This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
File:                     YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft (raw, json)
Hash identifier:          umEB5jY8jL3sW4rdnLU5CtmX83nqI2Teb6klWHE5L4U=
Subject key identifier:   CB:33:0E:D4:26:67:B5:A5:FB:E6:8B:A9:A7:5E:47:4F:32:7F:A8:A8
Authority key identifier: 62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
Certificate issuer:       /CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Certificate serial:       019B18DF24E478ACAF24773B7FE9DF3144EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
Manifest number:          177A
Signing time:             Sat 13 Dec 2025 18:00:35 +0000
Manifest this update:     Sat 13 Dec 2025 18:00:35 +0000
Manifest next update:     Sun 14 Dec 2025 18:00:35 +0000
Files and hashes:         1: HQDN-aj0TQhAX2FXvaTFWzQChUg.roa (hash: blFOlAR9sydif32qAhRClbIbQgCg0n31LrtAjrgoEug=)
                          2: M0bYeyfyOrMV_gB5qblOfbWilh4.roa (hash: f9XZswY2l4oflWNgmE9zU0KMUAtHHlyk4r3L1HHO+uE=)
                          3: YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl (hash: +Vm/KBuLMykZYklN0GhKubvgEijLGHw6yfrjVqr++wM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 17:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:18:df:24:e4:78:ac:af:24:77:3b:7f:e9:df:31:44:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6284cfa7844340237fe59a3825b54f3f77ed8532
        Validity
            Not Before: Dec 13 18:00:35 2025 GMT
            Not After : Dec 14 18:00:35 2025 GMT
        Subject: CN=cb330ed42667b5a5fbe68ba9a75e474f327fa8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c9:dc:1c:9a:fd:dc:35:89:5a:29:27:00:0c:
                    e7:25:b6:82:2a:ec:2d:f8:30:5c:5f:ca:67:33:60:
                    55:23:70:16:2f:89:78:3a:02:1b:d2:d7:ff:bc:39:
                    95:ab:77:00:4c:e3:e6:90:b6:66:b8:82:26:5e:fa:
                    49:00:7c:19:04:29:58:78:ca:45:c3:3d:58:32:c2:
                    f5:a2:7c:83:60:a4:51:9f:86:39:6e:12:ac:78:71:
                    95:72:8f:a6:2c:43:52:ee:9d:a8:4c:78:0f:f4:86:
                    3a:a8:ed:5c:d4:c4:1f:44:1b:b9:0e:03:bd:86:3c:
                    c6:d9:4f:88:00:7a:5d:b4:51:93:6e:71:69:7b:51:
                    1a:fb:c8:eb:29:36:5d:ce:8d:d6:56:8b:8c:b7:1b:
                    ce:4c:41:31:5a:7a:c6:76:b8:5a:86:75:40:d5:b3:
                    d4:d7:93:ae:b5:bd:d9:b0:5c:17:3e:5d:5e:a5:b9:
                    89:9a:8c:49:29:45:87:0b:9f:84:74:c0:bc:f5:80:
                    5b:f6:b7:2a:59:95:6b:8f:4e:67:23:94:57:ee:3e:
                    9c:34:4c:36:c6:6b:31:53:88:47:50:cb:c6:73:6a:
                    20:b0:49:6e:c4:61:d1:01:1b:f1:7d:0b:23:52:c8:
                    6d:6a:18:91:9f:72:57:37:10:dd:1f:1a:a3:e3:27:
                    97:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:33:0E:D4:26:67:B5:A5:FB:E6:8B:A9:A7:5E:47:4F:32:7F:A8:A8
            X509v3 Authority Key Identifier:
                keyid:62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:a1:38:12:1d:b0:36:d0:de:4d:f2:c0:4c:68:76:56:23:20:
         b0:44:e6:72:04:eb:0a:15:98:63:f4:86:24:a1:b9:f3:a8:03:
         29:ea:b6:49:89:02:a5:de:3e:a2:2c:bd:b5:0c:c5:fd:96:0a:
         73:ba:1e:e6:9b:9a:75:3f:b6:48:3b:f9:20:37:5f:89:2d:f7:
         7b:79:18:a2:04:b4:73:a0:ae:39:37:a2:8f:59:07:92:67:28:
         f5:31:d6:4c:d0:4e:d5:ed:b3:b4:a2:59:f0:b7:06:78:36:df:
         84:5e:48:ac:57:07:e8:2d:4e:37:39:df:62:5d:b8:42:9e:1f:
         2d:20:80:73:ef:46:2c:40:ce:df:94:4d:bd:6f:c8:5f:f0:02:
         51:ac:31:cd:ce:c8:e4:7b:3c:67:8a:d6:26:e2:76:93:32:79:
         d5:e4:e2:7e:99:aa:1e:7f:b3:49:98:1b:f3:fd:63:f2:c6:a4:
         aa:cf:dd:c8:3a:bb:af:e6:6e:37:46:da:27:b5:01:7e:1b:fc:
         35:3e:a8:63:ca:35:77:1a:50:71:cc:c9:2e:e2:52:4f:61:e5:
         70:84:3e:8e:be:d0:5b:c9:e5:b7:a6:72:f3:08:3e:4d:da:12:
         96:7f:fc:f2:d8:00:af:4b:7f:b8:78:1c:b8:a0:ea:b4:86:aa:
         08:66:1e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 01:55:07 2025 by rpki-client