This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
File:                     pyREUNHHhV34SPNDGOHwlIkA2NU.mft (raw, json)
Hash identifier:          vXATrBHPYD/VN+Do8NTFTUfe+KAb6WMSOjMwVkTVjOA=
Subject key identifier:   18:B7:94:AA:81:5F:74:9D:D2:5D:B1:62:30:56:EF:4A:D0:1B:54:10
Authority key identifier: A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5
Certificate issuer:       /CN=a7244450d1c7855df848f34318e1f0948900d8d5
Certificate serial:       019AF051272ECCB67356ECC5EC75219D363C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
Manifest number:          0580
Signing time:             Fri 05 Dec 2025 21:00:41 +0000
Manifest this update:     Fri 05 Dec 2025 21:00:41 +0000
Manifest next update:     Sat 06 Dec 2025 21:00:41 +0000
Files and hashes:         1: na8XynSGUeG2Sfrn6Chut503AkI.asa (hash: 4qpOnKqUebRhkKVGFa2+gCBYJ66AvyagbWffkXeQIYY=)
                          2: pyREUNHHhV34SPNDGOHwlIkA2NU.crl (hash: eMWYMNbTG+khQv54bDEUcebme76TMCD1oVibMKowG0A=)
                          3: slYjYuIFo0w5rC10sA14jjDYTj4.roa (hash: vyn3c0KUGlBUpj99ofdIph6Rnk7SAht9bfr6EHYuHzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:51:27:2e:cc:b6:73:56:ec:c5:ec:75:21:9d:36:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7244450d1c7855df848f34318e1f0948900d8d5
        Validity
            Not Before: Dec  5 21:00:41 2025 GMT
            Not After : Dec  6 21:00:41 2025 GMT
        Subject: CN=18b794aa815f749dd25db1623056ef4ad01b5410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bc:ba:af:d5:a7:d3:03:be:3f:c7:39:0a:82:
                    bf:20:13:57:3d:23:a1:55:8e:e9:80:af:9a:ca:59:
                    20:ab:c1:3a:d4:a1:64:a5:ca:64:b4:b4:b1:0f:84:
                    54:4b:45:6e:5a:65:8f:fe:2e:28:14:79:90:60:2d:
                    9a:4e:1d:9e:18:28:48:ce:bf:3d:e2:0d:91:eb:c5:
                    ed:17:34:3e:d0:42:86:a9:03:75:d3:81:70:32:56:
                    eb:d3:70:87:da:24:9e:b2:ec:0a:da:0d:6e:b5:c8:
                    c1:85:9c:f1:03:e0:80:52:7f:9b:b4:f2:88:b8:e8:
                    f7:5b:8a:e6:88:2e:2c:28:18:06:e2:ca:fe:90:1d:
                    79:88:8b:00:a7:50:33:d9:f2:6b:53:dc:f5:39:5b:
                    88:44:fc:d7:50:cf:cb:a2:a3:61:2f:fa:af:14:63:
                    bd:59:81:0a:d6:93:1a:2e:76:21:20:44:33:b0:84:
                    cc:cf:92:aa:c0:7d:79:c6:18:62:3c:49:59:aa:d9:
                    17:13:ae:9f:e3:c5:05:bb:b7:40:ff:76:83:78:9b:
                    fb:6e:2d:15:dd:71:dd:c9:85:8a:d9:d7:d9:a3:05:
                    90:47:3b:7e:1f:13:72:5a:fe:1d:66:7b:8e:a5:9b:
                    c3:86:36:64:ac:18:8c:db:a1:33:1a:32:1d:e7:7a:
                    32:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B7:94:AA:81:5F:74:9D:D2:5D:B1:62:30:56:EF:4A:D0:1B:54:10
