This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
File:                     YET26nnk4qPgKos47QzTpAWROKw.mft (raw, json)
Hash identifier:          LidxploH873CCvArBmVPNDXmQyVaKb6znzxxeOJAGrg=
Subject key identifier:   38:00:78:8F:26:B1:12:C9:EB:71:5F:59:9B:75:AE:FB:23:5D:4D:32
Authority key identifier: 60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
Certificate issuer:       /CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Certificate serial:       019AEE9ABA8C6208B32E66E3B8AD049D5A7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
Manifest number:          1761
Signing time:             Fri 05 Dec 2025 13:01:48 +0000
Manifest this update:     Fri 05 Dec 2025 13:01:48 +0000
Manifest next update:     Sat 06 Dec 2025 13:01:48 +0000
Files and hashes:         1: FpSNZXq3Bs_lAOfoxnm2_1Ntexk.roa (hash: P0ueHi3T6HBQ/Yjh4YAxSote8hQe/slz/U1OtoX8X6M=)
                          2: YET26nnk4qPgKos47QzTpAWROKw.crl (hash: RxBfAwZrVPWenpWPm/L8U7nfginhG9empLTfrsBzLP8=)
                          3: iOzGDAy-qErjiYCUQPq5S2xsHRA.roa (hash: EO5Nyg7UrTNVSVoeALt1d3217TiALMgeZ+f/YmIuYh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 13:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ee:9a:ba:8c:62:08:b3:2e:66:e3:b8:ad:04:9d:5a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
        Validity
            Not Before: Dec  5 13:01:48 2025 GMT
            Not After : Dec  6 13:01:48 2025 GMT
        Subject: CN=3800788f26b112c9eb715f599b75aefb235d4d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:22:b4:f3:b8:cf:c4:d4:43:db:9a:64:2b:71:
                    bd:ba:49:28:78:e2:78:0d:f6:38:cc:9b:10:af:4b:
                    54:8b:44:fe:37:31:c5:f5:9a:f1:78:fb:0d:77:bd:
                    c3:0d:25:9a:d3:09:00:79:1e:43:61:7f:12:05:7e:
                    b1:4c:9b:16:b0:70:48:e4:13:54:16:b6:94:d2:cb:
                    68:17:30:0a:63:94:cd:87:fd:e1:d3:1b:ce:7e:d2:
                    a1:a3:dc:83:b6:b0:de:78:e2:e5:20:65:d4:af:b9:
                    c9:6a:18:14:c8:d5:dd:73:f0:ee:7f:a3:dc:44:01:
                    fc:16:13:5e:af:84:00:11:6a:c7:bc:3d:76:e6:70:
                    66:3d:f8:60:2f:18:dd:12:c0:a0:fa:5c:5a:af:de:
                    a6:e0:53:e4:fe:32:56:12:0a:d0:e6:24:33:d1:d7:
                    fc:07:1e:cc:90:88:b0:3c:ea:66:7b:77:85:56:dd:
                    6c:7c:d1:64:a4:0e:cc:ac:d2:df:bd:85:f8:f4:93:
                    3d:e4:c9:77:f6:13:4d:50:7f:a2:b4:b8:9b:b8:b3:
                    bb:f2:eb:ee:4a:43:26:e1:f3:be:ab:3a:07:e9:39:
                    69:4d:86:6b:e1:40:69:bf:a1:de:72:a1:03:82:56:
                    90:4e:14:f4:c8:61:b5:bb:f0:c6:dd:17:a9:78:aa:
                    82:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:00:78:8F:26:B1:12:C9:EB:71:5F:59:9B:75:AE:FB:23:5D:4D:32
            X509v3 Authority Key Identifier:
                keyid:60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:06:b0:35:75:08:e6:a7:ec:59:5c:07:91:f4:59:18:ff:2e:
         15:d3:b3:f4:ab:47:04:39:e0:e0:b5:30:1a:61:c7:23:7d:9a:
         8f:c9:1d:ca:07:58:de:25:e4:1f:89:d9:77:c6:f9:0b:22:64:
         85:a7:22:c9:84:0c:06:7e:67:d5:77:d6:e0:be:f6:d5:46:40:
         0e:8a:af:7c:8c:55:32:d4:b1:b5:34:90:56:b9:90:e1:15:6c:
         55:06:94:d5:aa:d3:a8:04:62:db:6a:0d:a8:9f:fb:ae:2b:5c:
         d1:ab:57:ad:33:2d:28:fb:28:5d:f5:98:5c:1b:01:16:59:b1:
         88:18:b7:c9:50:6b:65:4d:79:ee:d0:ac:6b:22:33:48:94:80:
         dd:63:46:6d:ec:00:67:fb:5b:fd:18:92:7a:51:1b:8a:ee:fb:
         90:4e:4c:b6:05:12:2b:3e:d7:b0:da:bb:08:25:1e:01:ea:86:
         b4:a0:4f:20:9a:0d:03:ec:71:4a:9e:29:0f:f2:90:c3:b2:a2:
         1e:81:f4:2b:77:47:ea:dc:60:07:ec:67:02:3c:ec:54:3f:77:
         6e:1d:d3:f8:52:f8:e9:db:7e:ca:3d:23:c1:1d:9d:c9:f4:d7:
         70:73:76:8f:63:a8:27:ca:48:66:11:53:f4:98:d6:2d:eb:fe:
         9b:05:66:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 23:04:23 2025 by rpki-client