This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File:                     kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier:          0h9QOQQX64VratumGnWf/6oMxG7DhINQ1CdkhXVryYI=
Subject key identifier:   17:79:D7:41:C2:B2:6D:54:0E:62:3A:3E:F6:6F:62:41:F4:51:0D:BC
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer:       /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial:       019AF57780F00D2447E1BD5C0A75F79BC79C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number:          0C85
Signing time:             Sat 06 Dec 2025 21:00:40 +0000
Manifest this update:     Sat 06 Dec 2025 21:00:40 +0000
Manifest next update:     Sun 07 Dec 2025 21:00:40 +0000
Files and hashes:         1: Ms3efVN_XUHd4QxKef3_YdRpvGM.roa (hash: JqLniVKizln7qKYMvWy43G4dVpEgMo9SnC/GlXkBUPw=)
                          2: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: oqmSa8dpA31ag8yM/AQH+2mgPd6eVyWo98J7APPxPe0=)
                          3: uDDSIBamhzWkhMClbzH_9oqf3KA.roa (hash: m1HA6uhPnc0quVohM65OVF8eaR3/NxsjEYFcU7UUjUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:77:80:f0:0d:24:47:e1:bd:5c:0a:75:f7:9b:c7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
        Validity
            Not Before: Dec  6 21:00:40 2025 GMT
            Not After : Dec  7 21:00:40 2025 GMT
        Subject: CN=1779d741c2b26d540e623a3ef66f6241f4510dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:dc:82:60:cf:6b:20:94:cb:ce:ca:96:59:
                    62:5b:e0:bd:61:1e:42:9a:04:5a:a6:75:a1:ec:05:
                    65:1e:83:c5:8d:3f:96:77:32:c5:9d:62:7b:d8:5b:
                    43:3c:a9:02:dc:bf:a4:b2:e9:47:6e:2f:51:22:cf:
                    65:92:26:f7:7b:a5:38:0e:af:e2:b9:e8:64:a1:06:
                    54:81:f5:19:a9:21:4c:54:09:09:01:18:19:3f:a3:
                    ad:74:5f:7e:ce:f0:1e:88:c1:0d:12:16:ce:2a:d3:
                    ad:0a:37:7f:89:94:c1:bf:6f:ba:42:82:a9:fe:d8:
                    c9:15:dd:b8:b4:bb:45:fd:ab:ac:41:69:8a:f8:de:
                    58:88:75:43:aa:57:c8:65:04:28:39:ea:4b:f0:f4:
                    53:2a:61:f5:72:c3:ac:bf:f3:20:50:8f:ac:c6:29:
                    04:d1:5e:aa:95:9a:4b:31:af:81:69:e1:48:0e:f4:
                    82:88:d2:21:f9:be:84:cf:f2:b5:78:b1:5e:e7:1d:
                    7c:07:1c:45:13:97:aa:d5:76:ae:47:72:04:13:6e:
                    b5:e2:37:fc:0e:eb:a1:f8:ff:a3:a6:4d:a8:14:27:
                    85:0c:d9:f5:60:ca:26:b4:aa:b6:43:f1:ad:82:00:
                    6d:ae:b2:61:24:3e:1b:67:a0:a4:5b:85:1d:b1:5b:
                    3d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:79:D7:41:C2:B2:6D:54:0E:62:3A:3E:F6:6F:62:41:F4:51:0D:BC
            X509v3 Authority Key Identifier:
                keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:e8:dc:b4:18:d3:94:5c:03:5e:eb:6a:44:bb:42:0f:ab:02:
         fa:da:f2:52:0d:9e:79:bd:15:77:b9:fc:1e:d8:e2:20:7e:c7:
         ed:07:f5:f1:54:00:72:eb:ed:f5:4e:6d:9f:42:5f:11:dc:7c:
         5d:97:31:50:e3:d8:99:3e:f6:64:f2:1f:db:a0:e9:d5:e0:26:
         58:ce:28:b1:07:79:c6:25:dc:77:04:ac:a3:32:e4:56:8c:9d:
         15:7e:a4:ac:1a:ab:2b:e7:e7:29:56:2a:1d:5d:19:a9:01:ef:
         d8:9c:e3:05:62:7f:69:64:ab:43:5d:9c:d1:ef:ff:04:cb:39:
         67:14:be:c2:0c:62:ae:4e:f2:8c:b8:5e:55:6d:60:fb:05:b7:
         eb:41:57:a4:d7:73:e3:fc:87:e1:5a:3f:60:40:6b:8e:23:ea:
         ea:d4:2b:22:29:7a:88:6b:1f:09:ec:fb:71:a0:c5:7a:57:c9:
         0a:7d:b2:08:12:3f:63:79:cc:90:e7:a9:77:bb:52:35:09:18:
         a2:4b:6b:85:87:41:e8:3b:0a:26:a2:96:ca:10:bd:79:6f:74:
         0a:e3:bc:16:5e:e4:7c:9c:4f:8d:64:da:f5:bc:ca:21:53:f0:
         8b:34:a5:f9:6e:74:c6:5a:a7:a4:59:6c:bf:8d:c2:21:18:f7:
         05:3e:d5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:54:30 2025 by rpki-client