This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
File:                     m-YNSucPb1WZhMdrUhzjd8we5yE.mft (raw, json)
Hash identifier:          BzrJHhy9IM56t2LUDoUCZqF4FI4WM2XBaMoxOBzlAzg=
Subject key identifier:   31:71:2C:16:B1:36:61:83:32:FA:B2:4E:2C:89:8C:72:B2:07:D2:F6
Authority key identifier: 9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
Certificate issuer:       /CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Certificate serial:       019AF1D1E4738BA03655A2D9FDE20A4B67DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
Manifest number:          086E
Signing time:             Sat 06 Dec 2025 04:00:55 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:55 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:55 +0000
Files and hashes:         1: EvLIZkrQOLa3Dw1QeQY-_nsYunc.roa (hash: 7wySXJGI2LRPILtTDDd8e153b5pc8VYBaUgp6NmPV7s=)
                          2: m-YNSucPb1WZhMdrUhzjd8we5yE.crl (hash: 379FQx+XMjjf6Ug9Ei9TBNGJJ3DPxOf8bLGyK6EgCC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:e4:73:8b:a0:36:55:a2:d9:fd:e2:0a:4b:67:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
        Validity
            Not Before: Dec  6 04:00:55 2025 GMT
            Not After : Dec  7 04:00:55 2025 GMT
        Subject: CN=31712c16b136618332fab24e2c898c72b207d2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1c:8e:a3:7d:ff:90:43:af:40:58:4d:6f:1a:
                    f7:ff:fe:b4:ee:0b:22:55:1a:2a:ac:d8:48:12:2f:
                    89:56:e4:83:07:96:2d:3b:59:d6:74:23:d4:01:ae:
                    dc:eb:9a:0b:5e:22:80:84:a6:61:11:c7:2c:6d:c1:
                    82:77:16:b7:19:3a:89:d0:20:f8:8e:40:b9:14:db:
                    ea:71:33:6f:f8:46:4d:aa:a3:c2:f7:82:39:8c:28:
                    d0:d8:c7:4a:7f:af:ba:f0:0d:d8:11:b0:d1:e1:15:
                    bb:6e:9a:d1:30:30:b2:37:ef:35:5e:ef:2a:ad:9b:
                    6b:f0:db:e7:76:71:8d:d3:6f:91:08:b2:af:d0:b0:
                    24:0c:73:c4:fb:1c:61:f4:87:84:06:74:02:e8:c8:
                    7e:10:99:cd:85:bc:85:57:48:b5:96:a3:86:63:bb:
                    12:94:31:f5:a7:af:ed:62:8b:02:12:b5:5b:b5:d2:
                    bf:be:69:f5:5a:31:ed:4e:65:b3:7a:32:85:86:76:
                    c5:c1:5b:90:72:e9:c4:04:b3:84:70:38:4c:22:cc:
                    7c:f2:8f:30:0c:ea:b5:32:55:a6:30:2f:93:0c:9f:
                    59:7e:30:e4:91:81:12:7e:e3:5b:6f:de:54:d8:eb:
                    69:33:1b:47:19:44:8d:a3:df:8e:6c:f6:f4:5a:b9:
                    a7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:71:2C:16:B1:36:61:83:32:FA:B2:4E:2C:89:8C:72:B2:07:D2:F6
            X509v3 Authority Key Identifier:
