This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
File:                     lYjYtMeqRamyzXN8YUhx63GBur4.mft (raw, json)
Hash identifier:          qzauSAwZXsolLucEqCIVesuk5v5V8HAfeTykaKkmtUo=
Subject key identifier:   8A:2E:30:D7:D4:F8:2E:89:DE:39:0A:E6:23:B3:75:BC:AD:53:AC:CB
Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
Certificate issuer:       /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Certificate serial:       019AF2EA8FEF4DB3A4E7C8E8FA0C684BA976
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
Manifest number:          15C6
Signing time:             Sat 06 Dec 2025 09:07:29 +0000
Manifest this update:     Sat 06 Dec 2025 09:07:29 +0000
Manifest next update:     Sun 07 Dec 2025 09:07:29 +0000
Files and hashes:         1: 3srpGduL_zOjHqnp8WJJguH4g-0.roa (hash: 0YdFBJ148GiXs/92XtOcHZ9J9KnY83sjjDOEJj+352E=)
                          2: 84Pxk_QK5F5c0pwgTDFWtDT7vwU.roa (hash: c1siOGR8KUDdej1OO9Qc6j+ELIH1wDjJz2kkSXEbu4c=)
                          3: 8kHzjF6JFCHpsRwergAzR6Hl5jY.roa (hash: mffmLDMT2QFZfhtMRkhlhhueq/UkFuS4pA75sqzvXFs=)
                          4: F89bS7qNe1rnaq_S9GGqTSzrLTM.roa (hash: l3wobnBJMDC08NMZEcgpSqpNWZr9JHGOo3k9DjoFPHM=)
                          5: lYjYtMeqRamyzXN8YUhx63GBur4.crl (hash: ew3fQuBzjBMe6vdnrajmelyMhjO5i39eAITPutT6Q7g=)
                          6: uQw3fwlIm3nHK6hBCGFZ41iJh-A.roa (hash: amni1qn11Roj9snqRyHbB8jz052oRW+qTOsvWy6QGjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 09:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ea:8f:ef:4d:b3:a4:e7:c8:e8:fa:0c:68:4b:a9:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
        Validity
            Not Before: Dec  6 09:07:29 2025 GMT
            Not After : Dec  7 09:07:29 2025 GMT
        Subject: CN=8a2e30d7d4f82e89de390ae623b375bcad53accb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ec:10:2f:7f:1c:56:b3:45:2d:c5:82:ba:1b:
                    e4:b8:ba:2c:17:f5:b9:13:7d:5e:b4:36:79:33:a0:
                    30:10:4c:11:6a:73:ed:19:e5:16:0b:77:00:1f:ef:
                    53:45:a9:c0:7c:e6:b3:11:dd:eb:5a:fd:84:25:7d:
                    99:a0:08:e6:5e:f4:f7:87:26:64:32:a1:0c:00:d9:
                    e0:a3:9a:82:f8:53:ef:6a:7d:3d:ae:94:2f:6c:df:
                    0d:11:50:7d:01:60:e5:4f:67:23:7c:8b:f9:01:a8:
                    f1:af:80:c5:65:bc:f7:70:0d:12:2f:7b:a8:84:f4:
                    9f:c9:b4:0b:36:ab:16:64:f5:50:cb:24:0c:1e:94:
                    d8:03:8e:cb:0a:f1:47:7f:a2:76:ed:eb:a6:e1:3b:
                    04:a5:bf:f7:5f:6b:cd:fc:fb:60:0f:c5:9e:79:c0:
                    62:f5:37:ae:a2:53:05:be:64:b7:a3:42:b6:d9:fd:
                    0a:23:98:7b:50:6f:de:ad:8d:01:b1:2f:05:72:05:
                    76:18:2d:e6:be:40:d5:b7:51:b3:0f:0b:24:d9:38:
                    b4:12:67:2f:d4:ec:a8:a3:95:c6:2d:31:76:6f:6d:
                    ea:17:ce:2e:eb:8b:91:7f:bb:5b:ad:5d:70:53:71:
                    b3:71:f8:e9:3c:11:8d:5d:63:7c:63:82:9c:aa:61:
                    22:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2E:30:D7:D4:F8:2E:89:DE:39:0A:E6:23:B3:75:BC:AD:53:AC:CB
            X509v3 Authority Key Identifier:
                keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ed:e5:be:6d:6d:3e:c0:db:66:71:76:5f:9a:67:f4:4b:4c:
         c3:b8:b8:16:2b:51:75:af:83:ec:66:1f:47:4b:34:b8:41:9d:
         ef:ac:7e:8a:0a:c0:c4:ba:4c:83:2b:36:7b:69:0f:4e:e6:62:
         d5:8c:90:a2:8f:3c:63:3a:28:78:3c:f4:2c:68:fa:1f:e2:59:
         e9:02:93:ef:71:5f:15:a0:fc:68:17:37:f2:a8:d8:2a:41:29:
         2d:55:ae:6d:e6:ae:62:8d:b9:d9:ef:ff:bd:c7:6e:c9:5d:e7:
         7f:ee:2e:c9:4e:6d:e7:57:22:c1:ac:35:73:eb:a4:f1:80:3e:
         75:ea:86:78:21:60:4b:08:5b:88:78:ef:19:17:cc:7b:ae:b6:
         43:76:59:40:71:45:e5:d8:fc:d1:60:c8:68:df:af:8b:d8:fe:
         c8:73:4e:1b:f4:cc:e6:dd:98:a6:7a:b7:8e:be:55:a5:27:7d:
         f1:8d:73:ae:72:2c:67:db:ae:fe:d1:23:e5:fd:96:ac:29:d5:
         fc:7b:4e:9b:a8:97:6e:ba:48:fc:a8:27:d2:22:a7:d0:5c:6b:
         e2:c4:92:de:f0:92:f7:96:67:b7:86:d8:32:01:e5:71:22:fb:
         6d:dd:ba:3f:fd:b8:2e:2c:bd:29:f6:20:b2:48:e3:e3:d5:70:
         2c:af:f9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:55:01 2025 by rpki-client