This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
File:                     yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json)
Hash identifier:          T/qbG4z6mA8BIpgcl+XJkOnvt8xukGKwbw0eImdVIIs=
Subject key identifier:   59:BD:68:58:24:BA:15:BC:4D:21:CD:42:0B:DC:CA:E8:32:AA:EE:86
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Certificate issuer:       /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial:       019B058F7AB9D522F254507819A1D82A099E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
Manifest number:          0FC7
Signing time:             Wed 10 Dec 2025 00:00:47 +0000
Manifest this update:     Wed 10 Dec 2025 00:00:47 +0000
Manifest next update:     Thu 11 Dec 2025 00:00:47 +0000
Files and hashes:         1: KJabg-goYfqIShBpOYNsGhfln78.roa (hash: 5RhSWnJ06JVLJawdnqYDlBh1ZbuwgFFPRLF+/W6LgAk=)
                          2: kwy8KgUICcwuEJop_j-CKqXu_cg.roa (hash: VpzhVsmBR8ZtX+oH6lHXeHMgxo/zL5mzYyLWURLNaRU=)
                          3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: 1nvvpR4DfKEmZJmKEyMhtD4tX8DbBhlllHaV5ZqQwpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 00:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:05:8f:7a:b9:d5:22:f2:54:50:78:19:a1:d8:2a:09:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
        Validity
            Not Before: Dec 10 00:00:47 2025 GMT
            Not After : Dec 11 00:00:47 2025 GMT
        Subject: CN=59bd685824ba15bc4d21cd420bdccae832aaee86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5e:6f:71:db:7e:93:8a:0e:68:af:d1:83:94:
                    a7:6a:06:fe:ab:33:b8:0c:d9:cc:35:5f:a6:bc:de:
                    86:73:b2:96:6f:45:27:6e:a5:57:c1:3f:aa:d1:f2:
                    5e:66:4b:28:37:79:d2:36:21:3a:77:3a:02:23:29:
                    bc:91:ac:9a:dc:5e:05:0b:31:bc:d5:97:e1:c6:6a:
                    82:a1:9c:82:da:bb:dd:95:e2:9a:28:b3:11:e0:ed:
                    3b:cd:e0:74:8e:c0:f8:09:9c:fb:79:7b:56:60:cc:
                    fa:dd:b5:52:3c:19:48:69:47:09:bd:bf:f6:6d:ec:
                    9e:df:d1:e9:76:93:a3:67:da:54:38:65:91:d7:cc:
                    b6:d1:3b:51:84:b2:7d:71:f1:56:c1:22:d3:58:34:
                    39:e3:be:1a:08:6b:df:3a:ba:e9:7b:b6:03:56:6f:
                    34:da:2c:3a:04:84:55:d7:b7:4a:51:0a:d0:20:08:
                    8d:6d:e0:0f:34:0b:d5:4f:ff:96:ba:60:28:38:3a:
                    0f:41:a6:e3:78:f6:04:3c:9a:9a:71:96:27:5f:ea:
                    ca:23:3c:8d:18:3b:99:24:5e:51:57:6a:54:45:cd:
                    1f:22:2d:ef:ff:96:53:de:29:98:4f:e7:ca:98:c4:
                    eb:9d:99:bc:5d:08:5b:e1:ba:a1:55:a9:3c:0c:aa:
                    8a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BD:68:58:24:BA:15:BC:4D:21:CD:42:0B:DC:CA:E8:32:AA:EE:86
            X509v3 Authority Key Identifier:
                keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:63:74:ac:e1:8a:08:6c:b5:f3:17:8b:1f:4e:dd:ce:76:7e:
         88:1d:c5:9a:e7:af:b7:34:c6:55:fe:be:96:6f:63:7f:6f:b3:
         60:38:90:1f:63:92:b2:68:89:d3:42:eb:42:49:d0:c5:18:8f:
         0b:af:7d:f1:e7:e6:e8:83:fb:32:d0:b1:fb:47:f6:2c:a6:df:
         a3:65:92:a3:4c:ff:a0:53:ef:76:24:e0:e5:86:44:98:dc:2c:
         18:56:08:a1:bd:63:19:8d:16:07:ce:cc:f1:ca:5d:95:af:7c:
         67:82:89:4b:e2:9e:42:fb:92:b6:85:58:62:66:99:7e:24:04:
         21:62:8b:d9:0d:52:96:af:cd:d0:23:21:1a:d2:76:80:fa:37:
         cd:62:e9:22:58:e0:ca:5b:cb:e2:ef:95:be:5a:c5:d5:ff:34:
         61:ac:8c:8b:64:e8:53:d9:69:5e:99:64:7f:f0:ba:29:bb:7d:
         d8:22:35:a1:cf:42:33:2a:ff:13:3d:c8:b4:d3:d4:32:a2:96:
         5e:ca:ab:a0:27:f0:9e:21:38:86:82:f2:75:e1:ba:fe:2a:e3:
         7b:51:95:56:0b:32:0d:45:66:86:56:b6:de:25:52:2b:a8:bd:
         aa:83:d8:63:b4:62:22:ad:d7:0d:59:7a:dd:85:85:82:46:d5:
         fb:88:1f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 10:08:00 2025 by rpki-client