This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
File:                     yFEG2q06lz_emJFPfMHM012Mw8M.mft (raw, json)
Hash identifier:          G/sWx2LvYvBCw15EUC9U3Q9q9KFKHskYpZMv2z8NyrE=
Subject key identifier:   B8:9E:7E:A9:D1:47:E2:2C:8B:89:6A:C9:AA:E7:1F:F7:89:38:FB:66
Authority key identifier: C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
Certificate issuer:       /CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Certificate serial:       019B48151D733388C3ED9A172323DE4DA8F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
Manifest number:          1791
Signing time:             Mon 22 Dec 2025 22:01:41 +0000
Manifest this update:     Mon 22 Dec 2025 22:01:41 +0000
Manifest next update:     Tue 23 Dec 2025 22:01:41 +0000
Files and hashes:         1: Dgp_AOmS7Fq7Svk1_RSdkge-WRU.roa (hash: XElPs3TOIl+9rQ8JyrSUuMPNVVzSc0FqVwMF6uHpiQw=)
                          2: YjZtnY0hwobRgnsV2f9G0AiMGUo.roa (hash: VzgVMuv6Yb2cNnoSl6IpoOV4YANe5vJZIFylZalnneM=)
                          3: yFEG2q06lz_emJFPfMHM012Mw8M.crl (hash: hsySTC2HQFgKaA3alBqeoghlmHZunMkDlpGcelATWjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 22:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:48:15:1d:73:33:88:c3:ed:9a:17:23:23:de:4d:a8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
        Validity
            Not Before: Dec 22 22:01:41 2025 GMT
            Not After : Dec 23 22:01:41 2025 GMT
        Subject: CN=b89e7ea9d147e22c8b896ac9aae71ff78938fb66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:af:0f:6b:bb:d7:a6:7e:94:e6:df:d0:b4:43:
                    3d:9f:e6:de:f8:c5:c5:b8:8c:c3:d1:5b:ef:d9:55:
                    1b:b3:f3:fd:ed:78:c5:84:fe:60:d0:16:98:87:a9:
                    80:37:ad:2b:c2:24:10:c9:52:91:3a:2e:2a:46:6d:
                    33:90:ee:de:84:1f:d8:76:9e:12:71:eb:aa:f7:a3:
                    78:68:48:c9:2b:72:c2:c8:b6:41:4e:6a:7a:d6:17:
                    9a:c5:d9:dd:82:73:d8:f2:f2:b4:61:dd:ea:ed:f2:
                    22:6b:39:99:63:14:ab:ff:8b:c8:e4:c5:42:7f:2a:
                    58:a9:d5:44:5c:62:9f:cc:28:7e:ba:4b:c6:0d:10:
                    6d:84:a5:be:ad:71:52:3b:07:49:27:71:74:9f:7f:
                    2d:ce:9b:86:9d:07:3f:0a:d7:03:ab:e8:40:a2:0c:
                    e5:3a:3c:c6:1b:1f:54:bd:14:e2:64:f1:24:50:33:
                    bc:d3:aa:d2:5a:b1:de:28:71:7e:dd:6c:81:f0:99:
                    52:84:f6:67:41:2f:21:51:46:34:8e:b7:cf:a3:3a:
                    65:8c:3a:c2:c6:93:e0:d5:54:b7:83:f5:45:04:7d:
                    05:31:65:87:b6:0b:f8:1a:eb:80:48:81:67:ca:60:
                    76:2f:3d:c6:87:df:c1:76:2a:47:a4:e9:ed:94:0a:
                    cb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9E:7E:A9:D1:47:E2:2C:8B:89:6A:C9:AA:E7:1F:F7:89:38:FB:66
            X509v3 Authority Key Identifier:
                keyid:C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:89:d8:bc:b1:0f:8d:4c:bf:ab:d3:03:71:44:ca:27:8d:03:
         3a:af:81:a8:2f:3b:1d:88:b6:0f:46:a8:82:d3:40:5e:a1:7d:
         de:82:33:9e:5a:44:3d:35:a7:7d:3a:cb:d0:68:6e:8a:f5:92:
         1e:94:78:7c:d1:9b:2b:e5:01:a6:ac:08:62:76:ad:f8:2b:8b:
         1c:e5:6d:c7:73:29:d1:75:d7:ff:50:42:27:d8:ea:20:9f:83:
         81:af:53:30:09:8b:62:91:10:23:25:e9:a6:bf:2d:73:5c:d0:
         1f:d3:8a:6b:38:13:9b:ef:fc:55:41:5c:34:02:1e:bc:ff:3f:
         f1:ba:25:14:ce:29:a2:47:65:38:dd:04:a3:7a:72:b9:ef:f8:
         f3:0f:22:39:71:6c:21:8f:fa:84:47:96:ee:4b:7b:e9:6f:00:
         a2:8c:d0:9f:f2:35:4a:31:94:c0:bd:2b:05:8d:fa:0a:78:2b:
         9e:00:20:65:e1:8f:1f:15:c5:74:76:ee:a6:23:31:64:71:3d:
         fd:0a:f8:7f:bd:1a:06:66:eb:68:1d:3a:e8:3a:0e:2b:ba:ea:
         19:15:07:17:60:e1:bd:9d:4b:f9:50:99:da:42:d8:67:63:ea:
         1c:67:85:ab:b1:42:b9:89:07:27:ce:d1:c2:34:0e:49:11:84:
         46:14:05:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 05:26:25 2025 by rpki-client