This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
File:                     YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft (raw, json)
Hash identifier:          lOdxUB5NOfx4x4iWkgjgq069fnNoP+0BQOYOmIDV9fY=
Subject key identifier:   47:BF:78:2F:E5:6F:4C:AD:0A:6D:D5:66:48:0C:E4:CF:DA:CB:AD:35
Authority key identifier: 61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C
Certificate issuer:       /CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
Certificate serial:       019AF12D67B1042CDEBAC2A7BFEB66369B1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
Manifest number:          0F09
Signing time:             Sat 06 Dec 2025 01:01:15 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:15 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:15 +0000
Files and hashes:         1: 1-ACv8TAdNs0gbWjdydU8sE6LRqI.roa (hash: sldQ+jkEkh3NjeBRI9Vm42AYV7O+YARRotzm3PLAwyo=)
                          2: LfLqxUaT3QrnBmzzsTl49po0YNQ.roa (hash: L0cl7tw/Ws1r/mR8qiaEzUND2tiL5WY6XNQQ0gamYcs=)
                          3: YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl (hash: sHpVcWhhdC4JGh/kLit1Bj2pXbUvdNqIMBv2IuLURjE=)
                          4: zVuCymN8JrRk9IcWOjdOd2y5_r8.roa (hash: 0in95Q1f0yHm24tHTyK5WD1k8nyUtT+dnuohH7HB7vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:67:b1:04:2c:de:ba:c2:a7:bf:eb:66:36:9b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
        Validity
            Not Before: Dec  6 01:01:15 2025 GMT
            Not After : Dec  7 01:01:15 2025 GMT
        Subject: CN=47bf782fe56f4cad0a6dd566480ce4cfdacbad35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:37:96:43:d9:77:a2:b5:86:d8:38:22:4f:ef:
                    7e:08:05:9f:b3:5c:8c:31:94:5b:1e:1e:e3:14:e3:
                    ed:8d:1e:09:cb:8f:ff:c4:1d:a2:4f:d4:9e:8e:80:
                    8b:68:71:6b:c5:5a:db:d3:4f:09:2c:64:49:53:bf:
                    a7:c8:76:6b:bb:fb:21:64:75:e3:b2:bc:1f:69:ea:
                    48:33:61:47:af:e7:6b:61:85:92:31:59:9c:ba:0d:
                    8a:ad:69:77:b3:5e:87:a9:58:31:3c:96:9e:cb:27:
                    36:c6:cb:f4:1c:ae:40:53:00:02:7a:e2:23:44:4f:
                    40:cc:96:b1:76:ab:80:9f:16:fc:e0:df:52:a9:6f:
                    cc:0c:90:33:34:61:6d:2b:ad:b0:a0:62:c6:5f:b7:
                    95:f6:4b:92:3e:35:d2:f5:4a:96:da:c4:e4:6e:5f:
                    48:8b:c8:08:d4:a8:a8:4a:a5:56:1f:b0:75:7b:4a:
                    3a:7d:99:99:f0:63:37:ae:59:74:7a:56:66:c3:f0:
                    e7:56:50:e1:5d:d2:7b:89:0f:11:54:4d:3d:98:c8:
                    10:ff:f5:eb:54:b0:d9:97:8f:5c:78:c4:d2:81:e0:
                    20:ef:bd:a5:99:e4:c7:d9:94:e2:60:2f:dc:d1:54:
                    1e:83:78:ac:6b:f8:09:34:7c:94:c4:76:ea:77:47:
