This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
File:                     YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft (raw, json)
Hash identifier:          SMJUdjZycxEANEetkSj81MiyTd08QQpAAHG8kPFxPc4=
Subject key identifier:   EA:48:69:8A:7C:27:BB:75:40:3E:16:1A:DA:6F:FC:55:41:0A:2A:2C
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Certificate issuer:       /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial:       019AE7BBAFA8D16FFB33E5BB430110CB4C47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
Manifest number:          1762
Signing time:             Thu 04 Dec 2025 05:00:28 +0000
Manifest this update:     Thu 04 Dec 2025 05:00:28 +0000
Manifest next update:     Fri 05 Dec 2025 05:00:28 +0000
Files and hashes:         1: 12cWFr32i6PF2CeFM1PO-xgXt6A.roa (hash: kaGn4iTJ9yXgrBEjfOG5dUlsL+x0SJaJYPyNDbIcR54=)
                          2: PnEzUVbrYhXZNNLfCN-Xtl0-Pzk.roa (hash: lXzPnJfE3bH0euvEvGwi8aTfi10gIwh0zvOckFmaQMI=)
                          3: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl (hash: zl33GOVIHuEao/iFdXR4wnadYzLwnYVnROAoLPAVkBc=)
                          4: faW_PPYk_4UD9_3RNfk7L7R4hKg.roa (hash: NsYb0FRDPoAtzYBgzGg3wYZizhwYw15oPV3lBi8uVeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 00:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e7:bb:af:a8:d1:6f:fb:33:e5:bb:43:01:10:cb:4c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
        Validity
            Not Before: Dec  4 05:00:28 2025 GMT
            Not After : Dec  5 05:00:28 2025 GMT
        Subject: CN=ea48698a7c27bb75403e161ada6ffc55410a2a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:07:9a:c8:21:dc:c6:a6:b5:f3:c9:c5:bc:99:
                    55:32:ca:2d:c9:53:09:82:6e:4f:2e:8f:c6:50:92:
                    dd:77:eb:72:9a:e3:c4:99:a3:e4:87:b5:5f:be:5d:
                    16:e5:dd:fd:1e:b4:1b:89:7d:f7:4f:e1:7e:a9:b8:
                    41:11:39:84:9e:b5:57:cd:24:a4:44:7d:64:00:cf:
                    1a:fd:1c:09:47:4f:d2:72:94:56:78:a7:e8:25:28:
                    1b:6d:58:4a:80:37:c2:02:9c:85:a0:a7:d9:59:1e:
                    ef:63:84:b5:ed:1e:f1:14:6a:cc:f4:14:58:e3:fa:
                    99:13:ee:0b:08:4b:04:95:70:8b:e6:f9:77:dd:19:
                    56:53:34:ed:35:8e:de:2f:cf:de:00:2b:dc:a6:15:
                    49:f6:79:b2:e0:08:d3:a4:91:c3:15:34:f3:d1:2d:
                    c1:6e:e5:c8:36:62:12:9b:10:e6:db:9b:69:d7:bd:
                    cd:12:27:e1:da:01:f3:69:e2:48:e2:61:f1:66:d9:
                    b3:56:4a:85:39:ab:48:b9:ea:b9:7c:11:ce:71:8a:
                    ee:1f:4e:d2:32:c9:a7:09:3e:e5:9a:d0:ca:8d:fc:
                    81:39:3d:d7:a1:cd:ab:36:3c:04:92:61:1a:ec:07:
                    10:48:49:e9:d3:b4:65:4d:dc:f5:c2:1e:af:0d:34:
                    d1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:48:69:8A:7C:27:BB:75:40:3E:16:1A:DA:6F:FC:55:41:0A:2A:2C
            X509v3 Authority Key Identifier:
                keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:27:b9:7d:62:a2:1d:9a:a0:73:06:c0:1d:4b:96:57:a4:9b:
         08:3d:d6:49:28:51:80:06:c3:f4:ac:a2:81:b9:2b:8e:4c:ec:
         28:f3:1a:ec:3e:84:bc:53:93:b2:fd:f3:95:14:d2:6d:d6:ed:
         5d:92:11:8a:69:f0:81:e1:3e:11:9b:1c:67:99:25:15:78:22:
         3d:cf:97:ae:3b:24:a6:b3:49:0e:47:c9:7d:ef:bb:7b:48:1c:
         5b:56:11:be:82:ac:37:3a:10:4a:72:a6:26:6a:ef:bd:14:55:
         c9:fe:c6:e4:60:77:6b:e3:17:f5:5e:35:de:92:e5:94:bb:6b:
         45:76:46:75:aa:d4:6b:7d:5f:ee:77:bf:01:49:ca:4b:a3:87:
         08:39:10:07:9c:33:b6:b8:e2:22:d8:10:ab:ca:89:79:b7:6d:
         f4:1e:f0:e6:d2:b8:72:0b:6d:4d:c7:42:3e:86:f8:eb:62:c8:
         02:f9:15:96:0e:0a:a9:53:71:e9:88:dd:1c:63:81:61:74:11:
         b8:49:c4:6f:1c:f4:3a:da:57:3f:ed:ae:51:98:e3:8f:5b:a5:
         9c:b1:fa:13:c5:ee:6d:c7:c6:45:fa:84:6f:59:e4:cf:50:55:
         f9:44:be:40:03:82:82:78:9f:a6:67:98:8b:bb:df:c2:b9:a6:
         79:42:d0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 08:30:12 2025 by rpki-client