This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
File:                     YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft (raw, json)
Hash identifier:          m0qTcq17RJxMdvHSnhUj7FMeYBUg5JthVkHVZ4u26bw=
Subject key identifier:   86:8D:5C:CF:30:10:CB:62:AD:65:4D:4D:F5:6D:49:51:31:04:25:74
Authority key identifier: 62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50
Certificate issuer:       /CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
Certificate serial:       019B2F676126AEE5A0D2961CE6D214D64D15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
Manifest number:          177F
Signing time:             Thu 18 Dec 2025 03:01:02 +0000
Manifest this update:     Thu 18 Dec 2025 03:01:02 +0000
Manifest next update:     Fri 19 Dec 2025 03:01:02 +0000
Files and hashes:         1: Fd7jj4UgNX8KUEunLGyTOECk2zM.roa (hash: 4ykrgJNWkElQuXhdhPDtDMLnIYLOev4Sm6TYtDwClXU=)
                          2: YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl (hash: x7Gx1KqR19SsRRwnqDb/JhVBLTTf3pwKwlQKRu3xIDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 03:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2f:67:61:26:ae:e5:a0:d2:96:1c:e6:d2:14:d6:4d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
        Validity
            Not Before: Dec 18 03:01:02 2025 GMT
            Not After : Dec 19 03:01:02 2025 GMT
        Subject: CN=868d5ccf3010cb62ad654d4df56d495131042574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3d:63:ab:ea:93:0f:b3:81:bf:0b:9a:3b:67:
                    93:d1:71:9c:6e:f7:95:cd:6b:96:14:01:79:b2:f5:
                    5b:63:be:97:38:63:d7:64:1c:d8:c7:ac:c9:1d:84:
                    68:8a:bb:d4:db:67:4f:ad:1c:60:3a:93:88:bb:de:
                    7f:89:65:94:6c:03:02:22:37:1b:88:33:74:52:73:
                    0f:a9:58:1e:10:26:31:cf:8f:b5:95:88:91:d2:6c:
                    49:c3:f9:91:22:69:93:ad:2c:53:11:7e:67:62:c5:
                    37:4e:7a:db:de:9d:cd:f1:42:f4:3b:22:ce:12:86:
                    7f:42:7c:62:73:5f:5b:41:89:af:8b:da:f6:a2:e7:
                    75:44:62:60:00:d0:3c:c6:99:b0:d1:f4:4a:89:8e:
                    1a:b0:2f:0a:80:9d:4e:ca:43:e7:0c:53:0a:1f:bb:
                    5e:49:c3:bc:55:41:9c:1e:e7:de:9b:57:79:36:ee:
                    71:50:18:9e:e8:18:4a:7a:93:6f:c1:bd:63:e3:41:
                    69:e1:b2:b6:78:22:97:7a:15:12:9c:36:28:2d:9b:
                    4c:ce:d5:91:d4:f0:d6:d3:93:26:e8:2c:d6:87:17:
                    e4:76:46:d0:28:c8:71:f7:11:1c:9f:14:d0:f1:cb:
                    9f:b3:f2:59:89:57:1e:c2:0a:36:d7:eb:f5:d0:43:
                    1b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8D:5C:CF:30:10:CB:62:AD:65:4D:4D:F5:6D:49:51:31:04:25:74
            X509v3 Authority Key Identifier:
                keyid:62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:27:73:c2:60:87:4d:9d:d3:ff:b7:c7:5e:e2:45:27:65:f5:
         27:db:b3:10:ad:1c:57:ce:56:20:4b:ff:ed:23:a0:b5:54:66:
         7e:03:ca:ee:f9:10:0a:92:82:ca:47:89:60:78:02:71:bf:9c:
         fe:b2:8c:9d:19:73:79:ef:90:f1:8b:5e:d9:e1:d7:b1:d1:77:
         a0:0a:7c:ea:ca:5f:35:2b:72:7c:06:37:df:bd:14:88:db:fe:
         09:78:2c:bf:e7:67:17:ce:12:8c:10:bc:4f:2f:08:c7:eb:77:
         52:c1:53:1f:8f:23:14:37:64:11:00:ba:68:de:e2:3c:6b:01:
         b1:98:56:54:ab:73:5d:60:a2:e3:d7:79:4b:07:1f:3d:29:c7:
         3f:da:0b:2b:6a:de:9e:85:40:d9:5d:32:46:ae:4a:78:29:40:
         9d:16:25:0a:4a:85:55:df:dc:7a:26:6a:77:cf:20:5b:ce:de:
         34:da:f5:ad:31:6e:68:0c:48:17:0e:15:bf:dd:1e:20:27:d3:
         14:9e:dc:81:06:83:3f:92:f7:e4:f5:98:fc:c7:b0:1f:65:86:
         44:35:d9:90:db:a2:56:ba:48:98:18:72:8e:01:dc:3c:a2:3f:
         c4:e6:4b:67:d7:99:05:f4:ef:62:88:6d:3f:36:5a:e1:27:da:
         78:a0:28:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 09:32:02 2025 by rpki-client