This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
File:                     YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft (raw, json)
Hash identifier:          MEPjU9drWgmvX2FPT3+2DKQavSx7qm/hG8obENoeGHg=
Subject key identifier:   2E:0F:F5:1E:EA:79:EB:34:A9:CA:7B:EE:DD:2D:03:8B:1B:6D:5A:97
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Certificate issuer:       /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial:       019AF20968A57042F028178DC2C043808B3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
Manifest number:          17C2
Signing time:             Sat 06 Dec 2025 05:01:33 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:33 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:33 +0000
Files and hashes:         1: B4fPhGrpI2pg0XWKOyPE09oH6uw.roa (hash: B5g9LB9sai8M83rndIElqRt2j/OPCWFzHO4n+DMUF8M=)
                          2: BH4JiNSau-Drbx1LaCjE1x1v30A.roa (hash: TbmERc+CgiPXJOmSpqLjpiM3C2RIrXoRaOqYGrV/7rc=)
                          3: J2m2ISQHz5hJjKyZkS2pJF0KRqI.roa (hash: 6G3IQ5SdI2eYbxPznkHPeUYzIj1Gq0tlz/lJz4R+v2c=)
                          4: RtQKuKnTGi_65CSqe6vNMA17298.roa (hash: Lxi0kacqGh/qYSrtEzV02WDcRK48WVJ5UFgCKphFMbA=)
                          5: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl (hash: k0AI3UpmqmUcnLqZUrE4k7NBQ/BHgKofL+OJb90/4CI=)
                          6: bePIOwHo2yd_SzOvruKwF9356uc.roa (hash: AE/WNLdQCiM+hKgplC+GUSqytNFuyhj+98knbmTnMvA=)
                          7: fj1r2eQRURbfHzLqz1r8LUH9mVA.roa (hash: RTFZ5yGadIatm8cDgVUSamVjEv2odxS8PZJ1SetFXHU=)
                          8: v3x5iNNrmiatDTviLrTJBlnNTao.roa (hash: y4jZmJDEPRDwVYIDs+oTsrk+QPXd/ySPMMJZ/R51xOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:68:a5:70:42:f0:28:17:8d:c2:c0:43:80:8b:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
        Validity
            Not Before: Dec  6 05:01:33 2025 GMT
            Not After : Dec  7 05:01:33 2025 GMT
        Subject: CN=2e0ff51eea79eb34a9ca7beedd2d038b1b6d5a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3b:27:23:8c:eb:f4:ac:b7:f9:e9:50:55:f9:
                    6e:66:c4:02:0e:81:85:a3:1b:5e:8b:3a:a8:40:d0:
                    de:ca:3b:25:3c:8a:db:f8:14:70:8b:d4:07:59:97:
                    b6:29:2c:16:e6:86:e6:04:7b:21:c7:7a:ba:d0:97:
                    ec:8c:7b:69:0c:2e:77:81:76:c6:07:25:ca:e3:81:
                    59:53:57:63:ff:c5:e3:d6:71:12:98:cf:b6:9b:a0:
                    60:26:6f:52:d9:e9:98:be:af:09:c9:9c:e1:cd:8f:
                    46:10:2f:9c:c3:ca:4c:97:50:63:ab:a4:d4:e1:f4:
                    5e:53:0a:eb:18:cc:a8:c3:c7:f5:6f:04:66:bb:4f:
                    85:73:97:54:df:e9:6c:c8:03:d1:98:2a:ad:84:52:
                    e9:83:59:cf:03:a4:b7:4f:b7:1e:c3:69:80:18:84:
                    bf:0f:d6:f9:cc:cb:30:0d:d1:d6:90:92:86:c0:5b:
                    54:89:22:40:f9:b5:6e:f7:61:ae:0d:b8:b7:98:84:
                    79:bb:04:90:d2:b7:1a:f8:8b:e7:9c:58:86:7e:ce:
                    d6:2d:09:26:ad:58:75:40:db:69:ce:65:b7:76:54:
                    41:dd:cb:fa:54:46:81:8c:4b:75:3c:ee:41:4c:34:
                    31:02:19:02:24:d4:a7:d7:db:e1:c1:fb:34:74:a9:
                    fa:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0F:F5:1E:EA:79:EB:34:A9:CA:7B:EE:DD:2D:03:8B:1B:6D:5A:97
            X509v3 Authority Key Identifier:
                keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:b5:bb:09:a0:ed:c7:9d:7b:22:f5:75:b8:53:22:cf:2b:19:
         0f:2d:c2:de:04:f0:fe:d4:39:e5:ea:18:d4:60:88:cd:89:c1:
         2f:a2:08:8a:02:f1:cb:11:43:1f:90:70:ab:d6:e2:43:4c:08:
         a4:d8:23:20:1a:75:c9:70:73:c5:5d:1f:ef:f6:cb:b1:c9:3e:
         24:a6:da:ec:24:67:3f:3a:06:5a:73:df:2a:c7:b5:6e:9f:5d:
         c2:9d:49:a9:0d:38:f1:9b:b7:ce:01:0f:e5:1b:f4:f1:5c:f7:
         43:bd:de:31:47:9b:d2:ca:27:b5:fc:81:9e:8f:05:69:26:36:
         a5:7d:58:4b:35:91:2d:98:28:c1:27:57:ce:88:a0:0e:39:11:
         66:6d:80:95:6b:cf:72:3c:72:09:0d:8e:55:ec:9d:b3:96:da:
         49:df:51:af:e8:42:38:82:03:ca:f3:d0:59:79:80:37:74:37:
         7e:4a:6c:72:6c:c2:22:73:72:68:2d:2a:e5:35:93:8b:91:14:
         a2:8b:7d:5a:ca:d7:cb:4e:e1:dd:a4:e8:70:01:94:93:b6:23:
         53:c1:54:05:bb:25:1a:81:59:2d:00:96:7a:2e:8e:76:f0:27:
         a2:d1:f1:17:75:c5:f5:a1:fa:e1:cf:fc:96:24:31:12:14:13:
         f8:e7:49:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:59:03 2025 by rpki-client