This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
File:                     Y0JgC_HMkhaub-FpoenVQYrZOiI.mft (raw, json)
Hash identifier:          AdQagB/cbgpFx52QJvYiilwUbpmO6/+ZwVNdCzcmSig=
Subject key identifier:   1F:35:38:63:62:A6:6B:F6:55:57:E0:E0:7A:0D:95:54:1F:65:C4:DA
Authority key identifier: 63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
Certificate issuer:       /CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Certificate serial:       019B251A40C90C28B53321E953006C2830BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
Manifest number:          0DAC
Signing time:             Tue 16 Dec 2025 03:00:35 +0000
Manifest this update:     Tue 16 Dec 2025 03:00:35 +0000
Manifest next update:     Wed 17 Dec 2025 03:00:35 +0000
Files and hashes:         1: 8HjMGt2u-FXw7B9KaNMeiFRl_SI.roa (hash: PIXJikr44w+6nZYZyCRJ915rQc/SIe+DvX16n4ZT0no=)
                          2: G_qyBKK6ClXdG1bs8Wh_ckDLkeI.roa (hash: 05zKtGqeHJmsZPaIinYmSC+r/nrmG7SF+AMON4UTZOQ=)
                          3: Y0JgC_HMkhaub-FpoenVQYrZOiI.crl (hash: zR8XyVrMl1N6UYIEEIri4G9xLGv2gi3tEWqwu8FEalo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:25:1a:40:c9:0c:28:b5:33:21:e9:53:00:6c:28:30:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
        Validity
            Not Before: Dec 16 03:00:35 2025 GMT
            Not After : Dec 17 03:00:35 2025 GMT
        Subject: CN=1f35386362a66bf65557e0e07a0d95541f65c4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9e:3c:b7:e3:ed:c6:b5:a6:50:7a:c7:ba:b5:
                    7d:f5:c2:c3:bc:af:43:b3:8b:74:b4:f3:e3:8a:46:
                    e4:99:c0:1c:97:62:de:45:8b:1f:be:7f:5a:26:25:
                    7c:b9:d2:f0:d4:63:c4:44:bc:6a:7d:41:1e:59:4e:
                    a5:a0:05:11:4f:04:1b:7d:ea:a4:a6:d7:bd:a2:f2:
                    1d:27:e1:96:f2:10:0b:2e:81:f8:88:88:a8:c0:bb:
                    27:ad:f8:71:58:08:cb:b5:df:0d:7b:1b:21:99:5e:
                    d7:34:42:67:eb:f0:7e:4d:e2:b9:bc:b9:b5:e2:f1:
                    b2:52:36:1b:f1:9b:c8:ad:41:b4:18:35:fd:94:f1:
                    95:23:05:a3:1e:15:c0:05:2a:42:64:51:ad:55:22:
                    b6:b8:db:0a:e4:14:f8:2b:58:16:69:b8:7c:5b:c8:
                    bc:cb:08:18:fe:cd:51:19:63:4f:c9:93:1f:5e:2e:
                    0a:53:a3:2a:6f:af:bc:c7:8a:66:53:c1:a0:e8:1c:
                    27:6b:09:2d:a3:c0:83:a3:df:06:27:cf:ed:d9:1c:
                    7a:8e:a4:c2:c3:24:71:57:88:05:f0:af:ea:37:9c:
                    4f:6b:73:73:db:4b:c6:e0:37:35:3a:27:90:8d:a3:
                    16:22:04:47:5e:8d:bf:3b:22:c6:a3:57:40:be:e7:
                    6e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:35:38:63:62:A6:6B:F6:55:57:E0:E0:7A:0D:95:54:1F:65:C4:DA
            X509v3 Authority Key Identifier:
                keyid:63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c4:95:b5:e9:1a:5c:34:34:9b:91:4a:73:d3:95:b5:02:9d:
         58:31:bd:f6:e5:9b:92:1b:cf:5c:92:c3:a3:8c:2d:70:28:ca:
         92:c4:14:a2:11:66:ce:a2:14:46:84:9b:2f:ff:c9:3e:fd:50:
         5e:cc:2a:b0:ed:d5:40:d7:0c:47:a1:e9:b1:d7:65:74:a8:74:
         21:f2:ea:02:69:4e:ff:cb:3e:fc:e6:5f:98:39:27:1a:09:d7:
         8a:01:18:b7:64:27:ef:e0:0d:6d:97:cb:0b:dd:f7:da:d7:b5:
         c3:32:df:d3:5c:7c:03:f5:00:cb:03:0b:fa:47:df:bb:42:0f:
         09:b6:01:b4:86:55:75:5a:f9:89:4a:fa:08:1e:4e:bd:ef:59:
         6a:02:6e:db:2c:1b:12:d3:1e:16:03:73:54:f7:54:8d:68:72:
         6c:2d:b8:31:41:0b:31:ec:2a:e7:09:63:6d:fb:d0:7c:07:f7:
         eb:e8:1f:1c:47:20:90:b5:ec:24:96:d9:77:6c:d2:2f:e2:0d:
         37:78:27:06:13:5d:24:ce:9f:16:64:a4:7b:98:4f:85:71:cd:
         ab:0e:74:6d:c1:fc:c1:eb:69:8f:07:a4:ff:04:58:bc:8b:6b:
         30:c5:fd:63:5d:88:f8:b8:c5:1c:3d:9f:2f:4e:c4:bc:c2:90:
         a0:24:3d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 07:56:10 2025 by rpki-client