This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
File:                     yTNIHT-khxDcuXP9zSk0De22Ipo.mft (raw, json)
Hash identifier:          cZJ2BydftrGOnMGl/NVK79rcR/QStPbrTNiOnYyfH8k=
Subject key identifier:   DF:BE:5C:40:63:9C:01:9C:47:7D:69:44:AF:CB:1C:85:97:FC:93:07
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Certificate issuer:       /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial:       019B1BAAA688751865D509332A487668BDCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
Manifest number:          1776
Signing time:             Sun 14 Dec 2025 07:02:07 +0000
Manifest this update:     Sun 14 Dec 2025 07:02:07 +0000
Manifest next update:     Mon 15 Dec 2025 07:02:07 +0000
Files and hashes:         1: HvvQQ4P4zfTIBBHttsccF48rodM.roa (hash: eIYcjO3+dzOi7TYY3sWHoKLhHWX9s3dv316lhoprHDg=)
                          2: lcnrXbBFBu5DHpybXSYL_QBSFxY.roa (hash: 55Re6AipYf4XWuugu2p6Yv9D+4CVj5GB9DhYUd+Co3s=)
                          3: xS0SlQmQEPSTI5X308pfcaxO2vE.roa (hash: wF4G59jbcX8C0L3Y4yTS+qPNuavU+1BMJghlyklDhUU=)
                          4: yTNIHT-khxDcuXP9zSk0De22Ipo.crl (hash: CAgsh9cciR0IfkKGFzNKFWz+ZoXJA7MIn28FgpTyCME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1b:aa:a6:88:75:18:65:d5:09:33:2a:48:76:68:bd:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
        Validity
            Not Before: Dec 14 07:02:07 2025 GMT
            Not After : Dec 15 07:02:07 2025 GMT
        Subject: CN=dfbe5c40639c019c477d6944afcb1c8597fc9307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:82:6d:de:ca:83:6d:8b:1d:ec:21:a0:ea:89:
                    c7:22:7d:34:9d:0c:10:58:d3:91:1d:be:87:ff:13:
                    4c:aa:cd:ee:e4:9d:5c:8b:cf:fe:61:43:a8:72:c3:
                    d8:6b:2b:d0:ae:89:d8:28:87:d1:42:e0:4a:af:df:
                    0b:0a:7f:96:0b:30:79:92:a3:72:2a:86:8f:07:7e:
                    47:20:82:1a:4d:3d:43:18:5f:63:e2:32:e5:17:2c:
                    35:db:67:a2:ca:1a:cf:91:ea:41:c7:62:28:69:d3:
                    02:18:30:b5:cf:9f:e8:17:a3:aa:d7:39:5d:5b:59:
                    17:0d:1c:94:b1:19:3d:47:68:09:ee:6f:be:da:b3:
                    be:59:a7:c8:ee:39:55:4d:98:73:5b:ce:29:a1:d5:
                    a3:0f:d4:b3:c2:ff:d2:f6:9f:8a:d6:dd:d4:a5:48:
                    b5:be:7b:df:ea:53:c1:6d:c8:4a:c2:ca:17:4f:73:
                    61:f9:af:27:26:08:3b:02:81:06:18:03:39:06:98:
                    3e:f5:bd:e9:b4:e9:a5:69:b7:68:b0:8f:32:b7:8f:
                    24:ae:74:69:df:f3:8a:c9:d2:a2:e7:34:ed:c1:c6:
                    18:46:d7:0b:60:8f:a4:1d:53:a0:b3:08:96:25:27:
                    d0:33:89:b5:c7:c9:42:da:36:21:af:b4:5a:a2:3c:
                    c8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BE:5C:40:63:9C:01:9C:47:7D:69:44:AF:CB:1C:85:97:FC:93:07
            X509v3 Authority Key Identifier:
                keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:29:6f:cc:08:57:53:62:3a:e1:66:b9:0c:73:7a:69:c0:d0:
         d8:99:0b:e9:3e:3c:e8:f7:df:66:cb:e6:60:06:d8:5d:7c:ea:
         5e:82:4e:1a:99:29:13:b0:d5:b0:c2:3f:f9:8e:d6:c5:ff:ac:
         94:17:f8:3f:93:b4:3f:95:91:ac:4c:fb:52:20:32:c8:38:29:
         93:a5:91:9c:de:da:a3:6f:4b:2a:8f:d2:73:cc:37:9c:59:49:
         d3:98:22:75:e7:0c:14:83:7c:b1:31:b6:95:9b:99:39:27:53:
         01:94:67:7d:e8:ac:27:43:f4:00:ba:5c:b5:78:5d:92:84:c9:
         ef:43:9e:f4:54:63:a9:5c:b6:73:5d:dd:45:09:2b:3c:48:7a:
         29:d0:03:0f:1a:84:3c:83:31:12:b1:e0:3e:19:7f:ab:ab:f1:
         ac:9f:9f:1e:0d:34:3c:8f:69:2c:ec:66:ea:b1:8e:98:bd:9e:
         f1:ff:e2:df:d3:c6:d2:5f:98:99:d7:c5:93:be:2f:12:dc:1a:
         94:34:4a:dd:9c:4e:c7:52:b8:43:23:88:1e:8a:e4:f0:89:5e:
         9e:0e:bf:3c:90:a4:4b:61:9b:6c:9e:b6:db:2a:c1:a5:46:b4:
         e5:61:cd:cd:54:24:38:10:6c:16:fe:2c:6d:d0:f7:22:41:0d:
         1e:50:9a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 13:59:45 2025 by rpki-client