This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
File:                     YDgxphvIqPTLhYhwIvtvhjlzRdw.mft (raw, json)
Hash identifier:          ZuE46WsuhPe3m8YS1w36DoEOCdjspDoISpsagH99sy0=
Subject key identifier:   B4:9A:A8:B1:61:22:01:9C:18:F4:87:AE:BE:42:3E:FD:5F:2E:62:5E
Authority key identifier: 60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
Certificate issuer:       /CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Certificate serial:       019AF3F74DD3CEA9FAA2839AC03B320C62E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
Manifest number:          0E75
Signing time:             Sat 06 Dec 2025 14:01:02 +0000
Manifest this update:     Sat 06 Dec 2025 14:01:02 +0000
Manifest next update:     Sun 07 Dec 2025 14:01:02 +0000
Files and hashes:         1: BbO3Y81u57rZF7WlM500MsuZpRM.roa (hash: ENegZhckEyjrMTUEgK0PeHY3+6b9WA+KNwr6cWbkGV8=)
                          2: VPoc4sp2b0J8IUmBhYFRCQnsPD0.roa (hash: syajYrJmIJZ/O9q2a3nZ7jEdzvbYM5uKAi7nB9k82iw=)
                          3: YDgxphvIqPTLhYhwIvtvhjlzRdw.crl (hash: qpZBaFNBvGNUZo9b/qMRIilA8dkkO6XWjGqAe/MM8E4=)
                          4: _mYolmt2fF0wabxHp1kAcOpFjJQ.roa (hash: Ni2pHhwSkaVczL8tsRRH+ZM9PBph4eSrgcYZ18OoRUY=)
                          5: ucZk7RPUTaIeSxLkQGWFeSNWVec.roa (hash: 5rWJbfTjArOhmwmwJF8k3Fgre3TIPFtEAx1ngBb1v5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f7:4d:d3:ce:a9:fa:a2:83:9a:c0:3b:32:0c:62:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=603831a61bc8a8f4cb85887022fb6f86397345dc
        Validity
            Not Before: Dec  6 14:01:02 2025 GMT
            Not After : Dec  7 14:01:02 2025 GMT
        Subject: CN=b49aa8b16122019c18f487aebe423efd5f2e625e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:02:47:82:90:b7:17:35:ad:c7:2a:5c:f4:fb:
                    e3:9a:de:ea:3e:af:47:b6:e2:ab:80:b0:d8:c8:f9:
                    23:9c:bd:4c:90:8e:9a:7e:5e:6e:66:47:81:d6:11:
                    53:bf:c0:62:6e:36:0a:76:05:95:88:d5:c1:bd:1a:
                    6f:0f:82:a3:75:85:1c:c5:dc:3d:07:a0:b3:46:e6:
                    04:2d:25:1a:4b:4b:03:38:0e:39:9a:93:cf:d4:80:
                    f3:2c:1e:51:bf:40:bf:c7:e0:89:79:a2:fc:df:e4:
                    49:cb:30:95:da:a0:76:db:b9:20:58:c7:4c:86:99:
                    fc:bf:01:88:3a:c2:e2:26:7e:8a:43:31:59:d5:cd:
                    99:22:41:ff:ee:38:38:d5:61:a3:f9:72:47:8c:1a:
                    f5:66:40:ff:e0:11:1c:a0:ee:b6:bd:34:61:43:65:
                    3e:e7:e0:11:88:2e:50:88:82:c2:b0:a1:d4:d8:cd:
                    69:42:e1:3d:a4:cb:6f:5c:b8:6f:c5:4f:9a:6a:64:
                    4f:6c:c8:37:1d:7e:1c:b3:24:9e:c4:f2:a2:1c:78:
                    86:73:da:f7:eb:74:06:5e:47:8a:fa:81:04:7b:f5:
                    b9:81:0f:7e:97:fa:85:02:a3:08:65:6f:af:f4:7c:
                    04:79:cb:e2:08:19:71:c3:d8:68:12:e8:4d:3b:d1:
                    82:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9A:A8:B1:61:22:01:9C:18:F4:87:AE:BE:42:3E:FD:5F:2E:62:5E
            X509v3 Authority Key Identifier:
                keyid:60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:6e:7e:6b:a5:9b:67:f3:3e:ac:94:36:4a:db:63:d8:44:a9:
         ad:95:5c:28:40:6c:23:29:45:03:71:10:a8:cc:3a:45:1c:af:
         18:f6:8c:f8:f9:2c:98:4e:81:cf:81:ae:ab:23:ec:93:da:2b:
         66:2b:b4:e0:3a:59:80:ac:ea:72:df:1f:73:e7:10:b4:d3:66:
         7e:08:0b:a8:40:af:71:d0:eb:bd:e5:cf:e4:0b:13:53:4f:4b:
         03:34:88:0a:38:3d:1c:e1:39:1b:11:d5:6d:2a:a4:08:95:ed:
         59:9b:fd:d5:9f:28:6b:db:df:a2:7c:94:17:d2:a2:89:6f:66:
         dc:bc:0d:b0:91:cb:94:45:af:1e:63:4e:63:90:d2:55:16:5f:
         14:34:94:38:85:55:2b:48:87:dd:d7:8a:d0:74:5a:4b:b2:60:
         28:6d:8c:72:2d:ec:50:8a:82:82:f4:8d:18:3c:9e:63:c1:d7:
         61:51:4d:24:1a:62:75:68:2f:7f:65:d9:f8:48:28:e5:2b:f1:
         18:db:2e:23:dc:4c:bd:55:0b:a1:8d:b3:d5:62:43:3c:3e:2e:
         48:5c:90:85:6c:57:f4:b5:30:11:82:8e:6a:1d:55:0f:a6:c7:
         cf:13:6f:99:fe:67:46:6a:5f:c9:35:2c:78:ce:06:ef:2f:ab:
         6e:c6:b4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:59:26 2025 by rpki-client