This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
File:                     yMyL2gxj59LWXBntcEO1oteRwfE.mft (raw, json)
Hash identifier:          GfYAEOwgleYi114VyInEZkW+L8fXZa2QOQ6wsuZ5lbM=
Subject key identifier:   F3:2A:3B:02:2B:F6:D9:DD:7D:63:EA:79:AB:4B:73:56:2B:B2:CC:37
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Certificate issuer:       /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial:       019AF1646C1FE15F9EFA3013BA43949D4BCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
Manifest number:          06E5
Signing time:             Sat 06 Dec 2025 02:01:21 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:21 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:21 +0000
Files and hashes:         1: 0-0QU-mcwsSjRhq471-gtd5ufh0.roa (hash: VGJkz0Kb+B/ZQAVYufjsQPwByA4ZPAxHr/hG7qTqtp4=)
                          2: 1iyiGCCaZCOIy-3SK8-ztkCORB0.roa (hash: 4+8lvNVy48rfdEy8LO/Fif5vr+YXhPfmQva+BSbThYY=)
                          3: yMyL2gxj59LWXBntcEO1oteRwfE.crl (hash: w/WRawEJBNVBoMB1axC9/jKKZaESi0HsnV8qAD03OHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:6c:1f:e1:5f:9e:fa:30:13:ba:43:94:9d:4b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
        Validity
            Not Before: Dec  6 02:01:21 2025 GMT
            Not After : Dec  7 02:01:21 2025 GMT
        Subject: CN=f32a3b022bf6d9dd7d63ea79ab4b73562bb2cc37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:be:6a:81:31:fd:05:8a:43:c5:84:42:19:fa:
                    46:c1:d0:59:57:4f:75:00:65:6e:a6:62:be:14:d4:
                    b7:47:65:dc:fd:df:60:6b:f7:75:af:c9:8a:e3:87:
                    a6:5a:e3:fa:8b:31:35:d5:07:9f:cb:29:40:ef:87:
                    37:79:05:27:56:01:f8:f4:03:ec:e7:31:89:93:4c:
                    06:01:28:03:f9:b3:54:dc:5e:4c:91:27:1e:d4:cf:
                    cd:bd:12:db:59:d5:c9:18:fc:2c:c6:9d:2c:8e:fb:
                    41:a0:26:54:a0:be:78:f0:7a:7a:b7:f4:38:c2:4f:
                    48:84:3d:11:22:ba:5f:0d:b5:96:e1:a0:3e:30:f7:
                    93:32:e0:33:74:1b:e9:57:c1:ce:06:e2:ac:87:ea:
                    19:fb:ea:0e:c6:4c:96:c6:9e:d0:c7:b8:b4:9e:19:
                    d0:f7:4c:e9:91:9c:55:55:c3:1a:2d:0f:be:f2:04:
                    f3:87:ce:4b:48:06:bd:79:2d:61:db:06:57:48:8c:
                    f0:22:aa:76:30:1d:b7:68:cc:a0:63:6a:06:f4:7e:
                    87:b2:0e:3c:12:c2:4a:a2:0a:8f:02:f8:57:17:45:
                    cf:d6:44:b5:36:7c:b6:02:6e:b5:48:d8:5a:09:00:
                    07:2d:c7:ac:50:6a:54:f1:b9:a0:aa:09:bc:52:3a:
                    54:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:2A:3B:02:2B:F6:D9:DD:7D:63:EA:79:AB:4B:73:56:2B:B2:CC:37
