This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
File:                     Y7gncq89YRuZsbpuPrbL_RaWU2M.mft (raw, json)
Hash identifier:          Pu9b7vymfvYtoTKngH4sYTITb7YsqFHGpJHUZb7Gl0c=
Subject key identifier:   84:0C:BB:40:46:1B:A4:B4:49:48:66:C7:57:09:E4:09:34:F6:1F:7F
Authority key identifier: 63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
Certificate issuer:       /CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Certificate serial:       019AF12D0309CE34BC1E90187C8F409318B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 01:00:50 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:50 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:50 +0000
Files and hashes:         1: XH3IImnZQORJDcY8K4c1sqi8npk.roa (hash: o40iI1L0Dj1I3pYOBYI+Dt7Aw45pOymMFxf/GGvdYFY=)
                          2: Y7gncq89YRuZsbpuPrbL_RaWU2M.crl (hash: R8z1jElZ3CKA48MG7+jWCpq7OISPQ2vrZ+LBHw8CTok=)
                          3: iXJOEjsOn5QC56oWOinXWEqS8Pw.roa (hash: jHJ0wtuFjDDxH8Gh1uDFMh4KEFYRZhcEVsJ0/xmH1ig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:03:09:ce:34:bc:1e:90:18:7c:8f:40:93:18:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
        Validity
            Not Before: Dec  6 01:00:50 2025 GMT
            Not After : Dec  7 01:00:50 2025 GMT
        Subject: CN=840cbb40461ba4b4494866c75709e40934f61f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7f:31:2b:9b:6b:53:9c:a7:c3:12:98:62:4a:
                    ab:13:3d:5c:72:c4:2b:7e:41:88:e6:44:c2:44:2b:
                    22:c5:74:71:3b:9b:ac:cb:7b:ca:d3:f0:b6:ab:d0:
                    b1:e8:c9:25:5f:d4:11:11:73:d2:80:44:21:2a:bb:
                    96:7e:52:cf:08:97:07:b2:7f:ad:92:ab:7c:bf:c5:
                    ac:28:70:d3:20:e9:9b:fe:71:6b:79:1c:2f:eb:63:
                    60:7e:88:a8:7f:65:e8:38:91:48:17:f6:a4:96:ff:
                    ca:e0:d5:cd:fb:62:c4:95:6f:b6:01:68:bf:e5:0b:
                    fb:74:f7:b9:eb:e9:cc:fc:77:0e:4b:30:4c:b6:52:
                    b3:43:3a:e3:46:ae:f2:1c:ea:63:dc:52:2d:70:7f:
                    99:f1:b7:31:1e:64:de:0c:3b:2a:73:0b:6b:a3:55:
                    3e:35:6c:fd:4b:2b:aa:1c:5c:2e:3a:09:e3:11:52:
                    54:46:f1:d8:51:97:2e:ee:38:5e:62:8e:d1:ef:c5:
                    30:cc:75:ca:f0:2d:f2:4c:e9:d1:35:4d:a6:f9:34:
                    20:1b:4c:fe:bb:5e:9b:1e:58:33:a1:f6:f4:93:93:
                    d8:99:61:25:8d:ae:d5:bb:01:87:e5:af:95:33:81:
                    9f:f3:54:b8:c1:73:78:9a:b8:7c:b4:73:7c:59:56:
                    25:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0C:BB:40:46:1B:A4:B4:49:48:66:C7:57:09:E4:09:34:F6:1F:7F
            X509v3 Authority Key Identifier:
                keyid:63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:6a:80:a3:29:d1:05:f3:68:71:1a:32:43:55:fb:4f:0f:73:
         08:7c:59:28:76:5c:dd:b8:70:4f:59:7d:02:64:30:3a:d3:74:
         9c:92:0b:a3:16:c9:1a:35:32:35:66:ee:8a:6a:89:fc:0b:9c:
         a0:d6:2c:ac:ce:7d:22:e3:ab:5e:b4:c2:3b:b4:d0:98:00:ee:
         08:4c:20:8e:1c:f2:78:b2:25:8e:06:90:fc:de:e6:ed:b6:e4:
         6b:ff:bd:59:b5:ac:b7:30:fc:75:96:85:7c:22:ec:c3:4e:6c:
         1b:38:42:06:77:54:8b:db:a1:6d:22:d1:b8:43:91:53:c1:12:
         c4:d1:e1:bf:3f:13:ff:cf:8c:74:49:db:76:0e:df:14:a2:31:
         01:f5:82:ed:2b:48:21:6c:b6:d0:c6:26:fa:f2:c0:6e:7a:98:
         61:d3:27:23:aa:aa:e8:20:4d:a3:3e:6d:1c:49:77:64:86:3f:
         3a:7d:88:56:c6:22:4f:b6:bc:00:ff:0e:be:41:7d:f0:9e:5d:
         42:28:40:07:50:18:62:cc:0b:1c:57:92:5e:4a:5a:15:2d:49:
         b9:a9:87:ce:8d:ee:2b:77:37:49:b1:85:6c:53:90:8b:bc:24:
         76:a6:49:66:a0:db:e6:22:24:ba:31:27:5d:bf:82:51:59:b8:
         09:20:fb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:25:22 2025 by rpki-client