This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
File:                     Yijn4B-tpJwaUvoT82JsQbQaUbg.mft (raw, json)
Hash identifier:          xmlmXySEGHnyzFGvXQ8c9i71SdrGi3+jL9HHS1sBHyY=
Subject key identifier:   05:A2:17:4F:3A:CC:61:AE:D6:E3:21:9C:41:0A:04:39:B2:C5:1F:4B
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Certificate issuer:       /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial:       019AF19AA8824157237584C7BDE4F46C4C78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
Manifest number:          132F
Signing time:             Sat 06 Dec 2025 03:00:35 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:35 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:35 +0000
Files and hashes:         1: 39Hl2YtVKmMlT4Np8aTqcLmOeDQ.roa (hash: J30KXNySdgIczVtUgN74dsxfOaEmv254pBQGUApoGWU=)
                          2: 3vDPYhTVSNkpwDXIOAhKw07fJVo.roa (hash: LClf9wKTgSH7aYKU8gpOq60UxTyxsP0oBqiiisbaoMw=)
                          3: 9gdq4DPxWANqV88tyEbEG8Ldy2s.roa (hash: Qcx/zZKUQJlfYuyogBZyJJ8LJtGP90X7Aowz2zO0zoM=)
                          4: EUqk-yAaG5paOCIVkA1j8wPk104.roa (hash: CKnm8iWykIQyELL5aMGGlKm7sfX4o/GjDgMt4OBiDmo=)
                          5: MS7f7uAFrgsoqEC82oQcdxoTjbw.roa (hash: q7csoElnOVcDXyC+5AwwUXnv70b0boL5P5Uhy6UmF5c=)
                          6: MVUh0hcLIjE07dK8EAE-IOh5K_k.roa (hash: h64Mn6MhkYZu/pWDLICKE5G2uu0K1bG/f4Qgol+8E+k=)
                          7: PQV-lmNPs22kjH81gqLzZC2Hxyk.roa (hash: 3Z7VYjtRWDW6BIMcoEyNqO1K5os33IdoDIoXJJUJXX4=)
                          8: QZoa2FVMFT1UIn9TjIdCJB0KRm0.roa (hash: Ms+peXedl4VTyfxLJJp1x3zUfnRF0n3j5fmzunIlaVk=)
                          9: WfEws16cTi2Df979LQ6mRAE2axY.roa (hash: dALElZ6XR2T3Ta1WDi4smMz8JqXiVTKehinoqdH3p2M=)
                          10: XRMjotv_RyNi_vyyDUqJa5DvdNQ.roa (hash: NqkkZ+12y4P7wuBMP3qkI6mM9Ot2hXdE9NxBdiV//lo=)
                          11: Yijn4B-tpJwaUvoT82JsQbQaUbg.crl (hash: xj5a2wbIOaiMdjLAdnIlOLSYugSUkf1Ji2BdWb9GBCU=)
                          12: _uqBPfdUyY-uye7sIJ6VDcTnm9Q.roa (hash: qTMeoGDMJupk/FgaEtzpurysBRR50/CTtxcte770sgo=)
                          13: aQ9TKcMoz5YUQ7Dv119RHqsXoe8.roa (hash: kuhGQLKsA1Pu5uUkS6WTtzxq+5UJHPF8akUoFzgsuJ4=)
                          14: fBH0IYJayUM82fLAtCFKL3waLMo.roa (hash: aENlkeS/IhrQKMHBx/tjK8TdolIAB2oUek9AYMeHgkc=)
                          15: hBP1dFOLVBvt5xRqn-UPkUvOwX0.roa (hash: V1O7muMxpNnuboppInS/cPK8sqYq+I6fZjgAvWtea64=)
                          16: hO23WjxsvovLeYLtPCuS-3E0Vpo.roa (hash: 4CIWct6dmxFnbDCjzVX8u7ggPdnC/a3Xxdl8QvHxzeE=)
                          17: i8JcBpZfWepYkpF9UtgUc8u8oaE.roa (hash: hAhGsCAZqxE2Xuoo8wKC0KNjWz+UEQ+A4lqd+kgBL1s=)
                          18: jjbE1RnOSZ2q761YRZ132c8JiG8.roa (hash: dQGgrXxlcNXkPaPmlJTPvKt0F6rOcsVsYCx7icARUrQ=)
                          19: kLq7SqUeKI2DIUAAWUSXfOrIc2Y.roa (hash: rGBOCgBJX1i/E1elpdsBPlkFxELh0gIOeC6WMkdyhOw=)
                          20: lAqndAolY7BWQzN7LT0Q-IX6vb0.roa (hash: TGjadtZcD24yjuhtvBWL3IHkQVMYaJkPJka0+x4+n2k=)
                          21: lW8L7FdqeT5R58NRtyPEf5Z0gmg.roa (hash: 8Hwz3wPzlSmaqtx7chxbj4/As7Gc40k4bLE+IGEIauQ=)
                          22: mVXDsutnAgycmKCU0s0vqiIrWkg.roa (hash: nEoy3ANJmNvdHM1/EwE8AOqLbRC8BUKhSO6ToUJ1eCc=)
