This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
File:                     yvF4APGUOvHFFChMw754Dpwh3Xg.mft (raw, json)
Hash identifier:          U/2q1xNhCwXuSUVlkjdIY8CLVGBS6xL4oLe8L74GVQw=
Subject key identifier:   14:44:6A:DE:19:5D:EB:7B:82:07:7B:5D:11:9A:F2:86:97:B5:C5:09
Authority key identifier: CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
Certificate issuer:       /CN=caf17800f1943af1c514284cc3be780e9c21dd78
Certificate serial:       019AF2090806A69D2C723886A0FBE817444E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
Manifest number:          0BAF
Signing time:             Sat 06 Dec 2025 05:01:09 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:09 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:09 +0000
Files and hashes:         1: sjAjhtjT9idj_VOPKz21hZUiTyM.roa (hash: GIvaCG/17riJHZiERj633+3ciTXhudtU1ZczZq4oF9g=)
                          2: yvF4APGUOvHFFChMw754Dpwh3Xg.crl (hash: 0YBInK31KBL4knwNZY/KJO1VxJEBzS7itpNXzbU8wl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:08:06:a6:9d:2c:72:38:86:a0:fb:e8:17:44:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caf17800f1943af1c514284cc3be780e9c21dd78
        Validity
            Not Before: Dec  6 05:01:09 2025 GMT
            Not After : Dec  7 05:01:09 2025 GMT
        Subject: CN=14446ade195deb7b82077b5d119af28697b5c509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:da:c4:b2:f3:b8:74:d0:84:63:99:e5:3b:c5:
                    d1:a1:85:b2:a0:b5:9d:8c:21:49:66:5b:41:1b:67:
                    a4:6b:29:92:fa:8e:ab:d0:23:59:30:0c:92:1f:f4:
                    08:4f:3e:b4:9b:22:4b:5b:11:b8:90:97:92:d3:4a:
                    f0:7e:07:86:f4:2a:7b:f6:55:3c:06:22:89:7d:ed:
                    f2:3f:e4:48:8e:a0:c6:e8:37:3f:97:a4:8e:3e:a3:
                    e9:87:be:76:84:39:7a:c9:3f:1d:18:2e:d4:56:88:
                    2d:a8:22:5c:5e:fc:a9:0f:c2:07:38:9f:4d:31:c7:
                    83:b2:9d:a5:a9:81:52:f0:1b:09:4b:49:2a:4c:f0:
                    3e:0a:92:ab:71:c5:84:8b:c4:43:a1:2e:e4:87:c7:
                    4f:d0:9f:f0:cf:cb:15:19:88:cb:72:d3:21:03:43:
                    cb:b8:85:60:97:00:71:f9:5a:f0:b6:84:85:6b:5a:
                    f2:db:ea:e9:05:3b:fc:83:ec:f8:3a:bb:43:1c:c5:
                    d1:9e:72:a6:9a:47:1c:f3:60:63:e3:b0:0c:4b:34:
                    15:1e:26:f8:38:bd:85:3e:73:7a:5b:43:4b:09:b2:
                    0f:3c:e3:2f:31:0f:e3:42:22:2c:0c:f5:8f:da:be:
                    f2:d5:9d:93:aa:67:a9:d2:00:ae:58:53:a2:63:4d:
                    96:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:44:6A:DE:19:5D:EB:7B:82:07:7B:5D:11:9A:F2:86:97:B5:C5:09
            X509v3 Authority Key Identifier:
                keyid:CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:3f:6b:de:b9:63:de:27:a0:64:a3:52:bc:dd:0b:9c:df:4e:
         ef:09:90:fe:f1:a5:65:91:cd:3d:ff:23:28:e0:ad:c5:ff:7f:
         cc:fa:7d:28:f5:a9:58:df:00:5b:ad:9b:a6:c3:be:38:85:c5:
         bd:85:0c:37:70:49:b2:71:49:e1:f3:0d:8e:59:4a:39:c5:e2:
         bd:70:cd:48:99:d0:e1:d5:d7:a8:36:2b:9e:1c:82:10:13:f4:
         ca:84:e4:8f:a1:54:ba:e5:4a:0d:a2:f1:34:2d:3f:df:d8:c3:
         c5:06:32:05:a1:38:48:7d:6e:f1:40:c6:17:6a:e6:30:ab:f6:
         11:0e:c5:56:1e:ac:7f:0e:33:39:36:21:a6:24:a6:17:82:96:
         38:eb:bf:b8:24:06:15:76:77:e2:04:c1:06:9d:e0:e8:46:89:
         88:f0:40:36:cd:44:b9:95:14:fb:77:e3:08:21:5f:a9:01:c8:
         e1:cc:2d:7a:b2:a2:7c:18:9f:2b:86:ea:97:73:de:01:36:01:
         1b:7f:67:fd:4a:9a:40:e3:32:99:71:40:28:c1:57:2c:cf:53:
         fb:87:b9:65:e6:8b:6d:89:37:c7:0a:3d:83:00:ba:54:17:9c:
         a3:40:9a:18:57:8f:97:e5:b0:42:ff:13:b2:e8:81:c2:77:bf:
         68:8c:51:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:26:39 2025 by rpki-client