This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
File:                     1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft (raw, json)
Hash identifier:          JvVCLhF0n9VjKgkIPDEgVO8epFZSIgCOvFR/LEkN/Uo=
Subject key identifier:   ED:38:6A:36:E4:1B:EA:D3:37:5D:82:C8:95:AA:5A:BC:08:FC:A9:07
Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
Certificate issuer:       /CN=d58214cfa326611e9d494135a12ce8276f0f1784
Certificate serial:       019AF23F8D1FF727CB16134ACF077BCBA804
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
Manifest number:          08EA
Signing time:             Sat 06 Dec 2025 06:00:42 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:42 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:42 +0000
Files and hashes:         1: 1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl (hash: NIwaOxCjEnL73WohTjeHhvd7AWVSHaktZJjwcJfLHz0=)
                          2: 1ga8nVlGxTmTngINMpKry6AQMr4.roa (hash: Dm3zUfcqGdu/uBK93tg3lyr6TLgweEHTMY6jPc57f2s=)
                          3: DGnBXPgoLqm6MITID6kUNCzRUOs.roa (hash: hIciNbRFt51fw1TxuPPGC92uEfq4OzzxLq8zVboWuDA=)
                          4: EXso7tzCAhfaJCky2E8mk6hxz0E.roa (hash: 9/wsiraIK6tEnjIhsMzkIKM5OLlXL/pBel2txdfmR1w=)
                          5: ORMftoMd9do2ooK5ue-6TvmAIxQ.roa (hash: gRL2F0Qf83gqy3K3r8kmYdUB/bOzK/Peuq/Grv7jGIY=)
                          6: be5WdK6iPEkhbXurpsBiJLlldps.roa (hash: 0YokzCz16IGMuCLhlbe4WQ2dF7nXC982PfyCD/leOcY=)
                          7: hXDhzeK-jX0gCQmDt_ZZNEI7MI4.roa (hash: 5BKSkgpGQ/JZ0CAuFzin9pgFCCI9sY5+ZEzUzT6gZfU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:8d:1f:f7:27:cb:16:13:4a:cf:07:7b:cb:a8:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784
        Validity
            Not Before: Dec  6 06:00:42 2025 GMT
            Not After : Dec  7 06:00:42 2025 GMT
        Subject: CN=ed386a36e41bead3375d82c895aa5abc08fca907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:dd:b6:7d:6c:5c:ee:04:80:03:8c:a7:95:c5:
                    eb:b7:43:98:03:b8:b7:77:4b:56:6d:ac:e3:22:b3:
                    84:b8:65:db:2f:2d:85:32:e5:39:f3:ea:4f:dd:55:
                    d4:d1:f6:77:59:52:39:ba:80:7d:37:41:bc:b5:76:
                    b6:d0:d0:f9:c1:a6:72:e6:c3:a0:65:a2:55:59:9a:
                    08:75:d3:df:31:0e:5a:e9:82:e4:aa:93:ce:aa:cc:
                    ff:25:8d:8f:d3:92:94:7c:9a:2d:cc:6a:85:e1:42:
                    a2:f0:90:30:b4:67:bd:1b:ed:e8:43:c2:53:69:a9:
                    f9:91:ba:d1:75:da:66:0e:7e:a4:eb:e4:71:f4:68:
                    c5:99:c8:e4:88:de:ac:9d:72:71:92:69:e4:11:7a:
                    c8:ba:7e:ec:11:54:25:09:fd:03:ac:79:3e:5a:e7:
                    fd:41:fc:00:2b:4d:02:d0:c4:f0:95:df:ec:94:fd:
                    48:ef:68:fd:da:99:9e:f0:d4:1f:0f:dc:78:15:6a:
                    19:d5:a3:37:9a:d5:e9:47:0c:68:66:e5:99:13:3a:
                    fe:37:3a:ee:71:4d:6a:2a:7c:f1:09:96:4c:fd:ee:
                    9d:0f:b9:69:01:32:db:28:e5:56:3a:8a:1c:3f:dd:
                    f8:db:e4:ed:94:82:6f:04:dd:ff:78:8d:05:42:fc:
                    0d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:38:6A:36:E4:1B:EA:D3:37:5D:82:C8:95:AA:5A:BC:08:FC:A9:07
            X509v3 Authority Key Identifier:
                keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:0a:39:53:f6:1f:79:65:f9:4f:5b:9d:a6:2b:c6:47:de:b0:
         40:2f:0b:a1:2a:a1:bc:56:62:4e:b7:75:6c:87:93:6d:7c:72:
         de:e0:5f:b7:ce:ea:41:ba:ec:d0:6b:b6:30:44:55:79:36:92:
         38:1c:7a:56:cb:98:61:97:39:9d:7e:0f:0f:ec:41:19:25:17:
         34:c6:52:8a:75:c4:e1:e2:df:f0:40:93:e5:ef:89:17:87:12:
         23:df:a0:33:b0:98:bf:a4:0d:59:f8:3f:5a:0d:06:f4:4e:51:
         36:28:66:89:7d:a8:11:d1:84:db:fb:11:0f:c0:5a:1f:68:05:
         ea:fc:f1:11:5d:a7:e1:df:8f:27:38:39:5d:98:72:10:93:4e:
         86:c7:d3:c1:f5:46:ad:55:01:87:5a:c6:51:9b:b7:43:d0:ca:
         19:42:aa:52:17:34:86:7f:e1:73:3b:e6:fe:25:3e:e4:2b:be:
         bc:15:10:b3:40:35:89:75:89:6e:7a:23:ad:b0:be:bd:af:70:
         58:45:c9:77:cf:15:66:15:8f:ce:61:30:a2:c1:64:7c:61:fe:
         4b:eb:01:42:0d:96:b2:cd:16:71:03:6a:79:ff:18:fc:df:d8:
         04:ab:1c:39:88:90:2e:31:8f:2f:57:d2:b6:13:dc:38:59:13:
         6c:0a:49:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:20:04 2025 by rpki-client