This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
File:                     YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft (raw, json)
Hash identifier:          7IREeFv/ygivltiXKIxvb8WzIumocweSrtbP68H75rk=
Subject key identifier:   21:99:3B:A4:0B:45:0B:B3:69:2C:FD:C0:E4:18:7D:A3:D7:D7:CC:A2
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Certificate issuer:       /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial:       019AF4D2B327C88303034FD7C9BB68FC52C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
Manifest number:          0B7B
Signing time:             Sat 06 Dec 2025 18:00:40 +0000
Manifest this update:     Sat 06 Dec 2025 18:00:40 +0000
Manifest next update:     Sun 07 Dec 2025 18:00:40 +0000
Files and hashes:         1: 1PsVRfIiPVKY4ABPWs2nohy1K7o.roa (hash: 88rVHfdMbj5v8kA496lVtNpxvgUPEFaY8NhwRRj8/+8=)
                          2: EiGTvhy4eiV5Vu8zlFXwrWjEg_k.roa (hash: 0BXHqu+47L7wX/7bQpoeXTrDIxrQJJO2G9WNWOkjsI8=)
                          3: HHzsEBFa2A05NKAPqXI5OVwnNw8.roa (hash: 8OesrSo0HOp6GSF2gGuN1ejfkOvUPRQ23ED1PAULVsg=)
                          4: Hwqj86OyZwv6zumPMOdDEHh1OVU.roa (hash: BeyVonGRSiJplCz1koR2l3WRSO3lLoBYCWhiCNd1pi0=)
                          5: ITCvofTUKcrPXUX4ThJtq_NekLI.roa (hash: AZpr92O9rMAjpfYJ9xUOlJVoKycP42+TRFWjyvB4His=)
                          6: LXQ5Dl426hhh6QRd3yqtOofjp0o.roa (hash: znv04G+MmU69F8joUAs2FqyoL/VISgL++/Y2Z827I2w=)
                          7: Sh7JlMJhv-6RtBisv-L0kfbZJks.roa (hash: F+4kBoxCrAhOhNOKd39I4JEpehCkgRYyGrELsXTNP9s=)
                          8: Vhllw2glaqL8EoPQw5XUwOXiBGo.roa (hash: wq9dUzUVsrgsDS8bxTvADCSBnajTq7yo0dmS3z28Cq4=)
                          9: VicI--UiT4J4AutTMYdO2uMhkGg.roa (hash: Y40nMU70m0+2jleYg2nqHmXkrHQzj9QhtyBLW6piLPY=)
                          10: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl (hash: sSIrSPv9Na59Hlzk5YvcRhwfvzAKrKYunxhf71FDTk8=)
                          11: afmYjXaHaumU16oz7llCIME7ui8.roa (hash: sYzsE2kkChbdNUvy3LP4xPuHj7O638koFKmDtasIvnY=)
                          12: dGxUQhmXosrd6snNM74Lqxgx6XA.roa (hash: 9vHiXTHPhgjpbGVFJ6NuVl7cW85jEiPNxPoz0tnnkYg=)
                          13: eagdGfGJlmEZQGY_VHLxO8WUTq8.roa (hash: Qa/XODMcIs8RjiGQJgYDisZS+5jCHEU61E4SO+4K1Jo=)
                          14: i39d_g_1_9oM3E5qn-WFCJuc6cY.roa (hash: 3J8AXusWQrGt85CnVf7tcXl4q37hdR3eK7fR6zkLiJ4=)
                          15: l8KpKReixNDHkSubHdfI2z2J0LI.roa (hash: pX4lLViztQ13HYJwweHqkIk+20Vma9iisJYbAnhei/E=)
                          16: mXukzpv1NM2kvaZ-rWoJrVpFTLM.roa (hash: J7bgse+ysB7WfLwdEC9SLyRriybRWTjR+3BU7PrhOOk=)
                          17: tVbXIsKonEYY3NQbCMNk-3GrQgw.roa (hash: C+asYh9Wc9bJHLCabAmtSAQY11vbwluQbmtmn754Gvc=)
                          18: vd8_SJHzr8iO1aPmpCSJojiHuI8.roa (hash: BqDMc74v4M4R1zQB5Olz3LroGyuHdM7yMcXWbB2ojHg=)
