This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
File:                     yMLHMUWTBCz3QhD38DvnEGwiT4k.mft (raw, json)
Hash identifier:          m1bRBPfWh4rPTCcXz5eL/UV2RKkgLf7BLEZSOQevic0=
Subject key identifier:   7A:FB:80:0C:E7:33:52:0D:DD:7A:DE:DC:A8:C2:CE:52:28:F5:54:27
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Certificate issuer:       /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial:       019AF16404621D5DBDC53F9DFED14C1A8F01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
Manifest number:          156B
Signing time:             Sat 06 Dec 2025 02:00:54 +0000
Manifest this update:     Sat 06 Dec 2025 02:00:54 +0000
Manifest next update:     Sun 07 Dec 2025 02:00:54 +0000
Files and hashes:         1: 3dzOq8G9IRlpRN6VYAesJxFCM9I.roa (hash: pZlE7f/kxQT336UtrvzPnURvz6UI7VQoJaImOOVWpDM=)
                          2: JJmF9idPFAXWWPX9AjfEMsS8Ozk.roa (hash: Z6lxpjHZf+bFBTA5z2r8BCssBYWOfAe+nD+SW+UaYNE=)
                          3: YIJ2Q4Qz_oqoPZT1pP6ZmbNImuw.roa (hash: rwfSsDFI+XR6+eARP8r7vKDq4E96cyyI5p0FkLq3uMA=)
                          4: _RcJWBC9z2DoyJEEVJqiJ3iNmSY.roa (hash: shwbQcS4UjqPIXlBcN1Jjj6/KYNyV5tzzIShWjZk6kQ=)
                          5: nuCFwAqyzaBDOFqPTOr9WxwYvF0.roa (hash: s0EEOYTzU+K4DwXB/HLNvSrguhiOGINJ5MGi2FWEkwk=)
                          6: yMLHMUWTBCz3QhD38DvnEGwiT4k.crl (hash: J9y1QFxL3adsw3xvCU8fwCU1VfosmsV5qQi4yfwtwPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:04:62:1d:5d:bd:c5:3f:9d:fe:d1:4c:1a:8f:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
        Validity
            Not Before: Dec  6 02:00:54 2025 GMT
            Not After : Dec  7 02:00:54 2025 GMT
        Subject: CN=7afb800ce733520ddd7adedca8c2ce5228f55427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4d:c5:49:65:73:d6:2f:4d:2c:57:7c:d8:a5:
                    ea:f2:6e:03:fe:01:76:16:f4:05:f2:f4:f8:12:0f:
                    91:61:d3:6d:ea:98:4d:71:e2:ce:82:2e:2c:a3:21:
                    61:a8:4b:63:54:ba:d3:78:32:05:76:78:3a:b6:a4:
                    75:8b:75:b6:2c:f7:0d:da:15:c3:17:f0:26:ea:0c:
                    27:2a:17:f5:e0:1c:96:f9:b1:ce:9c:e8:9f:51:53:
                    f0:07:ac:c2:04:0f:97:ae:47:07:22:e0:ce:87:58:
                    35:31:03:19:21:95:a2:53:e9:10:ee:cb:1e:e2:b1:
                    87:53:1a:3e:c2:f5:e1:ed:26:39:d9:26:f6:6c:f6:
                    4c:55:f8:f5:9e:9f:bb:d7:46:3e:29:db:22:5a:87:
                    d5:e8:69:c3:37:08:37:6b:2f:fa:50:9d:8c:cb:2b:
                    72:db:39:8f:1b:d4:fb:40:b2:21:87:5c:91:55:61:
                    4b:31:0e:64:83:28:b2:11:1f:62:9a:7c:3f:b4:af:
                    26:b9:8f:4d:58:1f:6b:85:4b:89:b9:28:e6:42:66:
                    23:bd:27:c0:e6:67:60:69:7f:d2:3d:00:ff:52:ce:
                    61:cf:a6:7a:4c:f2:69:c6:6b:56:94:1d:61:d4:9d:
                    11:89:12:04:85:05:9a:3f:c9:5b:ef:e7:b2:53:6a:
                    43:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FB:80:0C:E7:33:52:0D:DD:7A:DE:DC:A8:C2:CE:52:28:F5:54:27
            X509v3 Authority Key Identifier:
                keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:b5:d8:12:67:24:c0:9e:9d:13:84:85:be:bc:38:23:a4:da:
         31:ae:6d:d8:f8:47:df:65:41:9d:a2:39:90:d6:a3:4c:c1:bd:
         10:df:29:8f:34:7c:e5:98:54:ad:ea:3f:57:8e:e3:9c:99:e7:
         06:60:ed:fb:74:b0:98:7d:c6:b9:05:71:1f:6a:4f:03:5e:2a:
         03:63:f0:f6:8e:fa:1b:55:3e:52:92:55:21:2b:08:06:79:44:
         4f:be:d2:57:26:1d:83:b7:67:2b:77:6f:ef:28:4f:26:1e:78:
         f8:81:3d:00:b9:04:b9:ef:9a:3b:eb:08:f2:ac:16:8d:c5:da:
         94:13:4a:dc:7c:5a:a1:f3:2b:ef:0b:e5:1f:c5:86:a0:5e:9b:
         b1:50:74:0c:55:c3:dc:95:6a:27:62:ad:19:e9:65:d5:d3:f4:
         8e:49:dd:66:00:86:0c:23:3c:b3:f2:98:b0:ec:07:92:d4:49:
         0a:72:a6:82:39:84:0e:f0:83:e3:30:99:8a:c1:84:72:c9:e9:
         52:36:ba:d6:e5:c6:2f:3c:32:25:51:cd:79:96:2f:49:69:f6:
         45:6e:cf:ad:82:17:ef:91:fe:09:dd:48:e4:0d:8a:6f:46:b7:
         6a:45:53:3e:fb:2b:41:d6:c3:9e:c8:b1:2b:01:c1:fc:d4:06:
         28:01:ac:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:08:48 2025 by rpki-client