This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
File:                     HyyzW4dHgMuT3EQhC5151u2U_l4.mft (raw, json)
Hash identifier:          be0Va/VkWxCGbD95ZBS0XMmfmx+iD4HkEeQcdEnfWuI=
Subject key identifier:   53:29:16:79:FA:0B:4F:12:4B:45:E1:13:30:1A:71:CB:5F:37:F8:14
Authority key identifier: 1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
Certificate issuer:       /CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Certificate serial:       019AF20924BE752EBF113C0C4E98A96E6F17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 05:01:16 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:16 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:16 +0000
Files and hashes:         1: HyyzW4dHgMuT3EQhC5151u2U_l4.crl (hash: M/RZEHCfT8ekURDyUCoh+37gvuxqSeGyIN5soKTzSRQ=)
                          2: UyByoYW1eGUazMnJ8I-2ncOK0hs.roa (hash: 2RQW6HeC6UJWl0PyhVUJ1Au2Gjg5MsY0s3xBfwIHAaw=)
                          3: vRyA1sBnGbBdfcd9RnV3r6TFptk.roa (hash: +l9+gT14Y8WjAyCtiqhfE/NWwkGANddHeME8IP4u0y0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:24:be:75:2e:bf:11:3c:0c:4e:98:a9:6e:6f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
        Validity
            Not Before: Dec  6 05:01:16 2025 GMT
            Not After : Dec  7 05:01:16 2025 GMT
        Subject: CN=53291679fa0b4f124b45e113301a71cb5f37f814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:51:e1:7b:5e:27:d2:04:3b:4d:0f:1e:88:cc:
                    7f:24:5a:2c:20:cb:1f:77:1b:7e:2a:b1:b7:b5:dc:
                    98:5c:d1:18:1a:07:1f:81:ed:2a:9e:39:b0:59:88:
                    bb:44:64:5e:48:3e:81:62:01:3a:9e:4a:f7:11:85:
                    23:b3:c3:ef:ce:fd:a9:df:8c:37:d2:6d:15:84:1f:
                    e0:4c:8e:3b:e4:aa:1c:9c:8e:1b:59:3a:75:a9:fa:
                    c1:bc:84:1c:a5:d4:94:ec:aa:9e:34:ec:ef:c2:5d:
                    df:bc:2f:19:c2:9c:08:a9:7c:18:85:42:8a:5d:93:
                    c7:9a:6e:fd:54:c0:75:5e:fc:ec:bb:42:91:1b:84:
                    65:25:e9:9d:b3:14:60:13:f6:a5:b6:51:ed:55:c4:
                    3e:a6:f5:11:58:17:30:9e:b0:07:c3:22:5d:36:69:
                    98:aa:2d:a5:3e:0d:3d:f7:9b:7e:f1:54:d2:ff:b1:
                    0f:c5:66:35:2d:7c:ca:c7:21:33:ca:75:ea:43:9b:
                    0d:ca:7b:df:81:75:1b:7c:16:d3:74:3d:57:ca:65:
                    87:92:37:41:ed:af:2a:cc:3b:9e:16:e1:b2:95:34:
                    2b:00:c6:29:84:73:b3:aa:16:ef:8f:49:6d:99:c1:
                    5c:82:93:1c:1f:52:d2:7e:54:b0:3e:a1:e5:36:b9:
                    7f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:29:16:79:FA:0B:4F:12:4B:45:E1:13:30:1A:71:CB:5F:37:F8:14
            X509v3 Authority Key Identifier:
                keyid:1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:53:31:5c:ac:e7:29:52:f4:96:9c:d9:37:d6:bd:d8:ff:03:
         85:e1:d3:1d:57:06:21:40:2a:6b:ac:97:02:d8:ff:4f:03:8d:
         b4:d1:29:a0:6e:fd:36:cf:c9:1a:14:1d:80:b3:29:f3:dc:5b:
         38:be:02:e0:ea:34:e1:b4:74:67:5a:5c:c6:96:12:3a:32:88:
         18:2f:df:d2:02:ef:b2:08:0a:a6:70:4a:41:8b:33:4c:d0:09:
         b2:eb:8d:9e:12:5b:d0:94:ec:89:39:6f:df:ae:48:10:c9:a0:
         55:bd:7b:31:fc:54:58:34:45:e0:4b:99:7c:b6:5b:12:dd:cc:
         cb:36:6b:7c:2d:ca:6a:5a:f2:a4:eb:91:e2:02:7e:13:34:5f:
         27:ba:8f:7c:51:92:6b:8a:95:5a:a1:10:d3:37:e3:e6:f8:e2:
         e2:44:5d:b8:8a:80:ab:7a:41:e7:34:8b:32:95:0d:08:98:ae:
         cf:98:2a:ac:23:3c:4d:4a:c3:7a:a2:de:ab:2e:82:ca:01:d7:
         55:db:d8:1c:c4:2a:13:ad:2f:dc:91:0c:1f:95:94:88:92:a7:
         59:c4:c6:76:25:35:96:b2:58:e7:a6:ba:6f:be:42:5d:48:88:
         9d:92:eb:dd:90:d0:f8:ca:c7:2e:f4:f8:3f:dd:a1:d3:fb:df:
         7c:ba:36:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:37:12 2025 by rpki-client