This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
File:                     Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft (raw, json)
Hash identifier:          dHuvRhZ7q1e/u/Ipc0F9HnhLWHd7Wva+KVNjMc8XeWU=
Subject key identifier:   26:03:E8:5F:A6:B6:A5:61:C8:79:32:FB:F3:3C:3E:54:75:FE:A4:18
Authority key identifier: 63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
Certificate issuer:       /CN=63444210ea08ac529878d51917e3b30054d620d1
Certificate serial:       019AF23F841C744C7B06460069F8D968CC1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
Manifest number:          09F4
Signing time:             Sat 06 Dec 2025 06:00:40 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:40 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:40 +0000
Files and hashes:         1: Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl (hash: AjhI/83TrgTpM5EaMrCUY6P88KrTaWMVodsSImrb5rw=)
                          2: lvyZzZ0oMePyMWlwy0XrO4z88uM.roa (hash: r4CIZVZVu9rJJBGcwlDp7IO/A6q0RdzdbEDYw+nKWDQ=)
                          3: mS1r3nEBgAI3lLhm6noZgqn_cmA.roa (hash: JYzwmK7XTX/XFKUpzmhiGKHT8MDSKJlug0ZfpJhUdKA=)
                          4: s0n0nYu0NFOR7dPUCU7pEE3i9us.roa (hash: ljcKz24WN/R72QGD8KYnZ5Vd3hVV7DCVfn4eDdOXbTY=)
                          5: zxiStXGp24ax3PMaP2c669J9olI.roa (hash: Eoknss9yO3HZnM5fYU8DdmO/fqGjXaMOZMcIug7gXEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:84:1c:74:4c:7b:06:46:00:69:f8:d9:68:cc:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63444210ea08ac529878d51917e3b30054d620d1
        Validity
            Not Before: Dec  6 06:00:40 2025 GMT
            Not After : Dec  7 06:00:40 2025 GMT
        Subject: CN=2603e85fa6b6a561c87932fbf33c3e5475fea418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cd:ce:02:9a:b4:03:50:31:22:02:f2:bd:b3:
                    70:fd:68:db:70:f9:fd:1d:08:a2:5c:47:d9:f4:95:
                    4b:36:90:59:cf:c9:94:18:b4:0a:c1:8b:7f:db:5a:
                    45:9a:46:a2:65:30:75:1d:71:03:77:f9:1e:06:75:
                    21:fd:c6:62:a5:3e:bc:94:eb:be:46:89:99:e2:a1:
                    f1:95:4a:c5:f1:a9:06:2a:b4:d7:ca:7c:5d:70:2b:
                    3c:02:f9:66:71:cc:39:77:d5:ec:52:33:a1:16:25:
                    a7:67:70:05:37:ba:58:52:5b:6d:a3:50:70:2e:38:
                    61:26:6e:b7:23:df:0e:fb:c8:ec:0c:a6:e7:24:6c:
                    d4:3f:ec:26:73:80:4b:8e:8a:6c:c6:d0:32:0e:72:
                    ca:8d:9d:30:8b:e7:f4:13:bf:03:5a:d8:31:3e:2c:
                    1f:b6:d1:60:76:d7:bd:3c:1a:2b:1f:93:d9:ea:6a:
                    d7:d1:8d:8c:0e:36:ef:3b:b5:b0:21:6a:ea:1b:d7:
                    77:ff:35:56:7c:9a:80:25:5a:2e:f2:7c:cf:2a:7e:
                    22:48:c4:80:e4:ce:b8:b7:82:1f:34:64:19:20:4f:
                    67:8c:09:6d:a8:7c:80:f5:44:0a:3d:d0:dd:8d:3d:
