This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
File:                     ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft (raw, json)
Hash identifier:          YV1/bRS+4+4xmBP1vUOchM3V5irO33+lPh8y16amyCI=
Subject key identifier:   BE:32:5F:61:C0:8A:19:2E:25:A2:55:AA:6F:D8:77:15:9E:EB:D5:B3
Authority key identifier: 64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C
Certificate issuer:       /CN=644ca1f90518d4253f325947d7f32db78721647c
Certificate serial:       019B3BD9BC0F77F27590EC793FDFA42D40EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
Manifest number:          1788
Signing time:             Sat 20 Dec 2025 13:01:23 +0000
Manifest this update:     Sat 20 Dec 2025 13:01:23 +0000
Manifest next update:     Sun 21 Dec 2025 13:01:23 +0000
Files and hashes:         1: LPoSWmH9lMAQGTklM5DJIT-hXL8.roa (hash: TOrMsZzQDuOs5c3iwWnYNm18JhvhdddP0HuUPukBsu0=)
                          2: OvOurKu8T2ws1g_rbUDf-nmHO_k.roa (hash: il6P6mcaD6j7wpNIC2MuV0ZyXgmG33aNWz7qa9/JNHg=)
                          3: ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl (hash: kUfPrjJzf8RZxxcwbLvSuxcjDxHib8WmXOAlW/vq1g0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:d9:bc:0f:77:f2:75:90:ec:79:3f:df:a4:2d:40:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644ca1f90518d4253f325947d7f32db78721647c
        Validity
            Not Before: Dec 20 13:01:23 2025 GMT
            Not After : Dec 21 13:01:23 2025 GMT
        Subject: CN=be325f61c08a192e25a255aa6fd877159eebd5b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5a:bb:e2:1c:ac:c9:17:2f:a4:e8:f9:a7:e9:
                    68:41:fe:7e:31:df:70:26:d9:a7:ac:6c:52:e3:0d:
                    3e:36:64:ec:89:4b:db:22:46:f6:d2:8c:d4:bd:3e:
                    18:44:7d:56:e2:bc:3d:cb:52:87:e4:cc:da:54:8b:
                    ce:35:15:4a:01:fe:1b:56:04:9e:a8:75:b9:ab:b7:
                    4a:f4:f2:29:24:bd:af:26:05:06:2d:bf:8b:8f:5c:
                    21:30:5e:b0:59:25:22:2e:34:62:3c:fd:c1:a8:c1:
                    39:2b:92:89:c1:f0:3c:ce:db:d2:2e:5a:16:c3:81:
                    6c:71:74:a5:81:0b:07:73:26:7b:32:dd:7d:c3:01:
                    e6:e6:90:5e:b9:38:e7:4d:3a:c7:7d:64:fc:61:66:
                    c0:0f:2b:78:5d:b4:22:c5:fe:0d:87:cf:87:1e:82:
                    6b:1f:2c:ec:2b:4e:96:07:83:b8:ca:cc:5d:70:47:
                    d5:2a:32:d4:55:47:16:21:5a:c8:62:66:27:0a:d8:
                    23:03:08:60:02:3c:50:5e:ad:03:ee:47:7e:59:1f:
                    71:57:b2:94:3b:97:5b:23:28:8d:d7:26:42:0b:49:
                    0f:ca:35:27:c1:de:1e:95:33:37:9f:d3:1f:b6:08:
                    69:31:f6:19:d6:aa:e3:7c:0a:85:36:a1:cd:8f:d6:
                    c8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:32:5F:61:C0:8A:19:2E:25:A2:55:AA:6F:D8:77:15:9E:EB:D5:B3
            X509v3 Authority Key Identifier:
                keyid:64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:6c:27:3f:7c:aa:ab:c7:26:c4:9e:40:e8:43:e1:e6:36:3b:
         75:31:85:a2:b2:e8:0b:7c:a0:a4:25:a9:f8:eb:1e:32:13:e3:
         e9:ae:e4:15:9f:f4:22:27:8c:68:95:ea:e6:ef:51:82:34:63:
         4e:0b:d7:da:92:58:fa:6e:db:24:09:62:2f:4f:e0:b4:55:17:
         ea:07:04:ba:d1:28:7a:4c:14:7d:f6:ef:84:69:7c:af:e8:47:
         17:f7:e7:ea:e3:75:78:00:94:39:ea:a4:43:2a:49:6e:05:b0:
         40:8a:78:4e:af:dc:fe:ea:e4:47:0e:cf:05:75:77:11:07:ff:
         df:41:99:d9:31:aa:38:7d:73:2b:eb:1c:a2:66:35:ef:57:f8:
         bd:a7:89:99:c4:18:3e:cd:4f:5b:0f:31:40:55:ce:f0:0f:01:
         9a:05:f5:a6:b4:9f:f6:d9:52:06:24:9f:36:ab:a4:5c:9c:a2:
         e8:5b:83:f1:e2:23:19:a6:bf:08:82:35:0e:31:8d:0d:08:40:
         fe:d2:2e:cb:3a:b3:07:7a:40:47:8d:e4:a9:a6:3c:0d:3f:2c:
         9d:e6:c5:f6:06:e8:84:ca:30:e0:46:0a:21:8c:a7:db:f4:9d:
         b7:11:bd:15:14:99:b2:1b:24:c5:89:75:4f:2f:fa:87:5b:5a:
         50:f9:79:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:58:15 2025 by rpki-client