This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
File:                     RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft (raw, json)
Hash identifier:          EGuAhUtS18z2XIA2wqZSi8iU/12tdrvqqBIQqeHaZaE=
Subject key identifier:   9B:4E:2F:68:F8:B0:A3:7B:35:A8:65:4A:8E:D0:AB:32:52:14:71:E1
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Certificate issuer:       /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial:       019B2407953645D66BC71A22E0C4806D68C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
Manifest number:          1787
Signing time:             Mon 15 Dec 2025 22:00:35 +0000
Manifest this update:     Mon 15 Dec 2025 22:00:35 +0000
Manifest next update:     Tue 16 Dec 2025 22:00:35 +0000
Files and hashes:         1: BFq1km9XkHnmoDoXJVc27vizfZA.roa (hash: cHrkhcCjIdFy9DEItV+YoEGVfmLA0+VuuQv0zsT4f+Q=)
                          2: QVRWqhYUwIkNvJnwNn5ilovQsG0.roa (hash: ECIpmtTYGjYR3kRGmh6WnnV42XGn8NJAMdwXjOT27zA=)
                          3: RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl (hash: f9O2jvlQHhBssM3pSX76jpq10CS8bgWZpRzQvV7MIXc=)
                          4: Y9K3JlofK8POwOywRHQ-b7Rojd0.roa (hash: abVW39/CWooNu9JnN4E4q2eaNvJVrXWE5ieZckwkUSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 22:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:24:07:95:36:45:d6:6b:c7:1a:22:e0:c4:80:6d:68:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
        Validity
            Not Before: Dec 15 22:00:35 2025 GMT
            Not After : Dec 16 22:00:35 2025 GMT
        Subject: CN=9b4e2f68f8b0a37b35a8654a8ed0ab32521471e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e1:43:03:67:4b:eb:96:6e:17:d8:8d:f0:54:
                    0e:a6:a3:4e:10:bf:18:b7:59:19:11:c5:54:d9:7c:
                    8f:90:c1:0f:dd:30:d5:9c:60:fb:21:5b:32:83:c4:
                    4c:27:f2:26:43:c0:75:00:d6:9f:33:9e:b9:32:b0:
                    35:68:c3:f6:16:2e:2a:f6:a3:88:6d:64:c4:7c:6e:
                    f0:a6:ba:7c:46:4d:84:9e:93:7d:48:59:92:0b:aa:
                    c3:e9:41:80:32:d5:9e:d9:51:23:ba:e7:2f:4a:e7:
                    6c:1f:81:d1:d4:dd:02:90:56:de:a0:c1:68:65:50:
                    08:98:7f:2a:b2:67:99:38:c1:32:8b:5a:2c:9d:e0:
                    f0:27:5c:ec:87:82:b3:73:5f:b3:d6:65:10:d1:7b:
                    38:21:ab:d4:25:19:5e:8e:87:4f:02:77:1e:5e:0c:
                    16:9a:14:f0:2b:b9:59:5a:c5:ab:87:17:0d:ae:f8:
                    bf:75:e9:20:16:1c:a6:4b:01:6e:fe:50:9a:a3:a3:
                    36:af:5b:5a:15:14:8c:f9:9c:5a:2b:95:45:11:10:
                    85:3e:fb:a7:2e:1c:51:b9:06:57:11:ae:56:56:0c:
                    a1:88:6c:c7:a3:d2:ca:23:18:7d:bc:83:d7:3a:ab:
                    b9:77:5b:ec:8c:c1:b1:79:dc:01:18:14:3c:e9:99:
                    0c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4E:2F:68:F8:B0:A3:7B:35:A8:65:4A:8E:D0:AB:32:52:14:71:E1
            X509v3 Authority Key Identifier:
                keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a0:77:74:5b:0b:8f:66:05:f3:5b:d8:b3:ee:35:4f:d9:0f:
         53:5a:16:c0:24:51:7d:6a:cf:f7:cd:db:04:13:09:a1:95:cc:
         90:ff:94:4b:bd:1b:17:bc:1e:4b:45:f2:32:9b:3d:8d:5e:35:
         19:35:6a:2e:0e:c6:7f:ea:7c:93:27:54:81:5f:67:8c:94:33:
         93:15:b5:29:cc:1f:e9:4d:37:93:69:30:1c:03:bb:d6:7a:a1:
         e8:11:c2:6e:27:27:99:f6:99:19:0d:8f:56:24:90:1f:c2:bb:
         e2:b0:94:10:6d:d0:6d:b9:87:ba:6c:e8:41:0d:14:c1:d4:6b:
         7e:7a:07:85:9d:9b:7e:e4:41:c2:8b:a4:92:44:94:48:41:cc:
         1f:ab:1d:e2:77:42:b9:46:0c:43:f3:10:66:f9:eb:e8:f1:b6:
         b0:c4:d3:fa:51:4e:54:5d:c1:1c:fa:e6:60:34:f9:69:11:11:
         e9:bd:0b:98:a8:23:6c:e2:4f:da:c3:a5:9c:6a:bf:83:24:0c:
         04:04:05:67:e7:51:b8:12:da:91:b5:62:2b:ff:5c:8c:a3:8a:
         e6:7a:2d:e2:5a:27:96:e1:36:70:6c:e5:0a:57:82:bf:a0:2f:
         8a:95:d6:8a:4f:2c:b0:29:44:12:c6:26:ed:d3:39:e6:bd:07:
         90:cd:97:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:23:41 2025 by rpki-client