This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
File:                     ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft (raw, json)
Hash identifier:          hS7MnHlmqrx7smbWenTUo4eI7C010MMXXtY9/Ma107c=
Subject key identifier:   4F:68:D0:04:2B:21:A5:61:56:CC:0A:57:60:02:49:17:6A:AD:5D:A3
Authority key identifier: 64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C
Certificate issuer:       /CN=644ca1f90518d4253f325947d7f32db78721647c
Certificate serial:       019B37FCF9E93F8462003E2DA62035D87303
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
Manifest number:          1786
Signing time:             Fri 19 Dec 2025 19:01:24 +0000
Manifest this update:     Fri 19 Dec 2025 19:01:24 +0000
Manifest next update:     Sat 20 Dec 2025 19:01:24 +0000
Files and hashes:         1: LPoSWmH9lMAQGTklM5DJIT-hXL8.roa (hash: TOrMsZzQDuOs5c3iwWnYNm18JhvhdddP0HuUPukBsu0=)
                          2: OvOurKu8T2ws1g_rbUDf-nmHO_k.roa (hash: il6P6mcaD6j7wpNIC2MuV0ZyXgmG33aNWz7qa9/JNHg=)
                          3: ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl (hash: XC4UnNMmgB2XlJ1iVBYSFGxw30xFX8ymm6JNbVAslCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:fc:f9:e9:3f:84:62:00:3e:2d:a6:20:35:d8:73:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644ca1f90518d4253f325947d7f32db78721647c
        Validity
            Not Before: Dec 19 19:01:24 2025 GMT
            Not After : Dec 20 19:01:24 2025 GMT
        Subject: CN=4f68d0042b21a56156cc0a57600249176aad5da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:db:50:5e:20:7d:59:fd:c6:0e:55:89:80:73:
                    1f:7c:17:43:34:13:42:b3:24:7e:a0:3c:88:a1:58:
                    cd:2f:dd:07:af:a3:32:e4:0b:11:2d:cb:00:56:ee:
                    c6:68:22:a3:a3:b3:51:d2:38:b8:ca:e7:bf:6e:2a:
                    27:71:f2:d8:7e:71:9b:27:7d:c9:6e:66:2b:b6:43:
                    d8:c4:ba:e5:44:e6:0d:f1:81:69:01:e9:ac:54:2a:
                    cd:77:af:20:4e:33:6d:38:2b:33:07:a6:f7:8c:27:
                    f5:42:b4:a8:15:ea:6c:cc:2b:15:7a:b1:b0:0f:71:
                    7e:ea:6d:fc:10:e9:8b:44:11:9c:0d:6b:43:56:ce:
                    1a:81:c5:f0:a2:bb:46:6b:6a:90:ba:2f:da:a9:4c:
                    fe:9a:68:4d:25:91:84:28:9e:fe:1f:18:78:15:d3:
                    19:84:99:96:ba:2b:47:4e:83:4b:0c:78:db:a4:ff:
                    35:06:ce:76:50:52:f1:fa:d4:fb:3a:97:a2:8a:8c:
                    0f:ac:02:e2:99:1f:20:2e:3e:48:c0:9c:4c:c2:f6:
                    a1:70:bd:c4:ca:b4:b8:66:32:12:b1:e6:bd:14:8d:
                    35:b1:2f:e1:d1:b5:69:b6:27:89:65:3d:4b:a5:8e:
                    89:d1:3e:f4:14:9a:8d:ac:19:38:3e:59:28:7d:b0:
                    ca:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:68:D0:04:2B:21:A5:61:56:CC:0A:57:60:02:49:17:6A:AD:5D:A3
            X509v3 Authority Key Identifier:
                keyid:64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:5e:4c:1f:1a:e4:b9:7e:99:99:2e:b2:f3:7e:8a:43:07:66:
         70:c8:fa:db:3d:0f:57:31:e7:24:85:85:ee:72:43:27:c9:ac:
         a9:23:c4:5d:e1:6f:fa:01:81:ad:b4:fd:7b:44:75:38:c4:ac:
         a9:6f:2d:15:8d:f9:70:57:e5:48:bc:16:84:b0:d6:6f:10:75:
         89:ab:a7:93:5a:0f:7b:76:f7:4a:ea:da:3c:cf:6a:3c:44:15:
         f3:b7:f1:99:3c:17:d0:6a:fc:aa:86:ca:a6:af:b9:c3:71:ab:
         da:f9:62:59:5f:65:0b:ba:a9:17:02:5f:54:f6:7c:dd:3d:9a:
         ee:c0:3a:25:b2:86:e3:90:1c:8f:f9:14:25:94:18:1d:27:4b:
         1d:ad:78:c3:2a:c6:b1:b2:ee:82:c1:a9:ce:59:33:f9:fd:8e:
         ac:3a:14:b7:cd:8d:f6:60:ea:1c:bf:18:4d:91:a6:cb:b0:85:
         56:0a:bc:75:e2:d2:fb:1d:be:67:b9:6f:d9:5f:be:f2:90:fc:
         1f:2c:68:60:75:e7:e6:97:8b:f1:20:78:58:00:e3:23:71:5a:
         16:49:79:20:70:39:6f:67:ad:13:75:e6:03:22:87:8e:ee:54:
         c5:03:3f:86:23:77:d1:de:b4:4e:b3:3b:fd:66:3e:d1:d2:b6:
         6a:89:66:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:09:20 2025 by rpki-client