This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
File:                     l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft (raw, json)
Hash identifier:          Jh/lh+JVhciJsMmE1N31v7URRPw/R3BeySRhmnLDsNk=
Subject key identifier:   E5:0B:52:53:5C:8F:7F:97:49:65:40:11:9A:04:A0:8A:82:BD:8C:79
Authority key identifier: 97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
Certificate issuer:       /CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Certificate serial:       019B12A63B0D39336A4A9691583676F73D01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
Manifest number:          0975
Signing time:             Fri 12 Dec 2025 13:00:42 +0000
Manifest this update:     Fri 12 Dec 2025 13:00:42 +0000
Manifest next update:     Sat 13 Dec 2025 13:00:42 +0000
Files and hashes:         1: 0i_YlSLjNRB30UESNfxOlGgXI04.roa (hash: mrgCCvd59tuwyCrIfMNAZk14JnYczApGJpZMZMc86cI=)
                          2: l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl (hash: cikVm/H6AiosVw96LDxOSneZreIsH6PqSvWNoA98k6Y=)
                          3: nYzAsbllFT7Lr_SB7POfofSL3LI.roa (hash: EHarQeauYC+jtiVvfxPF0hW/Y2vVhZb67l4OYu1uAWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:12:a6:3b:0d:39:33:6a:4a:96:91:58:36:76:f7:3d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
        Validity
            Not Before: Dec 12 13:00:42 2025 GMT
            Not After : Dec 13 13:00:42 2025 GMT
        Subject: CN=e50b52535c8f7f97496540119a04a08a82bd8c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:39:60:3b:79:91:e0:c1:4f:59:b7:73:bf:98:
                    6a:02:71:ed:7c:5a:21:eb:87:60:b3:9d:a5:b7:f1:
                    46:ab:b3:0d:d7:af:34:96:1b:60:5d:5e:ba:6c:e7:
                    7e:95:c4:e0:e0:7c:ea:06:37:37:83:5c:21:3e:c1:
                    e3:be:7a:65:43:35:f2:e1:d8:99:85:f7:38:08:96:
                    1c:68:ce:e7:09:c0:ad:6e:6b:cf:5d:3a:87:30:65:
                    63:9b:2f:ae:21:c8:58:8b:a2:19:e1:93:7f:07:4a:
                    dc:0f:8a:08:a1:3f:cb:05:c6:8d:7d:90:c6:7b:e8:
                    c4:eb:df:5b:dd:ac:1b:b8:f0:0f:91:93:ce:5f:64:
                    c9:63:9b:33:04:c5:c1:b2:21:a3:af:fb:74:88:26:
                    e0:a6:c9:1c:b8:4c:11:31:1d:6e:b7:85:6c:c9:9b:
                    80:40:6e:20:e7:64:44:07:2e:74:d3:6e:90:38:fd:
                    87:cb:f1:d9:f4:b1:b5:c3:94:f3:3a:1a:e0:8f:e0:
                    d9:8d:63:90:40:9f:99:c3:91:09:78:2e:7a:36:a1:
                    4a:6f:8b:42:fa:cf:03:87:af:63:1e:37:4e:d4:84:
                    f4:9a:35:3d:20:2e:1b:d7:34:bc:6d:e9:6c:99:2a:
                    40:dc:df:52:98:d1:56:c7:46:fe:e4:e3:5e:58:42:
                    cc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0B:52:53:5C:8F:7F:97:49:65:40:11:9A:04:A0:8A:82:BD:8C:79
            X509v3 Authority Key Identifier:
                keyid:97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a9:61:e4:41:9d:83:5e:f2:12:3e:50:2b:8b:14:f1:55:0f:
         c5:a3:af:c5:4a:c9:72:2e:e0:ec:a4:32:d1:a9:66:22:48:47:
         57:85:69:d2:3d:72:24:29:67:37:c4:15:fe:53:f5:fc:a1:e4:
         d2:a9:55:5d:0a:b8:34:75:4c:f0:3d:cd:f1:b2:e2:34:68:51:
         0f:df:14:8d:53:83:05:e0:69:25:24:a8:cc:5a:6a:17:f8:97:
         b4:da:70:a6:f4:86:50:90:2f:52:35:a7:86:64:67:5d:f6:43:
         56:88:fd:f9:70:ef:d8:35:5e:ed:61:ae:74:1a:93:9d:c0:b1:
         89:ed:9c:b8:53:6e:4c:02:ce:25:b8:2f:2b:9a:a4:a8:b8:08:
         7b:42:31:22:06:a1:f6:f9:4a:94:40:0b:33:03:5a:89:e0:eb:
         f2:54:ae:05:c7:62:3a:a0:8b:b2:44:41:9c:fc:d8:3f:b5:6b:
         42:17:fd:0b:7d:6a:74:fd:d1:25:a9:8a:15:15:a4:df:9d:d1:
         14:54:29:99:a8:dc:ed:4c:5a:14:ef:5b:67:03:e1:70:cc:23:
         eb:d3:5f:49:a2:78:6a:15:84:3e:f0:90:12:27:be:ac:e9:d1:
         b5:c2:ed:6b:1a:9a:42:42:d8:b4:0b:49:81:b3:3a:94:10:fc:
         a7:1b:bd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 20:16:08 2025 by rpki-client