This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
File:                     yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft (raw, json)
Hash identifier:          4pSE+GhbBO8MY/j3xwqEnG3E41rAGP+IsPJAPyxUQYI=
Subject key identifier:   FB:51:BD:14:51:7C:96:5D:EB:85:DA:A3:55:82:02:BC:F7:76:AE:8F
Authority key identifier: C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7
Certificate issuer:       /CN=c9392c3276b243aff740a082c588fb73941ebbf7
Certificate serial:       019B3231515BB0B8C62CD5F7A3CD71110F75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
Manifest number:          06F5
Signing time:             Thu 18 Dec 2025 16:00:51 +0000
Manifest this update:     Thu 18 Dec 2025 16:00:51 +0000
Manifest next update:     Fri 19 Dec 2025 16:00:51 +0000
Files and hashes:         1: aC22qm65HmlnQmRshJm7pr66v5M.roa (hash: LObDHQ4gNcpulvuWrsjsmncwDPjtYz0pJfy6Qo6CsRI=)
                          2: yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl (hash: dvMfCavygoBW63H6bKa9xS/nWfeIadb2uMymSBqc/ZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:32:31:51:5b:b0:b8:c6:2c:d5:f7:a3:cd:71:11:0f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9392c3276b243aff740a082c588fb73941ebbf7
        Validity
            Not Before: Dec 18 16:00:51 2025 GMT
            Not After : Dec 19 16:00:51 2025 GMT
        Subject: CN=fb51bd14517c965deb85daa3558202bcf776ae8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4f:93:d8:d1:6e:32:30:b0:25:9f:28:2f:f0:
                    14:1c:5b:a4:26:86:45:0f:60:3e:d6:39:b6:71:23:
                    77:30:47:e3:21:ac:fc:b2:53:00:14:62:73:d5:fe:
                    66:20:ab:7b:61:72:46:f3:69:72:b4:cd:05:9a:11:
                    fa:c1:51:6c:a7:ea:87:ce:58:b8:6c:4c:e0:6c:62:
                    ad:2d:44:e1:20:ca:ca:4b:81:62:d6:3c:99:e9:e0:
                    0f:66:7c:25:dc:e0:87:c5:a5:76:70:10:44:4c:71:
                    ef:dd:fa:76:ec:b2:5b:8b:c5:bb:60:d1:ed:b5:e1:
                    57:3d:f4:2d:7d:da:7b:bd:8d:29:33:a0:6f:6d:40:
                    4f:9b:44:bb:20:19:b3:2f:11:1a:f1:88:93:a2:85:
                    09:13:e3:9a:db:de:cb:92:8d:f7:f4:a3:f6:06:77:
                    1e:c0:70:83:95:79:e4:95:ab:85:15:2b:6f:20:54:
                    a7:31:57:20:1f:f7:dc:75:a3:5c:ee:4c:7b:aa:8f:
                    f1:9c:ae:a9:d1:b5:5b:58:ba:74:b8:07:87:95:4d:
                    42:d4:65:83:a9:ec:6b:d5:94:4b:95:e6:c5:4d:67:
                    3f:fb:47:44:eb:76:4e:e0:9c:9b:a9:9f:c9:f6:bc:
                    95:fc:9e:67:d6:84:e9:7a:c0:a7:f9:f9:78:3c:83:
                    31:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:51:BD:14:51:7C:96:5D:EB:85:DA:A3:55:82:02:BC:F7:76:AE:8F
