d2:46:63:cd:23:b0:60:
                    98:8b:c4:13:f6:0a:21:e9:87:58:28:99:67:46:a4:
                    24:a3:03:99:aa:f6:7a:6b:3c:91:3b:74:29:49:2c:
                    3a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:92:7D:D6:C1:CE:4B:D9:2E:82:05:6F:70:32:9C:DD:D5:F8:95:E3
            X509v3 Authority Key Identifier:
                keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:c4:16:35:a5:e1:da:78:19:36:8c:37:c2:8d:d9:99:15:11:
         0d:fd:5b:da:76:25:8b:51:90:5f:d3:fa:d2:42:05:df:5b:61:
         e0:c1:d8:25:84:f6:cb:6b:aa:94:48:c4:b8:1d:d0:7a:77:62:
         63:d9:3c:d4:b0:1d:49:26:f5:32:4b:d4:6a:b5:64:98:19:c8:
         90:69:f3:04:01:fe:02:09:1f:b2:30:e8:7c:d5:00:ec:f9:12:
         17:d5:a3:aa:73:64:fd:f3:15:09:f5:9f:6a:77:67:20:d3:ec:
         43:cf:49:cf:91:4a:56:5b:47:71:eb:e9:c7:1a:94:62:ea:e8:
         2b:d2:a5:f8:57:c2:b2:5a:bf:7d:c3:79:b0:47:7a:a4:54:f2:
         96:9b:14:74:2a:c2:13:aa:3e:90:30:27:ce:f0:a9:de:2c:2c:
         8d:b7:3e:fe:1d:c6:30:72:3a:37:b5:55:1f:f0:f5:4e:25:1b:
         82:64:ad:36:d3:82:e7:ac:a6:42:b6:6d:90:ff:46:2a:27:8b:
         93:90:97:ac:88:94:6f:8d:87:2b:ec:46:cf:d3:22:21:55:01:
         67:c4:3d:97:f4:20:86:da:70:7f:95:92:13:4b:e7:8e:b0:d1:
         8e:e2:69:15:81:9f:5b:58:c0:2a:0b:2e:0f:7b:d6:5e:8b:9b:
         53:80:8f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 22:48:20 2025 by rpki-client