                          19: yovHEk4MCHBICdJuNjwrUiUUEdU.roa (hash: tz5eQ1SCmrb2HGOXNXrueYcHiXH/+vqaOpIdOvKxSrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:d2:b3:27:c8:83:03:03:4f:d7:c9:bb:68:fc:52:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
        Validity
            Not Before: Dec  6 18:00:40 2025 GMT
            Not After : Dec  7 18:00:40 2025 GMT
        Subject: CN=21993ba40b450bb3692cfdc0e4187da3d7d7cca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:74:86:94:a1:1f:20:00:77:e4:95:c5:9a:95:
                    ff:af:ea:51:49:89:01:f8:e1:fe:61:71:7d:01:50:
                    18:5a:b4:5d:41:92:c9:e4:8d:48:fc:50:dc:b0:79:
                    0f:e9:1a:98:3f:7e:f4:6e:1f:53:18:f6:ce:56:60:
                    10:3e:ef:ce:49:47:4a:7b:6a:31:6a:d5:3d:fa:2a:
                    aa:ca:b0:b5:7c:ea:91:b2:6b:c5:7d:14:96:3a:c9:
                    2b:32:6a:da:2b:5c:2a:87:da:f8:95:b0:53:8e:eb:
                    34:f7:e4:de:a8:11:15:34:59:3e:86:e8:5d:8f:99:
                    39:89:8e:e6:be:71:25:31:60:b5:2c:b7:35:75:ee:
                    84:14:b9:c6:c9:10:0a:92:6b:83:18:34:8c:e7:3a:
                    fe:4d:10:18:0b:d5:77:f6:0c:1a:b1:74:81:96:38:
                    7f:57:34:f2:cf:e7:75:cf:46:9f:a5:d1:06:6d:b0:
                    38:67:41:8e:bb:0a:b1:2f:5f:70:b1:77:e3:01:4c:
                    49:6e:de:20:ea:aa:f4:aa:45:e7:73:2e:bb:98:75:
                    65:30:d8:64:c0:f8:ac:88:37:5d:fd:a3:55:a5:1f:
                    63:2b:8a:dd:fe:c2:f0:93:e3:0e:dd:76:52:93:0d:
                    84:5b:46:35:61:23:51:c1:5a:d4:3c:c1:56:c3:62:
                    77:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:99:3B:A4:0B:45:0B:B3:69:2C:FD:C0:E4:18:7D:A3:D7:D7:CC:A2
            X509v3 Authority Key Identifier:
                keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:3d:ad:fb:82:0f:93:49:ab:eb:91:e7:60:6b:68:7f:d1:ff:
         da:37:5d:9b:ca:71:3f:b3:52:6d:7f:85:21:4d:6c:85:dd:00:
         4d:e4:f5:e7:4b:1b:5d:d5:d4:6d:68:c1:0a:06:74:6f:76:43:
         fc:de:b1:5e:db:e6:04:15:48:e4:74:95:55:8b:ac:35:97:de:
         a4:6d:cb:18:95:6e:2f:c4:ce:f9:d5:f3:70:59:0a:67:db:97:
         23:ba:35:48:c7:ff:fc:bb:dd:3a:14:91:b8:b5:ad:bc:b8:4c:
         6e:e1:05:72:44:50:7a:8c:50:86:b1:21:44:a3:8a:fd:a1:2b:
         03:cf:0f:8e:5a:15:78:8c:7d:44:db:46:f6:15:c1:4d:0e:47:
         04:3d:64:1b:9f:e9:93:a3:67:b5:93:44:74:c4:61:f6:0d:f4:
         ae:82:57:d8:16:6b:07:28:94:72:9f:bc:3b:b7:36:2c:79:c4:
         41:bb:55:e9:35:4e:58:bc:77:6b:8e:ef:3f:8f:e0:87:de:a3:
         6c:a9:98:b1:a0:99:e9:17:94:35:d1:b8:e5:26:78:d5:37:3c:
         1a:09:19:b0:60:57:55:15:ed:4e:5f:59:4b:94:e3:fa:2d:c1:
         e0:cb:6e:1c:cb:d0:bb:bc:77:38:dd:31:01:c7:72:1f:ba:6a:
         1d:cb:76:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:46:30 2025 by rpki-client