            X509v3 Authority Key Identifier:
                keyid:C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:5c:05:d7:0a:0a:5c:8b:55:01:f1:b8:2e:22:d8:f1:87:49:
         e6:b3:72:ac:ee:44:db:9c:84:7d:58:bb:87:1f:db:2c:60:d4:
         4b:08:6e:37:21:8e:00:20:70:d6:b8:5b:8e:f8:59:bf:d0:2a:
         c4:c7:20:b5:dd:3c:0a:fc:81:ad:01:20:7b:4a:ee:46:e6:84:
         91:0c:da:f1:11:f6:fd:8c:48:ed:51:0c:fb:92:4c:22:e8:02:
         86:1d:78:2b:0b:31:e5:61:62:ee:e3:2c:8a:b8:6e:27:7c:96:
         c9:e2:50:83:d0:ae:0c:30:71:7a:46:13:ed:d5:24:99:a7:ba:
         c6:0f:76:da:69:f8:df:0a:a7:47:30:85:6a:a1:1e:97:a6:2b:
         f5:21:70:2b:9e:e3:9f:15:1c:e8:6c:72:fa:f4:11:51:97:13:
         2a:f4:94:32:ef:9a:c1:ab:1a:8e:d5:c9:93:8b:a2:8b:c4:e4:
         cd:74:7b:d8:2e:0c:76:58:b0:d8:d4:0c:0a:0b:4c:f8:d5:be:
         03:a5:90:a2:d5:dc:75:9c:dd:13:2a:d8:3f:08:82:f9:80:a5:
         61:1c:4b:1a:39:0c:c0:0e:e3:e9:36:26:f3:97:90:eb:6b:3e:
         e0:5a:7a:f8:13:0b:0e:f2:a0:26:6b:96:a2:eb:29:ad:4e:c4:
         d4:bc:d4:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsyMVFbsLjGLNX3o81xEQ91MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MzkyYzMyNzZiMjQzYWZmNzQwYTA4MmM1ODhmYjczOTQx
ZWJiZjcwHhcNMjUxMjE4MTYwMDUxWhcNMjUxMjE5MTYwMDUxWjAzMTEwLwYDVQQD
EyhmYjUxYmQxNDUxN2M5NjVkZWI4NWRhYTM1NTgyMDJiY2Y3NzZhZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3k+T2NFuMjCwJZ8oL/AUHFukJoZF
D2A+1jm2cSN3MEfjIaz8slMAFGJz1f5mIKt7YXJG82lytM0FmhH6wVFsp+qHzli4
bEzgbGKtLUThIMrKS4Fi1jyZ6eAPZnwl3OCHxaV2cBBETHHv3fp27LJbi8W7YNHt
teFXPfQtfdp7vY0pM6BvbUBPm0S7IBmzLxEa8YiTooUJE+Oa297Lko339KP2Bnce
wHCDlXnklauFFStvIFSnMVcgH/fcdaNc7kx7qo/xnK6p0bVbWLp0uAeHlU1C1GWD
qexr1ZRLlebFTWc/+0dE63ZO4JybqZ/J9ryV/J5n1oTpesCn+fl4PIMxtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtRvRRRfJZd64Xao1WCArz3dq6PMB8GA1UdIwQY
MBaAFMk5LDJ2skOv90CggsWI+3OUHrv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVRrc01uYXlRNl8zUUtDQ3hZajdjNVFldV9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yNTZjYjYtZGM0Mi00MWE1LWI5MjAt
MjRjYmExYzAzYzk5LzEveVRrc01uYXlRNl8zUUtDQ3hZajdjNVFldV9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yNTZjYjYtZGM0Mi00MWE1LWI5MjAtMjRjYmExYzAzYzk5
LzEveVRrc01uYXlRNl8zUUtDQ3hZajdjNVFldV9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlwF1woK
XItVAfG4LiLY8YdJ5rNyrO5E25yEfVi7hx/bLGDUSwhuNyGOACBw1rhbjvhZv9Aq
xMcgtd08CvyBrQEge0ruRuaEkQza8RH2/YxI7VEM+5JMIugChh14Kwsx5WFi7uMs
irhuJ3yWyeJQg9CuDDBxekYT7dUkmae6xg922mn43wqnRzCFaqEel6Yr9SFwK57j
nxUc6Gxy+vQRUZcTKvSUMu+awasajtXJk4uii8TkzXR72C4Mdliw2NQMCgtM+NW+
A6WQotXcdZzdEyrYPwiC+YClYRxLGjkMwA7j6TYm85eQ62s+4Fp6+BMLDvKgJmuW
ousprU7E1LzUpA==
-----END CERTIFICATE-----
Generated at Thu Dec 18 23:27:49 2025 by rpki-client