                          23: rWQw3Ap9IMTI_3cbUgb5cs9sfpg.roa (hash: 16/Ubwkj0gDZvLp3sxFfuFWuE+SLZxXhapNbePhBARw=)
                          24: tCBTeEpVZ9rGnN0OWe0wOiDMqec.roa (hash: +xHIXcppCVOpv/Ff3OFAwPnh7JSeP+CGAOVt+PcgeQg=)
                          25: tLgdq7x552M51Z859B5olJtsdB0.roa (hash: rixhj8UvpeqfwDPceY6i6tMORueTt6XMWtFaW5Efwiw=)
                          26: vm3AkptGALvAIgoY078ymc1XraE.roa (hash: u7VTKuFFoDvsz4NJh5f73LnR4kgTqMbb59uC7JU+Hv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:a8:82:41:57:23:75:84:c7:bd:e4:f4:6c:4c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
        Validity
            Not Before: Dec  6 03:00:35 2025 GMT
            Not After : Dec  7 03:00:35 2025 GMT
        Subject: CN=05a2174f3acc61aed6e3219c410a0439b2c51f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:db:8a:5d:9c:7d:1f:19:36:85:83:60:33:57:
                    fa:2e:f0:57:34:5c:89:7a:f4:c3:fb:ae:ec:4b:18:
                    11:7e:7f:d8:45:a4:7d:7a:2e:e9:a3:e8:4d:c3:09:
                    2a:d1:98:69:ba:60:bc:5a:66:cf:30:2c:44:16:a2:
                    eb:3b:ad:a4:b7:6f:a3:fa:1b:f3:26:5f:12:8f:53:
                    1e:63:c4:11:17:a3:25:bf:cf:fd:89:45:da:d1:6c:
                    e0:85:1e:ed:28:e9:59:cd:40:dc:5c:20:44:d9:b9:
                    76:31:42:bc:b5:d0:1d:22:73:3f:89:ef:92:64:03:
                    46:5b:ce:96:0d:ee:73:0c:87:e2:3f:73:98:d6:b3:
                    63:79:d9:4e:2e:77:51:55:e7:db:f9:dc:9c:0f:ed:
                    b6:9a:ca:ec:1f:6c:9d:84:a5:05:89:f2:58:53:11:
                    d1:ea:06:3c:4e:12:10:49:ba:db:6d:4a:52:80:ae:
                    b5:8f:4a:ee:f0:c2:a1:64:34:74:14:9a:b9:2d:79:
                    9d:77:0d:bb:13:05:0d:58:71:5a:ad:45:02:3e:5c:
                    40:09:4a:4b:35:dc:e6:f5:ed:67:79:4e:24:2c:5f:
                    5f:3a:a7:12:14:8e:ae:70:49:88:8c:80:fc:e6:62:
                    39:86:22:43:1b:8e:54:6b:9c:84:84:61:06:c0:36:
                    df:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A2:17:4F:3A:CC:61:AE:D6:E3:21:9C:41:0A:04:39:B2:C5:1F:4B
            X509v3 Authority Key Identifier:
                keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:44:7b:b9:aa:9d:73:27:62:4f:53:80:32:8a:50:2e:90:5b:
         56:9f:75:2e:9f:3c:92:2d:0a:62:01:be:8a:22:bc:13:c6:41:
         dd:a6:46:38:28:49:ca:b0:68:9b:16:17:7b:5f:c7:fd:18:e7:
         06:7b:84:c0:76:09:01:80:9e:03:07:c2:9e:81:5f:31:99:f2:
         bc:ea:6e:f6:4e:59:41:94:1f:9c:fc:c2:ad:c9:28:6e:e2:16:
         8b:82:b6:ae:69:74:87:5f:f2:d0:67:6a:8c:60:2d:10:01:91:
         72:91:f2:31:aa:2d:47:ff:6e:52:c4:8c:71:a7:36:b2:cf:6b:
         32:84:66:a4:66:65:28:92:29:f0:8f:00:06:11:6c:28:9c:37:
         41:6c:11:47:00:8b:28:76:3d:8d:ec:53:3f:be:f6:76:0a:31:
         4c:c3:04:7c:49:33:82:ac:46:6a:ca:1d:3e:41:99:f0:69:97:
         a7:f8:59:8d:d7:50:fe:f3:8f:6b:ca:ba:24:1c:01:3f:68:d0:
         24:30:5e:1d:78:8d:20:39:32:6c:80:57:00:04:2d:a4:fb:b3:
         97:e2:c7:39:a6:2f:5b:33:d1:00:ac:92:20:39:70:fa:de:21:
         ec:81:b2:04:f6:45:24:1d:9f:8e:9e:bf:3c:85:7a:06:3a:ec:
         f3:fb:d1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:16:04 2025 by rpki-client