This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
File:                     MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft (raw, json)
Hash identifier:          t/fydm1a5/UuGmy9o3sQMWQiqsDiq/af9XtEKuWVWgo=
Subject key identifier:   0A:3A:C4:F7:0E:68:C8:17:63:1D:6A:08:DB:67:E4:DC:66:DF:D5:12
Authority key identifier: 33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
Certificate issuer:       /CN=332293d0399160788b31e438760dc3bd1ed882eb
Certificate serial:       019B59770DF8880152313696709413D9A4B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
Manifest number:          05EB
Signing time:             Fri 26 Dec 2025 07:02:13 +0000
Manifest this update:     Fri 26 Dec 2025 07:02:13 +0000
Manifest next update:     Sat 27 Dec 2025 07:02:13 +0000
Files and hashes:         1: MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl (hash: icCQaOBF1AUhIGSgpPOMW5bK3GpZdOTBTnFZ4D4e0GA=)
                          2: i6CWENtAdnXqPwuX227uTDykXkg.roa (hash: nuLqIrBizKW+oU2TGkl7L2LqgilWGWZ/QKZgoAyDfPY=)
                          3: scpx1tsDeDfxUzO1xx1MvIOWYyI.roa (hash: mBTPbPt26EcSH4AMmR65D0K6YSKToMbRhFmYaz8u+KQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:77:0d:f8:88:01:52:31:36:96:70:94:13:d9:a4:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332293d0399160788b31e438760dc3bd1ed882eb
        Validity
            Not Before: Dec 26 07:02:13 2025 GMT
            Not After : Dec 27 07:02:13 2025 GMT
        Subject: CN=0a3ac4f70e68c817631d6a08db67e4dc66dfd512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d9:90:01:c6:ef:fe:74:09:52:ad:12:b2:49:
                    cf:11:d0:81:c2:4e:e9:45:7a:82:5e:d5:bb:e2:7f:
                    a4:e5:ac:64:fd:74:ca:4c:e4:5c:a8:d8:e8:55:d2:
                    53:34:a3:20:44:c1:35:9e:bf:37:c5:e2:2f:78:46:
                    b5:f8:51:af:37:bc:45:12:4b:12:87:1c:82:8f:59:
                    93:eb:fe:0b:b5:f9:73:0e:99:b6:04:29:20:4d:e9:
                    7a:38:b4:3c:4d:61:2c:81:50:ab:a2:fe:3c:48:7c:
                    be:a7:97:77:b4:d9:e9:28:f0:11:5d:79:88:a4:06:
                    8d:1d:8e:ec:5b:97:52:be:f0:ee:27:70:87:b5:cd:
                    26:86:0d:02:8f:b5:d6:35:c9:32:ad:a9:b0:75:2a:
                    71:f2:12:37:9f:62:c2:5d:da:8f:7d:0f:45:b5:6a:
                    f9:13:62:4b:41:45:1c:d8:ff:75:02:8d:31:4c:89:
                    84:62:13:86:30:29:e3:2a:0f:ff:45:cc:b5:e9:a4:
                    11:39:f3:2e:29:3f:6b:7f:93:75:ac:cc:01:86:17:
                    15:a3:77:8d:08:ee:09:7c:99:50:00:42:60:5b:47:
                    ac:01:35:00:c9:a7:86:b5:66:62:d7:d0:b5:6c:f4:
                    77:97:7c:ab:af:3a:c9:bf:15:18:43:7b:97:ae:01:
                    53:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3A:C4:F7:0E:68:C8:17:63:1D:6A:08:DB:67:E4:DC:66:DF:D5:12
            X509v3 Authority Key Identifier:
                keyid:33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ea:4a:76:a5:f6:17:1c:ec:c9:df:d0:96:1c:0e:43:17:41:
         b6:b9:92:a8:1f:ad:77:30:d2:e8:78:bf:b0:71:81:e5:0e:41:
         6a:c2:37:e5:f1:b6:4f:d3:83:5c:4a:3e:d8:8c:89:c1:f4:ef:
         3f:5e:1b:ec:10:7b:ed:ef:72:f6:c8:28:b4:1c:6d:11:6d:59:
         eb:98:fd:b1:55:38:75:fc:ef:38:b1:90:55:c4:a8:c5:5e:78:
         51:9f:42:b3:ed:9f:25:60:1d:0a:9b:e2:10:fa:bb:60:b4:09:
         f8:27:99:06:12:0e:b6:8e:67:d6:6a:24:0e:54:8b:5f:22:f6:
         c4:c9:d8:8c:58:4d:8e:84:49:c9:4e:8e:75:be:2a:0a:5a:45:
         e9:de:30:13:09:fd:36:ea:b5:1b:22:eb:7e:2e:5e:73:c6:fa:
         66:3b:44:08:35:23:e4:33:51:08:25:ee:d0:fe:bd:e7:96:c8:
         1f:26:d8:9f:96:e8:8b:83:8d:47:af:09:92:12:d0:02:81:b7:
         45:37:a9:97:53:77:c7:80:a8:f8:98:ee:4a:36:75:06:47:d1:
         dc:92:f0:25:07:1c:fe:ac:72:ae:b7:d5:37:22:68:19:28:46:
         d1:1b:7f:22:74:ff:7f:ea:e5:cc:a0:de:4f:f9:b0:fc:f3:a8:
         d2:4d:8b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 14:09:06 2025 by rpki-client