This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
File:                     0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft (raw, json)
Hash identifier:          I89/S1NI84DkUtDkudfnljH/q3SuMbD3dUpx7XZVPk8=
Subject key identifier:   8E:64:CA:B0:34:AD:B4:40:23:A9:C0:EE:B1:26:FF:B7:53:4D:22:E7
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Certificate issuer:       /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial:       019AF4D29E8244A20BA4C25EF8AF679D3AB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 18:00:35 +0000
Manifest this update:     Sat 06 Dec 2025 18:00:35 +0000
Manifest next update:     Sun 07 Dec 2025 18:00:35 +0000
Files and hashes:         1: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl (hash: DkarsicaXZQd/UWvNV5WRN19x1W2bWANfSaYu3VjDNw=)
                          2: Tl33p-h-oYWG4k1AAbZ0b7tAMuc.roa (hash: HuarYU0/JApAedHcUrTI8IFeZjSh+Z57prgHfyI1KYc=)
                          3: e59o4nflKfkRbUwhU4WwMTxJI_Y.roa (hash: qghzj0Mw1zkJvf6+G2QT/sr1eaEcjZizZylknw1LbJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:d2:9e:82:44:a2:0b:a4:c2:5e:f8:af:67:9d:3a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
        Validity
            Not Before: Dec  6 18:00:35 2025 GMT
            Not After : Dec  7 18:00:35 2025 GMT
        Subject: CN=8e64cab034adb44023a9c0eeb126ffb7534d22e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0a:25:d1:d5:82:9f:fd:e1:f8:a8:df:24:54:
                    a9:21:2b:40:6c:74:39:ac:0c:b5:82:a5:58:a7:7c:
                    28:99:03:29:5b:ba:c3:0b:00:53:97:a9:e0:bc:87:
                    ae:f0:5c:d0:a2:54:59:60:5a:df:da:bd:43:51:25:
                    45:5b:4c:cd:9a:f2:f6:0e:70:80:ac:66:41:d6:e2:
                    36:f3:5f:61:df:de:50:52:b9:84:f9:b9:e6:db:bf:
                    63:10:ef:f4:29:1e:d9:41:4b:ff:21:7b:eb:ad:e8:
                    85:d2:da:f1:94:93:b1:0e:3c:da:5c:45:b3:0c:41:
                    75:aa:6a:6b:ac:93:eb:02:84:0d:2a:f2:d1:c7:ca:
                    28:2e:fd:b8:0a:40:56:66:c3:ab:7a:e1:0b:20:6a:
                    e1:e8:8a:d3:62:72:c6:db:1e:30:27:40:d5:cd:de:
                    14:62:68:51:80:31:03:f1:5d:2c:68:91:d8:aa:c0:
                    dc:26:68:fc:b7:49:e8:30:c7:58:a7:38:7f:43:e8:
                    e7:73:81:3c:9c:80:5a:58:c7:e7:46:5e:27:56:d2:
                    cf:6c:6f:d3:a7:93:ae:fe:1d:aa:94:b8:45:85:1a:
                    6d:b8:99:4a:72:6a:3b:64:82:09:19:30:02:fa:3c:
                    b9:c8:08:4f:5f:89:6f:61:1d:db:ed:81:f0:eb:c8:
                    d8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:64:CA:B0:34:AD:B4:40:23:A9:C0:EE:B1:26:FF:B7:53:4D:22:E7
            X509v3 Authority Key Identifier:
                keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:83:33:37:8a:61:4e:b0:3d:4a:e7:f1:97:1d:a5:1a:20:96:
         a2:32:3a:b7:1c:9c:c7:20:70:71:35:23:54:e9:86:ea:6f:9f:
         46:e1:c9:49:3b:a1:e3:9b:fe:26:42:38:38:73:90:a1:b6:49:
         79:cd:d4:42:ef:f7:ed:5e:83:de:93:cb:05:71:b0:df:9c:d1:
         72:a8:82:ce:22:14:e7:00:c5:55:a3:26:7d:44:19:a6:21:67:
         a8:74:29:6a:53:b9:8a:58:2c:88:56:08:97:c4:bd:c5:1b:9a:
         5b:8b:45:a6:06:72:0a:56:24:41:78:ab:10:e1:10:69:1c:9d:
         91:c0:0e:6d:7e:86:45:9b:cc:57:15:2a:c8:a4:ae:4c:01:e3:
         4d:20:7e:d5:f8:3c:0e:74:83:04:d5:49:f9:67:79:f4:71:cf:
         61:39:b8:f9:61:c3:d5:f2:5c:17:f0:7c:38:1f:65:7f:a7:c2:
         66:e2:79:d4:0b:2e:8c:ea:f9:d6:69:1a:aa:5f:1b:37:ef:32:
         2f:b6:be:db:13:72:71:5a:eb:d3:e2:a7:48:bc:37:d2:af:5c:
         ed:31:7d:59:27:0a:22:0f:19:8e:fd:78:c1:37:b7:68:4e:e3:
         02:db:9f:8a:c1:44:15:1a:00:e3:ed:6d:07:e7:29:bb:fd:06:
         45:2a:c7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:29:16 2025 by rpki-client