This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
File:                     RyjroAE1nN1Bg0b2UcChh8ifur8.mft (raw, json)
Hash identifier:          lvkFbHvHRl1WbBdQo4aBVev/8Wnbvw9QUuRbGe7mp44=
Subject key identifier:   E0:A4:91:F2:3A:B7:8C:B9:FA:3C:36:15:35:BE:49:FD:D1:16:47:7C
Authority key identifier: 47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
Certificate issuer:       /CN=4728eba001359cdd418346f651c0a187c89fbabf
Certificate serial:       019B5C08C35FB85B5E83BEC400FF4B10101E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
Manifest number:          179A
Signing time:             Fri 26 Dec 2025 19:00:36 +0000
Manifest this update:     Fri 26 Dec 2025 19:00:36 +0000
Manifest next update:     Sat 27 Dec 2025 19:00:36 +0000
Files and hashes:         1: RyjroAE1nN1Bg0b2UcChh8ifur8.crl (hash: NVM7LE5ZmUxx0Zj1StLUoCa88wIeSYGY+Cbhhx4Acf0=)
                          2: cBEyoeOIQqPilDWr0_I994MOPuI.roa (hash: isPNyBmr4XWxQFWKBdpcs0T6FtXR/DTgtbw1P60u2i4=)
                          3: i2M6rq1mSxd454EFcJs47ZfxfI8.roa (hash: x+6kMu73XXcjQUZNpiQj7d3/5eInEGiFNdUUMK9AZB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 15:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5c:08:c3:5f:b8:5b:5e:83:be:c4:00:ff:4b:10:10:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4728eba001359cdd418346f651c0a187c89fbabf
        Validity
            Not Before: Dec 26 19:00:36 2025 GMT
            Not After : Dec 27 19:00:36 2025 GMT
        Subject: CN=e0a491f23ab78cb9fa3c361535be49fdd116477c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3b:6b:80:0e:28:0f:fb:fe:31:06:9c:44:97:
                    1e:10:31:4f:fd:49:7d:c6:33:91:54:01:ea:50:f1:
                    56:77:f3:fd:6c:8f:20:9e:d1:16:5e:23:97:d2:a3:
                    f3:cc:8f:51:70:b2:0c:e5:d0:08:6c:34:3e:e1:3a:
                    df:d7:59:c0:ac:59:78:f5:56:4e:db:67:fc:da:70:
                    45:d6:a3:41:74:7f:52:93:d1:7e:e4:fc:83:c1:aa:
                    21:55:6f:15:ba:35:99:3e:b9:82:d7:f1:eb:ac:a7:
                    29:18:19:b8:a8:1d:d1:cc:1e:61:e4:ab:55:88:49:
                    20:17:ee:6c:d2:20:6b:dc:77:d4:43:9c:0f:df:46:
                    28:00:39:9a:ba:8a:1d:45:c6:7d:fc:67:ac:f2:8a:
                    dd:13:78:b5:db:0f:f5:3c:76:fb:9f:53:39:da:93:
                    12:7e:6e:b9:24:6b:24:fd:34:a3:e2:db:79:a4:e2:
                    00:49:dd:23:20:cc:0f:02:52:e7:be:30:5b:ec:de:
                    bc:1c:dc:60:ed:b0:89:6a:48:8b:97:51:93:63:d1:
                    2a:6d:dc:0f:6d:e3:f8:1e:e9:eb:b9:66:7a:34:10:
                    b9:62:9d:1c:bc:71:2d:d8:bb:eb:dc:56:63:3b:32:
                    5a:90:c0:7e:5b:1a:18:50:8f:78:6e:38:9f:58:a8:
                    21:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A4:91:F2:3A:B7:8C:B9:FA:3C:36:15:35:BE:49:FD:D1:16:47:7C
            X509v3 Authority Key Identifier:
                keyid:47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:f0:d4:3e:c9:f9:fb:50:7e:70:59:c7:a2:5f:99:9e:f4:8f:
         89:87:6a:c8:c7:39:00:e8:76:c8:5d:86:57:6d:ec:fe:b3:c7:
         f8:74:80:7f:26:db:cc:5d:de:2e:3a:af:9e:98:7d:93:36:e3:
         0f:f7:a1:74:ff:83:a2:d1:6d:4b:21:14:bf:51:d9:c4:6e:6a:
         d3:20:d3:a3:2c:46:29:41:71:b9:d9:73:25:fa:a4:ac:cf:93:
         81:68:d8:7f:65:ed:eb:15:25:e2:02:ff:41:04:65:d6:96:de:
         81:ec:10:93:ea:5f:4c:48:29:63:8d:b5:74:ad:ae:b6:ab:ff:
         b4:d8:46:6d:fe:ed:a5:23:ee:fa:63:e9:76:be:29:6f:e1:7e:
         e8:94:cc:2c:d4:4b:ae:25:2a:7a:16:c1:b4:4e:f9:f4:e0:c6:
         9c:91:ad:6c:e1:f7:79:a2:81:9a:46:9a:25:9b:03:e4:a0:dc:
         44:98:08:21:dd:40:3a:10:40:36:2f:84:5d:15:d9:ab:7a:d7:
         de:5e:a0:a8:d4:9b:51:e3:cc:a5:e5:eb:d4:22:fc:70:9b:d2:
         78:89:5e:84:67:ce:f2:77:b7:f0:75:ae:97:27:9f:b3:54:a2:
         ab:88:66:90:a0:71:64:ae:e2:d3:42:c4:73:d2:e5:df:0a:9a:
         dd:aa:f5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 21:22:14 2025 by rpki-client