This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
File:                     YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft (raw, json)
Hash identifier:          obp3xRTc8/M31bLf7jrmTcRPdfkmSVqF4V626M9YESY=
Subject key identifier:   5D:DC:D0:21:71:5E:A8:93:98:C0:2B:1F:84:80:9E:B7:83:DA:23:06
Authority key identifier: 60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
Certificate issuer:       /CN=602be661e57c14659a608e9f6be605d6250047fc
Certificate serial:       019B08C83B955F0AD9956A3D4C75FEEEE3C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
Manifest number:          11FD
Signing time:             Wed 10 Dec 2025 15:01:38 +0000
Manifest this update:     Wed 10 Dec 2025 15:01:38 +0000
Manifest next update:     Thu 11 Dec 2025 15:01:38 +0000
Files and hashes:         1: QQ6vjhCR2yyTREcRxQKVvyzivi8.roa (hash: 7L16FIPuAoIWTe7eg7gWhNFlOXbBacL341K5d1WI9xc=)
                          2: SeVyC3Up3eapGFgVMyNwVWT064M.roa (hash: WlXh9oaUv4z0gJQkT7t6JIoyywN2OloN8qKW62HKTds=)
                          3: YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl (hash: jA2yvSOsVQc1IFWLEaqX/5UEDXIjkytmoDAOTEekoYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:08:c8:3b:95:5f:0a:d9:95:6a:3d:4c:75:fe:ee:e3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=602be661e57c14659a608e9f6be605d6250047fc
        Validity
            Not Before: Dec 10 15:01:38 2025 GMT
            Not After : Dec 11 15:01:38 2025 GMT
        Subject: CN=5ddcd021715ea89398c02b1f84809eb783da2306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:e0:9d:0f:34:df:d9:1c:9d:7c:83:d0:70:
                    62:f3:5b:6a:94:a8:3e:0f:96:e2:44:b3:65:7b:a6:
                    ce:e7:26:b4:b5:58:af:c2:3b:9f:b0:80:18:59:63:
                    21:fb:db:d8:21:40:e5:79:54:2d:58:d5:d3:69:03:
                    77:8b:ba:89:f4:cc:f1:70:c0:86:94:60:ab:c0:6e:
                    96:fa:79:0a:d3:2b:81:86:9b:2b:ba:a4:3e:c1:41:
                    75:97:ce:13:9b:7b:4c:7a:66:67:32:4e:a8:81:03:
                    c5:b3:0b:ad:d7:3a:83:8e:da:d2:f4:d9:fe:fa:91:
                    76:bd:1f:0a:d7:f2:ab:90:c0:ed:3f:04:c2:03:4f:
                    37:f4:f7:38:af:9c:09:74:ae:1c:2f:75:f3:2d:36:
                    29:b3:cf:0a:8e:96:49:1d:da:e7:7f:bb:33:b7:df:
                    35:da:cd:f7:7f:9a:a2:c7:cd:18:a6:b6:6f:5b:77:
                    d2:f4:a7:26:a1:46:82:1a:f3:5f:30:c7:6c:e8:ba:
                    d8:e6:9d:37:3a:4a:85:94:05:04:e4:c2:77:fd:28:
                    9c:73:fa:2c:dc:c6:1e:94:d7:27:a5:61:6b:70:b5:
                    f7:9c:c6:3d:b8:2c:52:03:e8:76:9f:d0:7f:52:31:
                    8c:8c:a4:5d:9b:6c:29:47:0e:c6:47:a6:cd:b2:2d:
                    8a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DC:D0:21:71:5E:A8:93:98:C0:2B:1F:84:80:9E:B7:83:DA:23:06
            X509v3 Authority Key Identifier:
                keyid:60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:6b:a1:80:86:82:51:e7:76:65:c0:5a:ce:f2:de:57:b6:fa:
         a9:62:40:3a:7b:be:d1:c1:85:2b:ac:71:92:6a:cf:0c:39:96:
         5c:1a:1e:d4:08:e0:10:f9:72:c0:7a:33:d7:3b:bb:2e:d1:e9:
         61:4d:9a:33:eb:50:ea:7e:18:2f:77:66:f4:b7:b6:4c:24:2a:
         fe:5e:0c:e8:7f:b2:f7:cf:92:9f:14:e8:b0:8d:5c:7e:c5:79:
         30:2a:a4:d7:b3:50:2c:65:6e:d1:16:ef:02:23:e8:2c:65:95:
         0e:c2:1d:00:d2:34:c3:7d:40:26:7c:33:6b:7e:28:49:b4:8b:
         8a:9d:fb:2f:61:23:89:7f:a0:73:a1:b4:d2:41:9e:61:05:8e:
         8d:60:82:4c:64:99:d9:74:34:84:ce:87:08:ba:70:05:44:90:
         6a:fc:7a:a7:ea:8a:9f:2f:cd:e3:42:4a:67:ab:22:19:38:9f:
         79:b3:7d:bb:8e:1f:fa:10:d3:a0:88:91:40:43:c2:d4:fd:21:
         d7:c4:46:92:2e:45:48:de:ef:1e:44:42:c9:16:25:83:20:60:
         95:c4:a6:b9:3e:27:4e:23:dd:36:9f:02:02:6d:96:d5:f4:4c:
         d7:2b:77:36:ff:72:bd:3a:b9:33:f2:74:98:00:21:c7:e5:4d:
         94:79:cc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 17:22:58 2025 by rpki-client