This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
File:                     YMjVd0f3KXAO8vVhT2397I0Rny0.mft (raw, json)
Hash identifier:          uqvBywKxM1dp1MCK8o+1TbeC9WHGccMaFYIC+itooV4=
Subject key identifier:   58:2F:61:29:32:F7:7C:D4:9D:B5:BE:AD:D5:9B:7A:2C:4F:6B:61:4D
Authority key identifier: 60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D
Certificate issuer:       /CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d
Certificate serial:       019B10134A838EAC59BDB919072E97EC6FC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
Manifest number:          104C
Signing time:             Fri 12 Dec 2025 01:00:58 +0000
Manifest this update:     Fri 12 Dec 2025 01:00:58 +0000
Manifest next update:     Sat 13 Dec 2025 01:00:58 +0000
Files and hashes:         1: YMjVd0f3KXAO8vVhT2397I0Rny0.crl (hash: gN5EcPhbtFpHgPJg0Cei3FUmfarf7mw8gnhCM6KXTC8=)
                          2: qx-NGj8MV_Cd9zpPet-1VEa08Ro.roa (hash: cxZbSa6oQLmYFFxeIAfjlhTWw1+qGjLvscb3SdGJg1o=)
                          3: r2K_C06ic0Dj0a3NFZhhI6ooNvs.roa (hash: bne8Sm5wB0CMu858I+GoE6ZpkxWpdhA80NITFW1Cun8=)
                          4: yeRaarOsqQL6T8MId8Dw-zjDpyI.roa (hash: PcKi02vr0pDiDVlpa/LbtFTT0UyPuUQNtlWvZyQzOuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:10:13:4a:83:8e:ac:59:bd:b9:19:07:2e:97:ec:6f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d
        Validity
            Not Before: Dec 12 01:00:58 2025 GMT
            Not After : Dec 13 01:00:58 2025 GMT
        Subject: CN=582f612932f77cd49db5beadd59b7a2c4f6b614d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e2:d0:db:35:d5:5c:2e:e8:2c:3a:1e:f9:11:
                    be:60:4d:0d:37:4f:87:67:18:2e:45:03:6d:17:44:
                    92:3d:6c:47:f2:7e:16:5b:3a:7e:7c:9c:85:f7:7c:
                    be:f6:d4:7e:0d:ec:3e:db:af:77:c2:9e:92:dd:4a:
                    2d:c2:e7:0d:b2:d1:d3:2e:bd:b4:c8:82:ef:da:fe:
                    bd:db:90:5a:32:bf:92:6e:38:28:fb:f7:5a:79:2e:
                    fb:11:0b:f9:65:31:93:80:2c:47:eb:51:15:84:61:
                    3d:79:97:57:80:4a:d5:0e:a8:a9:6f:be:26:60:a9:
                    e8:69:55:5b:b0:ee:9b:74:3a:98:62:d0:bf:03:79:
                    28:e6:82:8c:11:a1:be:0d:f6:d8:8b:2d:3a:41:f1:
                    87:05:4e:41:25:2b:cf:49:1b:52:d4:df:a5:35:e9:
                    ef:49:e7:1d:2b:37:8a:3c:cf:2e:99:93:8a:73:51:
                    fa:d2:12:b6:3f:61:a4:23:95:d0:d8:91:22:e7:71:
                    3c:c9:a8:84:7e:c7:6d:f3:e5:20:e3:fb:a1:9f:a6:
                    62:da:00:4e:6a:84:6d:71:4f:e5:ed:c4:2c:0c:6e:
                    63:aa:88:6f:b8:24:ea:01:43:f5:18:22:54:80:84:
                    da:37:f2:e9:cf:18:25:e4:2b:0f:a3:19:d4:1d:e3:
                    bc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2F:61:29:32:F7:7C:D4:9D:B5:BE:AD:D5:9B:7A:2C:4F:6B:61:4D
            X509v3 Authority Key Identifier:
                keyid:60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:38:9c:d5:7b:f4:ec:1c:12:8e:30:7b:e3:b8:74:0f:c5:09:
         de:8c:25:0e:a7:7e:30:b3:de:b1:2c:04:ff:84:c4:c2:3f:7c:
         03:07:07:31:ce:8a:14:da:32:32:4c:d9:a1:f5:ca:ea:d6:b8:
         ff:11:7f:dc:20:37:c7:85:79:4c:4c:fa:df:b6:ae:e3:98:67:
         60:3d:13:9d:80:f3:87:31:7f:35:0c:06:65:88:ac:73:c2:0d:
         2f:b2:c3:ee:fc:50:6e:38:31:f2:a3:e8:d0:2f:0c:f7:08:66:
         bf:c2:18:e4:0e:44:16:83:a1:41:d0:fd:e8:ce:3b:06:e5:85:
         12:d8:95:3a:5a:08:c0:df:0a:8d:cf:94:97:07:82:37:ab:65:
         03:58:ff:05:c7:74:7e:a0:1c:44:b4:02:20:cc:e6:6d:21:28:
         eb:33:ef:b8:dd:e0:05:b1:f7:ed:6a:4a:38:af:af:b5:60:a2:
         58:6a:6c:60:ad:d3:51:0c:cc:4d:27:ce:1a:ff:a6:00:d6:e9:
         ae:f5:1c:bd:a8:a7:d8:ba:1c:0d:9d:9d:a2:ae:79:c0:b1:54:
         67:ca:9f:34:89:b7:3e:a3:1a:89:86:b8:fc:07:19:e0:bf:a5:
         5d:f5:40:5f:bc:24:7a:4c:f9:58:fd:7c:c9:4f:d9:61:d4:77:
         05:97:07:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 09:26:25 2025 by rpki-client