            X509v3 Authority Key Identifier:
                keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ae:08:2c:d2:40:0f:0a:eb:25:d6:15:09:6d:dd:77:6a:c0:
         2f:49:9f:04:05:88:e1:7d:e1:94:ff:a2:d8:76:24:3b:71:5d:
         b2:4b:6e:b6:d7:c5:97:94:01:98:84:2f:31:1e:1c:27:12:05:
         2f:f5:b8:46:38:de:e8:52:a6:92:4b:87:e0:5f:ee:69:be:5d:
         5e:65:de:38:77:5d:92:99:94:1f:f8:4d:82:2e:db:5b:81:35:
         eb:5d:77:14:1c:94:f2:fd:e5:99:12:e2:2a:bb:27:5c:40:6b:
         0b:ea:a1:b3:69:0f:b2:e4:65:d7:21:f8:ed:37:2b:27:1a:4b:
         63:1d:cf:8e:42:ab:4b:3f:fd:9d:1f:c0:34:71:f6:c3:b8:6e:
         fd:4a:12:f6:e1:8f:8a:8f:50:f9:d8:2c:ad:a7:17:e4:a3:d4:
         1e:86:54:9e:1e:7d:53:6b:21:70:4f:84:e2:9d:6a:d3:73:e7:
         2f:5a:82:52:f1:e8:67:a7:5b:3c:60:ed:c8:b1:47:d3:6a:a7:
         bc:3d:07:c8:fb:3b:27:c2:d2:36:56:96:28:c7:0c:03:30:d3:
         65:ac:24:5e:88:e7:3b:37:b9:5d:17:66:50:43:1f:53:38:16:
         fa:c1:7b:d2:5e:2f:63:fb:06:48:55:22:52:75:7d:5a:11:a3:
         89:65:ae:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxZGwf4V+e+jATukOUnUvPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4Y2M4YmRhMGM2M2U3ZDJkNjVjMTllZDcwNDNiNWEyZDc5
MWMxZjEwHhcNMjUxMjA2MDIwMTIxWhcNMjUxMjA3MDIwMTIxWjAzMTEwLwYDVQQD
EyhmMzJhM2IwMjJiZjZkOWRkN2Q2M2VhNzlhYjRiNzM1NjJiYjJjYzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr75qgTH9BYpDxYRCGfpGwdBZV091
AGVupmK+FNS3R2Xc/d9ga/d1r8mK44emWuP6izE11QefyylA74c3eQUnVgH49APs
5zGJk0wGASgD+bNU3F5MkSce1M/NvRLbWdXJGPwsxp0sjvtBoCZUoL548Hp6t/Q4
wk9IhD0RIrpfDbWW4aA+MPeTMuAzdBvpV8HOBuKsh+oZ++oOxkyWxp7Qx7i0nhnQ
90zpkZxVVcMaLQ++8gTzh85LSAa9eS1h2wZXSIzwIqp2MB23aMygY2oG9H6Hsg48
EsJKogqPAvhXF0XP1kS1Nny2Am61SNhaCQAHLcesUGpU8bmgqgm8UjpUNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMqOwIr9tndfWPqeatLc1Yrssw3MB8GA1UdIwQY
MBaAFMjMi9oMY+fS1lwZ7XBDtaLXkcHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU15TDJneGo1OUxXWEJudGNFTzFvdGVSd2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jNzQxN2MtNGNhYi00ZDUxLWI1YWQt
ZTMwMzg3YjNmMjExLzEveU15TDJneGo1OUxXWEJudGNFTzFvdGVSd2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jNzQxN2MtNGNhYi00ZDUxLWI1YWQtZTMwMzg3YjNmMjEx
LzEveU15TDJneGo1OUxXWEJudGNFTzFvdGVSd2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFa4ILNJA
DwrrJdYVCW3dd2rAL0mfBAWI4X3hlP+i2HYkO3FdsktuttfFl5QBmIQvMR4cJxIF
L/W4Rjje6FKmkkuH4F/uab5dXmXeOHddkpmUH/hNgi7bW4E16113FByU8v3lmRLi
KrsnXEBrC+qhs2kPsuRl1yH47TcrJxpLYx3PjkKrSz/9nR/ANHH2w7hu/UoS9uGP
io9Q+dgsracX5KPUHoZUnh59U2shcE+E4p1q03PnL1qCUvHoZ6dbPGDtyLFH02qn
vD0HyPs7J8LSNlaWKMcMAzDTZawkXojnOze5XRdmUEMfUzgW+sF70l4vY/sGSFUi
UnV9WhGjiWWumg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:20:02 2025 by rpki-client