            X509v3 Authority Key Identifier:
                keyid:A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d5:28:a2:ae:9b:0a:c6:ca:c6:34:45:bc:d2:48:66:07:07:
         ae:17:c2:52:25:3f:c0:6b:18:de:bb:76:5c:dc:0d:80:7d:1d:
         b6:25:37:0f:5e:e4:0e:57:f7:10:fc:6f:22:a8:a4:a2:d3:97:
         46:64:26:d6:bb:6d:30:c2:6f:12:97:c5:40:0a:b2:20:13:2c:
         86:75:a6:1b:a1:74:33:b9:12:fe:ef:34:46:8e:e8:96:7d:f9:
         74:64:b5:96:59:77:71:a3:ac:9d:04:f5:6d:ac:aa:3c:4d:f4:
         08:93:f3:12:0d:79:f9:21:f8:3a:70:b7:98:45:39:3b:2e:ec:
         bf:e4:88:5c:28:9b:3b:c5:26:0a:1c:fc:e3:e8:3e:87:2c:0d:
         d3:a6:1f:5a:dc:03:6c:40:4c:d4:1a:46:ba:66:b0:c8:4e:84:
         e8:55:d7:29:69:76:fe:8a:3c:d0:72:bf:f3:5c:c5:e6:0d:fd:
         32:26:1d:67:f6:21:ab:19:ef:69:d2:28:4d:0f:74:be:38:b1:
         bc:ba:e6:db:2b:73:7a:96:6e:3f:c4:97:44:f7:db:5b:af:bc:
         c4:1c:57:79:f0:c4:56:b0:4c:e3:c8:60:81:f9:e6:90:cd:bf:
         f4:7b:cf:f2:9d:f1:99:dd:55:fd:9d:bd:2b:44:65:11:d4:43:
         9f:24:b2:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrwUScuzLZzVuzF7HUhnTY8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MjQ0NDUwZDFjNzg1NWRmODQ4ZjM0MzE4ZTFmMDk0ODkw
MGQ4ZDUwHhcNMjUxMjA1MjEwMDQxWhcNMjUxMjA2MjEwMDQxWjAzMTEwLwYDVQQD
EygxOGI3OTRhYTgxNWY3NDlkZDI1ZGIxNjIzMDU2ZWY0YWQwMWI1NDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvry6r9Wn0wO+P8c5CoK/IBNXPSOh
VY7pgK+aylkgq8E61KFkpcpktLSxD4RUS0VuWmWP/i4oFHmQYC2aTh2eGChIzr89
4g2R68XtFzQ+0EKGqQN104FwMlbr03CH2iSesuwK2g1utcjBhZzxA+CAUn+btPKI
uOj3W4rmiC4sKBgG4sr+kB15iIsAp1Az2fJrU9z1OVuIRPzXUM/LoqNhL/qvFGO9
WYEK1pMaLnYhIEQzsITMz5KqwH15xhhiPElZqtkXE66f48UFu7dA/3aDeJv7bi0V
3XHdyYWK2dfZowWQRzt+HxNyWv4dZnuOpZvDhjZkrBiM26EzGjId53oy8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBi3lKqBX3Sd0l2xYjBW70rQG1QQMB8GA1UdIwQY
MBaAFKckRFDRx4Vd+EjzQxjh8JSJANjVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHlSRVVOSEhoVjM0U1BOREdPSHdsSWtBMk5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84ZWU1Y2MtZTlhMy00YzU2LWFlOWEt
MTY4YzMzMDZjMDQyLzEvcHlSRVVOSEhoVjM0U1BOREdPSHdsSWtBMk5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84ZWU1Y2MtZTlhMy00YzU2LWFlOWEtMTY4YzMzMDZjMDQy
LzEvcHlSRVVOSEhoVjM0U1BOREdPSHdsSWtBMk5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGdUooq6b
CsbKxjRFvNJIZgcHrhfCUiU/wGsY3rt2XNwNgH0dtiU3D17kDlf3EPxvIqikotOX
RmQm1rttMMJvEpfFQAqyIBMshnWmG6F0M7kS/u80Ro7oln35dGS1lll3caOsnQT1
bayqPE30CJPzEg15+SH4OnC3mEU5Oy7sv+SIXCibO8UmChz84+g+hywN06YfWtwD
bEBM1BpGumawyE6E6FXXKWl2/oo80HK/81zF5g39MiYdZ/YhqxnvadIoTQ90vjix
vLrm2ytzepZuP8SXRPfbW6+8xBxXefDEVrBM48hggfnmkM2/9HvP8p3xmd1V/Z29
K0RlEdRDnySyyA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 05:05:16 2025 by rpki-client