This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
File:                     phraYSAkE82Pyi9JdCUnrQIflnY.mft (raw, json)
Hash identifier:          wBDxMmSPNnnuAEasb7UTbg+JdPXwZxxr8QuGRY+Ilh4=
Subject key identifier:   7B:B9:62:47:65:24:8A:84:05:19:61:3F:2F:66:3E:34:B5:64:4E:FF
Authority key identifier: A6:1A:DA:61:20:24:13:CD:8F:CA:2F:49:74:25:27:AD:02:1F:96:76
Certificate issuer:       /CN=a61ada61202413cd8fca2f49742527ad021f9676
Certificate serial:       019B34FBA37BC09586335A5B1BA7E87543E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
Manifest number:          1785
Signing time:             Fri 19 Dec 2025 05:01:04 +0000
Manifest this update:     Fri 19 Dec 2025 05:01:04 +0000
Manifest next update:     Sat 20 Dec 2025 05:01:04 +0000
Files and hashes:         1: _6cfi2Dj44vxaZWzfEwd2jk1pu4.roa (hash: 0LoAOyQFdU27wEYvA4eRFUQBIfRX8L27NeM+jRnEJAQ=)
                          2: _TJtE7-5a5UX2DefIW3iB1z5iGY.roa (hash: PhkMKp+FPGv2w6bMrKJv4pkTot0QbsXs9wqx+PCqH+s=)
                          3: phraYSAkE82Pyi9JdCUnrQIflnY.crl (hash: vV2bYP1+z1Yl4oEhG0TtsWjmusbtSV5dw0RxA7m7QLQ=)
                          4: sZajNmManlPTaNoPcFuaAKck-nc.roa (hash: R4UFS0zdQGwYoD2q6eTRAVpHRYbKs3X1MYzT1lIbryU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:34:fb:a3:7b:c0:95:86:33:5a:5b:1b:a7:e8:75:43:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a61ada61202413cd8fca2f49742527ad021f9676
        Validity
            Not Before: Dec 19 05:01:04 2025 GMT
            Not After : Dec 20 05:01:04 2025 GMT
        Subject: CN=7bb9624765248a840519613f2f663e34b5644eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3f:49:c8:67:8b:eb:20:27:25:fb:45:9f:f1:
                    e0:6e:64:11:33:b4:8c:db:e8:a8:20:84:75:3b:f9:
                    7b:e2:1e:9b:fe:4a:c1:dd:76:8f:c2:a1:52:1f:03:
                    08:7a:32:16:fa:ec:44:26:f5:96:1e:9e:0a:16:cd:
                    f2:6c:d8:3c:9c:06:16:b2:e6:d5:88:cd:aa:22:62:
                    3a:31:e2:19:3d:8f:b1:6a:91:96:42:fe:01:b2:f0:
                    6a:c3:4f:71:23:c9:41:4c:8c:ad:e5:1c:5f:e1:59:
                    ef:98:a6:4d:2c:64:82:27:cd:a7:5f:c1:d7:f8:1b:
                    77:9e:37:de:8e:54:09:52:50:8d:ec:ad:d9:31:8f:
                    c5:49:b7:ad:4a:30:15:99:cf:af:d9:56:22:b7:b3:
                    53:bb:5f:8a:ac:eb:7c:e3:fb:b4:81:0c:a1:8f:3a:
                    e4:1c:94:da:9d:50:da:29:7f:50:bf:76:11:20:87:
                    b1:fe:4e:f9:16:04:84:5f:01:e5:5d:80:60:fe:3f:
                    74:1a:21:28:a8:b5:1e:f9:5b:93:2d:da:ad:ad:35:
                    b6:66:e5:e6:8a:ce:35:9d:38:ac:38:44:d2:41:5d:
                    5e:d1:a2:6d:7e:5e:a7:8d:ff:b8:e2:15:76:7a:0c:
                    b1:07:6c:ba:e0:6a:ad:b2:50:e1:af:aa:c9:80:7b:
                    37:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B9:62:47:65:24:8A:84:05:19:61:3F:2F:66:3E:34:B5:64:4E:FF
            X509v3 Authority Key Identifier:
                keyid:A6:1A:DA:61:20:24:13:CD:8F:CA:2F:49:74:25:27:AD:02:1F:96:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:3b:19:b8:4b:5e:65:fb:95:a6:c7:e4:2b:7d:36:ce:9a:84:
         69:61:fa:03:e5:03:2d:16:9a:96:a5:48:57:66:68:44:68:8d:
         32:b1:77:63:88:ac:85:64:2c:c9:11:bf:73:b6:b3:0e:f0:66:
         2f:4a:74:a1:24:d3:36:14:3a:f3:14:2a:1f:26:86:48:d2:ce:
         31:ef:59:dc:61:62:2f:c1:ab:14:be:d3:aa:f6:0b:41:7a:f8:
         49:77:7d:f3:53:dd:36:d6:60:f7:f7:4e:7e:75:45:98:54:f4:
         f7:a9:f3:4e:39:3e:a5:7f:19:6f:cc:2d:7f:64:5e:c5:56:22:
         dc:70:56:4b:71:3b:d3:15:9c:a8:bd:4f:a4:a2:18:68:9a:46:
         e7:f7:84:77:c4:70:04:98:d4:4b:07:57:61:f0:93:0a:a9:91:
         76:b1:94:a2:17:76:bb:52:38:f3:93:9f:dd:7b:73:0a:df:b8:
         d4:8b:fc:4a:ac:90:51:c3:5d:9d:65:25:3e:3b:c8:cc:30:b0:
         cf:43:d9:05:be:f5:4c:10:b4:a2:6d:91:87:2a:e7:12:73:60:
         9f:6a:97:69:1c:64:b2:2f:3b:13:14:5d:48:23:29:1b:ff:a7:
         78:4f:dd:fb:51:d5:fe:e1:a6:87:18:b2:4f:ab:b2:52:d5:14:
         31:b8:59:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:08:11 2025 by rpki-client