This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
File:                     ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft (raw, json)
Hash identifier:          jTw9HFP1b+vapXKCBigy5RGKGHZCfE0pE81mJgratsY=
Subject key identifier:   3E:51:08:3C:2D:D8:F3:A7:0A:17:3E:ED:E0:AA:F5:42:5E:74:D1:EF
Authority key identifier: C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
Certificate issuer:       /CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Certificate serial:       019AF31B756FF8B2E09C33AA9B34E67D029C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 10:00:54 +0000
Manifest this update:     Sat 06 Dec 2025 10:00:54 +0000
Manifest next update:     Sun 07 Dec 2025 10:00:54 +0000
Files and hashes:         1: K21ypNssIjRXFOw0fmL843PpW-s.roa (hash: YKKmVgu8U+pfVl80ZWCnY8eOTJS6TtTJ/J+lDMSN7aE=)
                          2: ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl (hash: JItsAacVW8cYSz1jby3oxBLV9pp1/qFA+F2TCC3FZp4=)
                          3: z_DYGAISByZ4EYZLcYZm9xxTsPA.roa (hash: wyWaYpWMqLeJKfHtKjObHg0XG1oN2Hh8M5UrpYDjJyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:75:6f:f8:b2:e0:9c:33:aa:9b:34:e6:7d:02:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
        Validity
            Not Before: Dec  6 10:00:54 2025 GMT
            Not After : Dec  7 10:00:54 2025 GMT
        Subject: CN=3e51083c2dd8f3a70a173eede0aaf5425e74d1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:51:a8:c4:ee:42:f5:eb:a2:cd:7c:3e:ff:17:
                    84:aa:af:68:d2:ce:34:95:37:8d:4f:83:20:00:8d:
                    cb:12:4a:7e:82:b3:4e:e3:f9:24:6a:fd:a2:8b:c7:
                    09:a8:b4:29:01:4d:9f:ec:ae:d7:6b:30:ff:25:a5:
                    3d:cd:81:f7:b3:98:b8:a3:ec:3f:8b:a4:84:d4:d3:
                    1a:1a:55:10:89:74:63:d7:4f:37:5f:00:60:bb:6a:
                    98:31:70:b2:32:47:0b:32:72:fc:5f:ae:c8:83:3e:
                    c8:87:eb:93:fe:b3:cb:19:2a:d5:b1:2d:dd:4a:00:
                    7e:d2:cd:57:42:fb:b6:95:c3:ba:c9:88:ff:c8:35:
                    ce:bf:f3:84:31:da:ed:b0:c6:64:42:78:83:24:63:
                    3c:8d:73:d8:6f:07:4b:ee:a5:04:59:f1:8e:60:76:
                    c0:96:d3:88:7e:78:4c:3e:05:4f:75:75:c4:f2:31:
                    34:f7:86:bb:12:9f:a6:31:16:30:ce:cf:33:31:a3:
                    86:85:d4:7b:d2:b0:aa:fc:69:3d:13:96:d4:55:60:
                    10:dd:9c:f0:18:d3:2e:b1:69:d0:e3:e6:d0:2b:81:
                    62:fe:4c:8d:9e:76:12:db:0b:0e:66:43:f3:57:ba:
                    e6:dc:b0:74:31:f8:33:ef:e5:37:62:bb:99:39:48:
                    ba:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:51:08:3C:2D:D8:F3:A7:0A:17:3E:ED:E0:AA:F5:42:5E:74:D1:EF
            X509v3 Authority Key Identifier:
                keyid:C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:41:c0:47:93:ac:9f:12:1c:f9:5f:a1:89:cc:3f:00:99:ed:
         b7:a6:49:ca:8b:3f:4c:43:7d:41:cc:64:84:df:3f:d4:75:0a:
         11:1b:e0:23:39:ad:67:ba:a5:da:f9:58:f6:29:69:65:4b:46:
         d9:c8:24:81:0d:43:3f:2c:62:2a:58:ab:52:18:45:10:60:47:
         a6:36:e0:a7:96:8d:15:14:10:7a:b1:22:77:14:96:87:e6:81:
         5c:2c:f1:19:df:ff:b5:66:8e:75:d0:90:65:7d:a3:4f:94:b8:
         b4:f4:2e:10:b3:d3:88:74:94:a4:a8:60:1f:91:e5:89:cd:a2:
         12:eb:0c:12:14:c0:a1:3d:ce:61:a6:7c:b0:f0:40:17:43:40:
         4e:ef:87:86:a9:98:ba:5d:1e:99:6a:4f:ac:a9:f9:13:ce:e1:
         42:1d:c9:6c:9e:d0:ab:c3:f6:75:63:56:90:33:ce:bb:31:c8:
         36:2f:7d:b2:6a:fb:83:a8:c4:26:27:e2:d4:62:48:d0:12:46:
         db:b8:3f:b7:34:42:84:13:64:49:c4:8c:d1:32:3b:2b:69:c9:
         86:b3:26:ee:d9:87:7a:1a:cb:52:2e:fb:a2:d0:10:8c:5e:2c:
         7b:b1:7b:eb:a8:38:4a:81:79:0c:56:2a:54:39:32:f0:96:a2:
         54:f1:7d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:07:22 2025 by rpki-client