This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
File:                     18YKVOA8n4Fcwzr9RdPE25r3bxY.mft (raw, json)
Hash identifier:          ybnKNPyfy1cwwJZlQyqgvFpABWnNHXAdu//Qebgu1Ws=
Subject key identifier:   80:F0:5C:0B:8F:F3:DA:40:E9:88:DE:02:94:96:57:52:A4:F6:72:6E
Authority key identifier: D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
Certificate issuer:       /CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Certificate serial:       019AF208B37335B9D308C842AB50FBF1FDE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
Manifest number:          0E86
Signing time:             Sat 06 Dec 2025 05:00:47 +0000
Manifest this update:     Sat 06 Dec 2025 05:00:47 +0000
Manifest next update:     Sun 07 Dec 2025 05:00:47 +0000
Files and hashes:         1: 18YKVOA8n4Fcwzr9RdPE25r3bxY.crl (hash: +fT6TKycVKKZ4LuoJMXf4mApzwDPkIJ5T4zViDUvGSw=)
                          2: 4YqKA_NWl67P1UUsYLLewOce3N4.roa (hash: jzpkFPCa8z2EEBKsdTK/EMaQenQwoVIoEp37mrkYSlo=)
                          3: IQytQDxkG6z6-hb3Iu6XIv8OQic.roa (hash: Fz8ORoLoUXIyDmykV9akqdIIcR0t067gq2FU4oUFIwY=)
                          4: OPYEfeaD4UG3_woKyPv1Wj7JrZg.roa (hash: iv8H/ObGNtJDTTAshveiukMxLvPbVXVjWuW+XjG+jWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:08:b3:73:35:b9:d3:08:c8:42:ab:50:fb:f1:fd:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
        Validity
            Not Before: Dec  6 05:00:47 2025 GMT
            Not After : Dec  7 05:00:47 2025 GMT
        Subject: CN=80f05c0b8ff3da40e988de0294965752a4f6726e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b9:cb:34:ad:c7:84:73:57:d4:9b:70:09:02:
                    c5:71:00:83:94:4f:70:bc:f6:8c:1f:01:e6:29:fc:
                    d4:86:0c:a7:65:7e:02:61:67:6c:32:17:81:02:a6:
                    b7:23:c6:1a:6d:21:6c:8b:f2:97:2a:ad:27:fa:e0:
                    03:79:c8:bd:0c:57:42:8c:58:ef:65:7d:99:e0:b4:
                    c8:89:ff:bc:46:dd:34:c7:c6:38:7d:31:9b:53:87:
                    a4:28:e8:fa:2e:06:eb:07:5b:f2:81:89:08:ff:61:
                    d3:58:a0:49:81:f8:00:25:a6:9c:5e:00:9b:29:a6:
                    cc:6b:bb:1f:cc:ba:99:8a:60:60:dd:77:7f:77:fc:
                    a4:fc:ea:99:c3:60:5c:d7:70:24:8b:22:19:86:59:
                    5a:0c:fb:e7:75:2e:7c:d8:54:7f:ac:3f:57:a0:08:
                    b5:56:7c:51:94:2c:e9:d2:b6:f8:0b:10:03:1b:8b:
                    1f:32:e8:46:d5:4c:64:77:90:44:33:03:a1:1d:2e:
                    f4:0a:ed:fa:47:1c:97:82:87:77:6f:91:d2:b3:1b:
                    2f:db:98:24:0b:01:b8:82:8a:b5:8a:a5:f5:31:4b:
                    e3:75:66:cf:83:2a:88:72:fc:fe:8d:88:b8:71:40:
                    9c:e0:ad:c3:10:92:63:54:df:5d:33:b1:e0:d3:ca:
                    d5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F0:5C:0B:8F:F3:DA:40:E9:88:DE:02:94:96:57:52:A4:F6:72:6E
            X509v3 Authority Key Identifier:
                keyid:D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c5:80:3d:0c:4c:4f:bf:e9:04:10:9c:bd:42:09:d6:39:91:
         e8:76:ce:b4:e3:25:4c:8d:d6:c4:86:53:c6:c8:4c:ee:df:bb:
         e8:05:18:8a:95:90:19:1f:91:4b:5c:26:28:c4:b5:ba:43:b7:
         37:09:34:dd:6f:0b:a9:3a:86:4b:04:66:99:19:c4:a3:d6:e1:
         c0:84:ea:d5:ba:f6:29:41:43:c1:88:91:52:5f:4b:1f:5e:db:
         1c:25:56:f4:bc:13:63:8d:be:d5:bf:21:1a:f5:c2:25:0b:80:
         20:29:7a:68:9c:89:ed:10:46:6f:0a:29:6d:34:d4:d2:9b:9e:
         1e:5a:4b:6b:bb:8b:a8:e9:aa:c4:97:09:ee:f2:80:5f:8d:ff:
         88:db:a0:f1:6b:cb:f3:37:73:e3:58:5d:46:1e:2b:4d:8e:d1:
         ea:c7:aa:ac:fa:cd:61:5e:ac:9f:fc:56:10:1c:0e:1c:05:4a:
         7e:93:2b:97:30:48:11:f2:82:bf:29:35:5b:fb:84:7b:34:31:
         49:0b:2e:35:80:83:92:d1:23:a8:60:ef:65:51:45:39:37:cc:
         22:a0:4b:f1:b6:a6:c5:a1:35:1b:84:19:b4:3d:7e:c0:06:35:
         00:5b:76:a7:cd:a4:ba:76:36:27:88:49:cc:7d:55:43:3a:bf:
         5e:b1:13:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:00:28 2025 by rpki-client