                keyid:9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e7:de:73:03:ea:bc:7c:7a:dc:26:c8:c0:2e:56:25:67:e8:
         05:fc:9e:12:9b:f6:28:fb:a2:27:73:15:6b:b4:04:bd:6f:09:
         94:49:16:07:2a:0a:39:80:27:d1:0f:af:e0:2d:e1:d6:2b:fc:
         9c:e4:39:94:76:57:d1:ad:9e:41:e3:6d:a9:2d:a9:8a:53:01:
         ce:fc:8d:6d:d3:d2:29:0d:ce:3b:fb:d0:da:c7:6b:4e:2f:6c:
         38:a7:ad:31:fa:de:4b:24:3b:d4:db:ba:24:06:bc:f4:5d:53:
         dd:dd:a5:b8:e1:51:dc:67:b5:11:72:aa:d9:cf:96:b0:8e:5d:
         8a:05:8d:9b:72:62:0b:2b:a2:37:0c:e9:ff:98:99:cc:b6:bb:
         2c:e2:77:7b:2f:9d:0a:73:26:53:15:ff:c9:d7:8f:0d:19:37:
         b9:7e:71:12:5e:d5:40:1a:68:db:70:59:8a:97:fa:d1:d1:b3:
         9b:75:01:ca:ce:66:9f:2a:f2:73:21:93:a9:8c:70:10:4a:16:
         58:75:04:53:64:26:86:0c:3b:98:76:e4:27:55:83:6b:7b:76:
         35:33:b9:c8:3a:73:c5:96:8c:05:73:37:48:0b:7f:5a:2a:0f:
         d5:e9:04:62:db:34:40:e4:64:45:b3:69:38:86:be:8f:98:37:
         9f:a2:7e:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrx0eRzi6A2VaLZ/eIKS2fdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZTYwZDRhZTcwZjZmNTU5OTg0Yzc2YjUyMWNlMzc3Y2Mx
ZWU3MjEwHhcNMjUxMjA2MDQwMDU1WhcNMjUxMjA3MDQwMDU1WjAzMTEwLwYDVQQD
EygzMTcxMmMxNmIxMzY2MTgzMzJmYWIyNGUyYzg5OGM3MmIyMDdkMmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xyOo33/kEOvQFhNbxr3//607gsi
VRoqrNhIEi+JVuSDB5YtO1nWdCPUAa7c65oLXiKAhKZhEccsbcGCdxa3GTqJ0CD4
jkC5FNvqcTNv+EZNqqPC94I5jCjQ2MdKf6+68A3YEbDR4RW7bprRMDCyN+81Xu8q
rZtr8NvndnGN02+RCLKv0LAkDHPE+xxh9IeEBnQC6Mh+EJnNhbyFV0i1lqOGY7sS
lDH1p6/tYosCErVbtdK/vmn1WjHtTmWzejKFhnbFwVuQcunEBLOEcDhMIsx88o8w
DOq1MlWmMC+TDJ9ZfjDkkYESfuNbb95U2OtpMxtHGUSNo9+ObPb0WrmnEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFxLBaxNmGDMvqyTiyJjHKyB9L2MB8GA1UdIwQY
MBaAFJvmDUrnD29VmYTHa1Ic43fMHuchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbS1ZTlN1Y1BiMVdaaE1kclVoempkOHdlNXlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jMDI4MjAtZmI2Ni00NzkyLTlkOGQt
Y2M4ODU4NTdmYWYyLzEvbS1ZTlN1Y1BiMVdaaE1kclVoempkOHdlNXlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jMDI4MjAtZmI2Ni00NzkyLTlkOGQtY2M4ODU4NTdmYWYy
LzEvbS1ZTlN1Y1BiMVdaaE1kclVoempkOHdlNXlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+fecwPq
vHx63CbIwC5WJWfoBfyeEpv2KPuiJ3MVa7QEvW8JlEkWByoKOYAn0Q+v4C3h1iv8
nOQ5lHZX0a2eQeNtqS2pilMBzvyNbdPSKQ3OO/vQ2sdrTi9sOKetMfreSyQ71Nu6
JAa89F1T3d2luOFR3Ge1EXKq2c+WsI5digWNm3JiCyuiNwzp/5iZzLa7LOJ3ey+d
CnMmUxX/ydePDRk3uX5xEl7VQBpo23BZipf60dGzm3UBys5mnyrycyGTqYxwEEoW
WHUEU2Qmhgw7mHbkJ1WDa3t2NTO5yDpzxZaMBXM3SAt/WioP1ekEYts0QORkRbNp
OIa+j5g3n6J+Og==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:10:44 2025 by rpki-client