This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
File:                     Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft (raw, json)
Hash identifier:          SwsLQA4mI1MmNCXMoAQS7Yl7XAXxK6mzq3aXYsd8xi4=
Subject key identifier:   7F:CC:25:08:17:EF:27:AB:26:92:D6:AB:89:4E:53:47:BC:91:CC:0A
Authority key identifier: 63:C1:B9:FF:E9:86:72:BF:62:F4:87:F4:7D:AF:EA:30:F5:BE:F0:9C
Certificate issuer:       /CN=63c1b9ffe98672bf62f487f47dafea30f5bef09c
Certificate serial:       019AF38992D098CE02E1345FD5444953EF06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
Manifest number:          16F4
Signing time:             Sat 06 Dec 2025 12:01:10 +0000
Manifest this update:     Sat 06 Dec 2025 12:01:10 +0000
Manifest next update:     Sun 07 Dec 2025 12:01:10 +0000
Files and hashes:         1: Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl (hash: 4RTM8INHlSzjtVKFzqsZwYpFnrw0t/00P3Eo+I0C+9c=)
                          2: lk2DKx6tMZ4QVeIQ4n9LUxby2mQ.roa (hash: g/j+F0OdRQ6yoH4DQlzMOgxK5K/3yYMtnzs95xrt8uU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:89:92:d0:98:ce:02:e1:34:5f:d5:44:49:53:ef:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63c1b9ffe98672bf62f487f47dafea30f5bef09c
        Validity
            Not Before: Dec  6 12:01:10 2025 GMT
            Not After : Dec  7 12:01:10 2025 GMT
        Subject: CN=7fcc250817ef27ab2692d6ab894e5347bc91cc0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:07:c6:08:87:fa:d1:fd:9a:ed:47:44:ef:79:
                    1d:b4:a7:7e:e2:2e:ea:ba:b4:1f:2c:bf:9d:8e:6e:
                    99:1e:df:a0:b1:f9:29:34:9e:0b:5f:38:c6:64:71:
                    66:ad:db:dc:21:b4:0a:4c:83:6f:59:11:1e:8f:07:
                    b8:04:85:b1:8d:24:d7:1f:83:9b:52:f6:82:59:68:
                    91:97:cd:98:0b:4c:1d:83:c0:44:33:64:78:ba:0f:
                    10:cd:c6:25:72:5d:30:e2:14:f8:d4:4c:36:6f:73:
                    85:13:84:0a:1d:67:7e:dc:5a:51:9e:1c:86:52:99:
                    58:7a:79:88:e0:b7:2e:8f:14:0b:bb:15:ee:b6:35:
                    ce:af:6f:ec:54:b1:7f:78:83:c6:c5:e5:8b:6e:29:
                    03:b0:b1:bb:97:27:0e:d2:d3:7f:47:ec:81:39:af:
                    89:52:c1:bf:a8:15:41:a1:68:8f:fa:20:c9:c8:9c:
                    ec:d8:27:36:6b:62:aa:a2:5a:ed:5c:37:bf:2f:8f:
                    7b:d3:4a:71:4d:84:12:6d:cd:96:10:06:14:d2:61:
                    82:69:c7:bd:1d:2a:9d:24:ef:7d:b1:4f:33:0d:01:
                    fe:96:f9:b4:9d:5d:25:0a:17:c4:ab:46:68:90:16:
                    49:ca:9a:28:83:99:74:72:50:8f:a0:09:75:eb:8e:
                    3d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CC:25:08:17:EF:27:AB:26:92:D6:AB:89:4E:53:47:BC:91:CC:0A
            X509v3 Authority Key Identifier:
                keyid:63:C1:B9:FF:E9:86:72:BF:62:F4:87:F4:7D:AF:EA:30:F5:BE:F0:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:99:72:f7:45:de:a4:a7:49:9f:b3:00:1f:df:4e:c2:0d:87:
         b0:ce:79:9f:a0:54:73:61:b8:7e:e1:2e:0e:c0:1b:aa:f8:d6:
         96:22:1f:7b:7b:ff:dc:c7:f3:2b:f9:14:6f:45:e8:5e:94:94:
         00:e8:7a:5e:f7:11:eb:76:2b:ab:84:91:4b:25:43:98:d3:91:
         b1:34:2d:9d:41:ea:98:72:7d:10:fb:27:0c:76:05:63:2c:5f:
         62:fa:12:44:3c:de:a1:e5:d5:ba:d3:17:84:81:84:e1:2c:4d:
         e8:0e:bd:67:89:c3:d7:c6:0b:3b:0a:e2:be:7e:58:4b:fb:d0:
         18:c9:4c:f0:9e:cc:d2:86:49:8e:85:72:d7:83:25:f0:8a:39:
         2f:06:8c:ca:b3:9d:e8:dc:59:26:08:01:68:aa:a5:a7:7c:0b:
         71:b9:28:b5:22:b7:e6:8a:7a:0d:66:75:47:19:d3:d2:d8:67:
         bb:5b:c8:e2:47:b6:f8:4f:fa:7d:e5:40:9e:05:a0:ed:b2:ed:
         58:62:e5:1d:1b:36:00:ed:cc:d1:03:f4:85:60:20:23:06:0c:
         f9:73:01:1f:42:26:8a:33:57:c7:b1:27:8c:dd:ee:1d:b2:37:
         80:68:0c:fc:06:1f:ae:7a:eb:58:a7:7c:41:74:50:37:e7:83:
         b1:6d:4e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:04:10 2025 by rpki-client