                    3b:59:4a:c1:30:f9:80:eb:7a:1e:03:f2:50:79:22:
                    64:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:03:E8:5F:A6:B6:A5:61:C8:79:32:FB:F3:3C:3E:54:75:FE:A4:18
            X509v3 Authority Key Identifier:
                keyid:63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:60:f3:5b:e9:de:fe:a4:47:8d:35:58:b9:87:b2:00:0c:de:
         d2:fa:33:2e:da:ae:d5:4c:2d:f4:29:ec:1f:cd:7a:10:f6:7f:
         99:1a:36:55:fd:38:ea:16:08:67:36:e6:6d:13:6a:e0:c5:7c:
         1f:8f:d3:0e:b7:73:c9:9c:b7:2a:f7:54:44:55:db:b8:3f:d6:
         f5:ad:cb:41:f0:4f:e5:68:cf:8a:79:75:ec:05:da:03:bb:9a:
         71:60:b4:b4:87:f1:e4:ea:f4:5e:92:58:d1:70:05:83:e7:e8:
         ad:92:70:f7:c0:3c:5c:88:ba:c2:65:ee:d8:81:e9:c5:1d:21:
         29:c1:01:6c:da:70:a8:0b:88:58:5e:28:be:15:08:c2:95:fd:
         b9:16:6d:0b:cb:17:4a:32:87:2c:2f:c7:54:6c:0b:c1:cd:87:
         35:8e:af:74:0e:68:19:78:d5:82:43:2c:44:20:7f:a8:7b:25:
         6e:78:f1:69:57:fa:73:9f:d8:19:64:c6:f5:bd:8d:01:2d:d1:
         f8:7f:9a:2c:18:d0:fd:4d:12:49:98:1e:28:16:ad:70:ed:99:
         45:ce:2c:d6:b8:31:45:7e:03:b9:78:63:06:8b:37:3a:05:f1:
         74:36:bb:01:fa:2c:f2:b5:a3:c2:e6:a5:23:2d:f1:2e:6b:82:
         c4:b4:e7:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryP4QcdEx7BkYAafjZaMweMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDQ0MjEwZWEwOGFjNTI5ODc4ZDUxOTE3ZTNiMzAwNTRk
NjIwZDEwHhcNMjUxMjA2MDYwMDQwWhcNMjUxMjA3MDYwMDQwWjAzMTEwLwYDVQQD
EygyNjAzZTg1ZmE2YjZhNTYxYzg3OTMyZmJmMzNjM2U1NDc1ZmVhNDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus3OApq0A1AxIgLyvbNw/WjbcPn9
HQiiXEfZ9JVLNpBZz8mUGLQKwYt/21pFmkaiZTB1HXEDd/keBnUh/cZipT68lOu+
RomZ4qHxlUrF8akGKrTXynxdcCs8Avlmccw5d9XsUjOhFiWnZ3AFN7pYUltto1Bw
LjhhJm63I98O+8jsDKbnJGzUP+wmc4BLjopsxtAyDnLKjZ0wi+f0E78DWtgxPiwf
ttFgdte9PBorH5PZ6mrX0Y2MDjbvO7WwIWrqG9d3/zVWfJqAJVou8nzPKn4iSMSA
5M64t4IfNGQZIE9njAltqHyA9UQKPdDdjT07WUrBMPmA63oeA/JQeSJkGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYD6F+mtqVhyHky+/M8PlR1/qQYMB8GA1UdIwQY
MBaAFGNEQhDqCKxSmHjVGRfjswBU1iDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBSQ0VPb0lyRktZZU5VWkYtT3pBRlRXSU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lZGVhNmUtNjZjYy00ZmIxLWE0NTQt
ZmU4MzdmOThlMDI2LzEvWTBSQ0VPb0lyRktZZU5VWkYtT3pBRlRXSU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lZGVhNmUtNjZjYy00ZmIxLWE0NTQtZmU4MzdmOThlMDI2
LzEvWTBSQ0VPb0lyRktZZU5VWkYtT3pBRlRXSU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdWDzW+ne
/qRHjTVYuYeyAAze0vozLtqu1Uwt9CnsH816EPZ/mRo2Vf046hYIZzbmbRNq4MV8
H4/TDrdzyZy3KvdURFXbuD/W9a3LQfBP5WjPinl17AXaA7uacWC0tIfx5Or0XpJY
0XAFg+forZJw98A8XIi6wmXu2IHpxR0hKcEBbNpwqAuIWF4ovhUIwpX9uRZtC8sX
SjKHLC/HVGwLwc2HNY6vdA5oGXjVgkMsRCB/qHslbnjxaVf6c5/YGWTG9b2NAS3R
+H+aLBjQ/U0SSZgeKBatcO2ZRc4s1rgxRX4DuXhjBos3OgXxdDa7Afos8rWjwual
Iy3xLmuCxLTnyA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:39:30 2025 by rpki-client