This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
File:                     YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft (raw, json)
Hash identifier:          VS4EzpfaD43Et0yeLrZJDeMEs3rBr/d8W1HF2wDuFxQ=
Subject key identifier:   8F:D7:34:44:40:2C:6A:56:AF:5F:54:32:43:D5:CD:38:D9:4F:53:AF
Authority key identifier: 62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77
Certificate issuer:       /CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
Certificate serial:       019B2664B10BC565BFFCB308B5BBA2575FB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
Manifest number:          01A7
Signing time:             Tue 16 Dec 2025 09:01:31 +0000
Manifest this update:     Tue 16 Dec 2025 09:01:31 +0000
Manifest next update:     Wed 17 Dec 2025 09:01:31 +0000
Files and hashes:         1: YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl (hash: IgOgVHSXE2QfDipKYA7K286+9RG7K53u5Kd2PZoMpEg=)
                          2: yJ1HWDzaQf8_v_QIkEVeJhHUsNs.roa (hash: uRF7ZuSGISVIOWjvLjFgvjfyhiciNwgKOFC9/lRcs/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 09:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:26:64:b1:0b:c5:65:bf:fc:b3:08:b5:bb:a2:57:5f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
        Validity
            Not Before: Dec 16 09:01:31 2025 GMT
            Not After : Dec 17 09:01:31 2025 GMT
        Subject: CN=8fd73444402c6a56af5f543243d5cd38d94f53af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bb:44:99:9b:f4:4a:77:30:24:4c:c9:6d:15:
                    d9:39:37:fe:93:f2:99:7b:76:df:30:29:d7:93:18:
                    53:2f:d5:3c:18:ce:b6:02:e3:33:a3:b0:df:fe:b0:
                    c7:82:6c:e9:46:29:f7:9b:d3:46:67:d2:85:cc:9b:
                    f6:ce:e1:8d:84:2b:76:be:25:27:e9:43:68:41:96:
                    6a:91:b8:64:98:91:ca:e1:49:59:87:16:2b:85:53:
                    10:80:a6:98:57:b6:71:59:be:29:60:4d:3c:a9:68:
                    ff:cb:ed:3f:50:63:b2:96:01:cf:6c:b2:f0:57:d8:
                    de:aa:0f:10:a6:7e:5a:31:fe:fd:d2:35:62:da:74:
                    73:97:93:06:9a:be:55:27:cd:2b:c6:c5:bf:3b:59:
                    18:a0:af:a0:55:35:87:30:63:e6:6e:11:c2:8e:33:
                    0a:4a:b0:f1:22:4d:6f:fe:ce:3e:bb:4f:ad:13:f9:
                    9d:37:06:0f:8a:d0:94:c4:36:fe:d4:de:78:07:b9:
                    d5:fa:b5:3e:96:43:6e:82:bf:b5:92:57:c0:57:53:
                    7f:df:b7:8f:ac:1a:0f:d2:90:9e:f8:ae:62:ab:c1:
                    4b:57:02:64:52:0c:83:73:43:36:47:41:d2:04:68:
                    8b:65:4e:12:df:b8:f4:3c:68:6b:5e:58:93:68:04:
                    e0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D7:34:44:40:2C:6A:56:AF:5F:54:32:43:D5:CD:38:D9:4F:53:AF
            X509v3 Authority Key Identifier:
                keyid:62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e5:c6:3f:60:b0:74:df:9a:32:fe:83:00:c3:d7:c3:2f:05:
         c6:c6:04:f0:47:4c:61:48:4d:58:1d:f6:7d:54:50:bf:d2:aa:
         ff:95:27:08:9b:4f:e1:2c:3e:b8:4c:16:d2:11:38:db:f2:89:
         e6:d2:53:1a:b3:ea:7c:9f:27:e0:e1:9d:0d:a8:63:81:ff:88:
         74:3a:29:f4:d2:58:ee:8a:ac:96:35:1a:b4:0d:aa:c7:9e:98:
         e7:e3:10:2d:0a:3f:00:5d:b3:78:f9:d6:af:32:04:49:2e:d4:
         e8:55:2c:c2:30:d0:09:50:dd:2a:da:5c:80:36:72:15:e0:71:
         22:cd:8a:54:79:36:e5:91:fb:2d:97:e3:4d:f3:23:2b:38:76:
         56:64:e4:68:de:7b:59:09:f5:17:27:3b:32:13:c0:8f:4e:14:
         97:bb:f9:d3:26:0b:f2:1b:58:62:0c:34:0d:6c:d4:2f:26:43:
         43:94:c2:cb:1c:ad:d5:93:ad:86:74:90:b3:90:41:62:fa:31:
         30:9c:ae:43:41:9d:7e:22:ff:f5:8d:b1:0f:bc:e1:f5:80:17:
         cf:2e:f2:58:01:d0:b5:2b:18:eb:5a:13:97:8a:8b:08:be:c3:
         62:a3:7f:c8:66:04:0d:58:94:95:d3:9a:57:82:82:44:91:a5:
         7d:99:c1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 11:25:55 2025 by rpki-client