This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
File:                     _Y7_IBIYpagjy-hTNoU-PbTdFus.mft (raw, json)
Hash identifier:          FGodBuCAUBwGbnRQLmF5BpHKOZRATVaZb58W+u7TcHU=
Subject key identifier:   40:B4:59:31:12:93:A1:CB:8C:A1:2E:B6:CC:1D:62:CE:D0:0E:EF:43
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Certificate issuer:       /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial:       019B066C5837A95337F7E63E4E113DEEEEF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
Manifest number:          1773
Signing time:             Wed 10 Dec 2025 04:02:02 +0000
Manifest this update:     Wed 10 Dec 2025 04:02:02 +0000
Manifest next update:     Thu 11 Dec 2025 04:02:02 +0000
Files and hashes:         1: G3M7wpCkzFutALW1xPv73nJCbQc.roa (hash: AfpZBku49cWSzi+wOddaAbZYily4EzQqgkPRwfDGKGI=)
                          2: _Y7_IBIYpagjy-hTNoU-PbTdFus.crl (hash: WNFmYwFVuAtezVxIBLrrgVn56u/QuVN9X9kC3Cf2x8Q=)
                          3: lTDGFOEHleeAgYpGLUXAmxQeWF4.roa (hash: MXBaSrVfYLxOUa1qMNqlBVqGPuFkLVafjJsmfk4Jfmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 04:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:06:6c:58:37:a9:53:37:f7:e6:3e:4e:11:3d:ee:ee:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
        Validity
            Not Before: Dec 10 04:02:02 2025 GMT
            Not After : Dec 11 04:02:02 2025 GMT
        Subject: CN=40b459311293a1cb8ca12eb6cc1d62ced00eef43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:66:08:d8:32:b9:af:46:ae:1c:ed:18:66:aa:
                    a6:ba:92:2c:f8:3f:29:2f:af:e6:c8:51:ec:9f:30:
                    04:9b:3c:14:a9:8c:95:d8:66:f5:51:58:a1:85:eb:
                    48:34:9d:62:87:04:b0:ef:74:ca:5a:ab:d4:b7:62:
                    88:54:46:22:1d:44:96:79:a2:a0:bd:c8:d3:ed:73:
                    32:1b:1d:5f:77:bf:6c:98:49:d9:ec:a0:3b:64:aa:
                    b8:b2:04:2a:78:a1:d0:52:b7:32:7f:f8:3a:cf:7d:
                    46:26:6e:e7:7b:8e:59:2d:d3:f6:a2:98:6c:eb:77:
                    82:7e:bf:6a:23:ad:1a:1f:e2:99:57:ed:d9:42:d6:
                    da:fd:56:bd:79:48:78:36:97:fb:a1:c4:74:4f:26:
                    1b:d7:90:30:04:f8:02:50:ce:e5:00:a1:d8:d0:ab:
                    59:df:11:95:68:c3:6a:41:6e:3c:e0:11:af:90:35:
                    38:4e:1e:6c:e4:76:b0:17:6b:e8:6b:af:0d:5c:d7:
                    de:48:6e:61:86:40:c8:02:c5:cf:9e:96:83:85:d4:
                    3b:68:f6:ff:ae:e3:09:96:62:c0:2e:37:8f:04:ed:
                    57:5f:82:e0:c7:58:18:ae:94:19:29:41:45:7e:f2:
                    0c:cd:1a:77:84:ae:d2:aa:90:fd:36:0d:17:a9:25:
                    79:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B4:59:31:12:93:A1:CB:8C:A1:2E:B6:CC:1D:62:CE:D0:0E:EF:43
            X509v3 Authority Key Identifier:
                keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:a0:88:c0:1f:8e:48:1d:52:7f:3a:7e:2f:04:eb:18:de:2f:
         25:bb:03:8e:bf:3c:ac:77:38:c0:7d:f1:1b:3b:9a:24:af:2b:
         7b:05:71:45:d1:42:78:a3:f2:ea:d1:c8:6d:e2:1c:15:15:dc:
         ae:ce:a0:3e:3d:c9:2d:ed:16:ae:d2:c4:0f:7f:f8:30:05:7c:
         65:47:ec:75:8c:6c:2c:66:cc:d7:ab:41:b5:18:50:fb:e5:f8:
         aa:2a:b9:78:d5:8c:e7:5e:0c:ff:02:08:fc:50:f8:d7:9a:3d:
         7c:eb:79:e6:c7:4d:f6:3d:30:b9:74:5b:a3:10:12:6a:4d:f0:
         fb:c4:ec:42:1f:c2:2d:d7:c1:ca:2f:1c:f3:f6:12:60:cc:f3:
         cf:5f:53:66:78:90:59:38:66:3d:ef:a2:55:f0:96:5f:06:9b:
         26:67:e1:a6:cd:94:3f:7a:32:66:16:c7:02:15:19:11:b2:c8:
         af:59:b9:fe:0c:d5:48:c4:08:21:c2:a7:38:6b:2b:52:5b:69:
         69:de:12:5c:cf:d9:8e:7f:bf:33:c7:85:e1:7c:5c:2d:39:cd:
         52:58:6c:3b:b2:5f:ac:a7:f6:ef:67:c6:db:5a:46:92:65:ac:
         f9:6e:e0:32:f4:4a:83:73:99:ca:4b:25:86:04:70:46:af:ab:
         0b:41:52:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 11:40:48 2025 by rpki-client