This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
File:                     ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft (raw, json)
Hash identifier:          qUA8kYDCpsu+QhYvyq0mlU+0am/ElEbfNMFsARWJHG0=
Subject key identifier:   22:50:DC:77:BB:1F:16:AE:7F:F3:E2:88:59:00:FA:E1:F3:29:BB:B8
Authority key identifier: 65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
Certificate issuer:       /CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Certificate serial:       019AF164A4B468C55A73BEDD3295239475BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 02:01:36 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:36 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:36 +0000
Files and hashes:         1: CHPWlUWLkhhN8KqcQvdgSIi7nSQ.roa (hash: oTR4o/Lu/P2pP/jqKMJRfshRV5ap+zULnMucNhK6ij0=)
                          2: D4kPuzxI99LO9za1uzpIOKYzyZk.roa (hash: c+Ehw1XN1UBVbiuLbeIY9bu5RDnn9bT1POuqZJ3ek+g=)
                          3: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl (hash: zdIAyQP3UdaqOx6H296ygEsR7vKOvfq8bQuSPvH/DWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:a4:b4:68:c5:5a:73:be:dd:32:95:23:94:75:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=658290fe9814fcb062ab71e32ec1f96da9973a33
        Validity
            Not Before: Dec  6 02:01:36 2025 GMT
            Not After : Dec  7 02:01:36 2025 GMT
        Subject: CN=2250dc77bb1f16ae7ff3e2885900fae1f329bbb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:ee:57:21:1e:e8:e3:3a:6b:93:e2:f3:9b:
                    a6:59:80:35:3f:50:02:8a:94:93:57:2d:5e:31:fd:
                    1f:1c:74:6c:63:24:dc:81:7f:dc:99:ba:96:c3:6d:
                    a1:67:ee:bc:94:df:7b:b3:01:c4:92:52:9b:bf:7d:
                    0d:1d:12:df:6e:d3:8f:be:bb:76:80:85:d5:8d:ef:
                    52:df:60:55:de:18:ae:f5:5b:be:74:ee:e2:d3:84:
                    43:3e:db:56:d0:f3:32:a7:4b:b5:40:c9:1c:e6:c6:
                    ae:bc:bc:d6:f3:87:bb:e4:e1:c1:4f:e2:cf:c3:a3:
                    05:68:af:3c:89:23:46:ed:91:02:74:a3:bf:86:93:
                    50:10:1d:c8:20:36:5e:ad:60:1d:e6:94:b1:d9:cb:
                    79:39:5d:21:30:9a:0a:3d:1c:08:55:77:06:67:a8:
                    1c:a2:de:df:59:61:a1:27:fa:c6:8c:4a:4c:99:5f:
                    29:78:ff:66:0f:05:52:ee:2d:a8:f8:90:c2:02:f7:
                    fa:e3:9e:ea:52:67:10:57:98:8d:00:59:b5:15:ac:
                    59:a8:a0:82:90:07:67:49:d2:aa:7b:c0:01:7c:b7:
                    3d:06:7e:b9:51:6f:85:dc:0a:5b:34:60:3b:37:36:
                    e4:82:79:6b:f1:c3:e3:e3:bb:60:fe:07:cc:90:9b:
                    ac:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:50:DC:77:BB:1F:16:AE:7F:F3:E2:88:59:00:FA:E1:F3:29:BB:B8
            X509v3 Authority Key Identifier:
                keyid:65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c3:08:5e:8f:db:40:a9:9b:0f:7f:43:f7:98:a2:07:7c:ed:
         c5:91:61:d8:7a:00:79:00:87:7e:63:43:90:57:b0:f8:b8:bc:
         94:c0:36:db:bd:a4:d3:ce:92:ae:5b:d1:b6:9f:4a:46:20:44:
         7e:8b:b5:0c:c2:4b:d7:d2:7e:db:8c:94:67:df:00:00:79:53:
         51:ed:35:03:30:9a:2e:e5:1c:5b:b3:e4:ef:82:f5:b4:4c:cc:
         a4:49:7b:d9:34:57:c5:8d:cb:9b:85:1c:de:1b:1f:14:34:fa:
         94:1a:79:2e:b5:d3:87:13:dd:20:f0:f9:0e:4b:71:04:2d:b9:
         14:9f:7e:f1:b1:94:6f:af:3d:3d:36:e4:bc:c2:9b:00:36:98:
         62:b8:bb:e4:6d:44:bc:f3:8a:a9:0b:90:e7:cd:6c:88:b1:b5:
         ca:75:99:69:69:df:1b:33:29:3d:92:e5:3c:50:30:10:a6:49:
         11:93:d6:ea:2c:d1:71:12:98:91:1a:5f:ea:ca:9c:c6:ab:43:
         66:57:36:cc:fb:b0:56:38:c1:32:ce:d7:54:fc:ca:c3:6b:39:
         2f:c1:dd:f5:6f:3e:f3:33:94:8c:2a:cc:53:6b:6c:2b:3c:43:
         14:a7:f6:a0:20:0d:b2:b9:6f:06:90:09:b8:fb:a6:82:ce:8b:
         00:c4:db:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:44:44 2025 by rpki-client