                    90:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BF:78:2F:E5:6F:4C:AD:0A:6D:D5:66:48:0C:E4:CF:DA:CB:AD:35
            X509v3 Authority Key Identifier:
                keyid:61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:4f:d8:fd:35:9c:b7:e4:67:29:46:67:88:7e:83:f2:da:88:
         61:5b:8e:3f:50:06:64:6d:a2:e1:7c:bb:5d:0e:9f:0b:b2:06:
         28:a8:ba:c4:8b:42:47:b8:64:d1:33:03:a4:18:0f:f4:2d:f7:
         85:0b:d3:57:7b:50:41:72:3b:9d:81:cc:9f:d0:04:59:a1:c2:
         86:24:31:5d:8c:7b:2b:33:fc:c3:81:81:59:f4:0a:fd:a3:c5:
         24:7e:29:51:fb:46:25:10:01:25:a6:38:76:dc:cf:7d:47:23:
         27:01:eb:bb:c0:3c:64:73:37:9d:f9:6d:f0:11:c3:85:57:fa:
         e4:72:da:da:dd:21:f9:e5:26:09:12:32:8a:c4:7e:f7:82:e2:
         52:96:42:ea:a0:34:35:d6:63:0d:ea:36:75:9b:56:0d:c8:b8:
         db:1e:06:09:c2:8e:d8:79:81:36:27:02:bc:22:50:c1:2e:9d:
         99:f1:fc:4f:3a:e3:1e:4d:48:7b:b5:d5:0d:20:85:7e:48:96:
         01:99:c9:01:e6:b8:58:00:90:d0:ee:73:52:fc:8e:be:fb:c2:
         d4:eb:57:5c:e6:b4:c1:e1:4d:b8:61:6f:98:25:26:3e:c3:da:
         0b:02:5c:33:fb:78:b4:33:91:32:c0:66:dc:c1:6f:51:c2:65:
         12:3c:16:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLWexBCzeusKnv+tmNpsbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYjNlMWNhYjhjYmY1YjNjNmUwZmJiZTE0OTFmNDhkYTYw
Y2FlNmMwHhcNMjUxMjA2MDEwMTE1WhcNMjUxMjA3MDEwMTE1WjAzMTEwLwYDVQQD
Eyg0N2JmNzgyZmU1NmY0Y2FkMGE2ZGQ1NjY0ODBjZTRjZmRhY2JhZDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDeWQ9l3orWG2DgiT+9+CAWfs1yM
MZRbHh7jFOPtjR4Jy4//xB2iT9SejoCLaHFrxVrb008JLGRJU7+nyHZru/shZHXj
srwfaepIM2FHr+drYYWSMVmcug2KrWl3s16HqVgxPJaeyyc2xsv0HK5AUwACeuIj
RE9AzJaxdquAnxb84N9SqW/MDJAzNGFtK62woGLGX7eV9kuSPjXS9UqW2sTkbl9I
i8gI1KioSqVWH7B1e0o6fZmZ8GM3rll0elZmw/DnVlDhXdJ7iQ8RVE09mMgQ//Xr
VLDZl49ceMTSgeAg772lmeTH2ZTiYC/c0VQeg3isa/gJNHyUxHbqd0eQpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEe/eC/lb0ytCm3VZkgM5M/ay601MB8GA1UdIwQY
MBaAFGGz4cq4y/WzxuD7vhSR9I2mDK5sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJQaHlyakw5YlBHNFB1LUZKSDBqYVlNcm13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi85ZGVmODYtYjFhYy00MGU2LTgzYmQt
OTQ3Y2M1NGViZTAyLzEvWWJQaHlyakw5YlBHNFB1LUZKSDBqYVlNcm13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi85ZGVmODYtYjFhYy00MGU2LTgzYmQtOTQ3Y2M1NGViZTAy
LzEvWWJQaHlyakw5YlBHNFB1LUZKSDBqYVlNcm13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANE/Y/TWc
t+RnKUZniH6D8tqIYVuOP1AGZG2i4Xy7XQ6fC7IGKKi6xItCR7hk0TMDpBgP9C33
hQvTV3tQQXI7nYHMn9AEWaHChiQxXYx7KzP8w4GBWfQK/aPFJH4pUftGJRABJaY4
dtzPfUcjJwHru8A8ZHM3nflt8BHDhVf65HLa2t0h+eUmCRIyisR+94LiUpZC6qA0
NdZjDeo2dZtWDci42x4GCcKO2HmBNicCvCJQwS6dmfH8TzrjHk1Ie7XVDSCFfkiW
AZnJAea4WACQ0O5zUvyOvvvC1OtXXOa0weFNuGFvmCUmPsPaCwJcM/t4tDORMsBm
3MFvUcJlEjwW9Q==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:23:18 2025 by rpki-client