This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
File:                     YUyVhYifmODHf5ts2ANhqgK91o4.mft (raw, json)
Hash identifier:          Z4MQ1xul2AFIzub+Lh0asvWbibAosIAqwPu9tcb3wZQ=
Subject key identifier:   05:58:9C:E9:B3:A8:64:7D:AE:D9:65:D8:96:55:A7:33:B4:23:42:8E
Authority key identifier: 61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E
Certificate issuer:       /CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
Certificate serial:       019AF1D1EA80CFF74F5C9A726083693619A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
Manifest number:          1767
Signing time:             Sat 06 Dec 2025 04:00:57 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:57 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:57 +0000
Files and hashes:         1: 1hMpXEk-3MWaN_1A5D8V9EPMUFk.roa (hash: CWNT05GFaywUZSs5xqqgNA+kl89pNKE3DHnIiDI2iJE=)
                          2: YUyVhYifmODHf5ts2ANhqgK91o4.crl (hash: L3Z5Iyk+he4z5UXBAoEi03L77EAVF/ao3Zc/pJT6wOE=)
                          3: rWHh4mQ0uaKggoKTpG34xhoULNA.roa (hash: E9+8lA/ClMI1O0rcr+QMuqVLJyMAlgl6OS/N6XXdTOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:ea:80:cf:f7:4f:5c:9a:72:60:83:69:36:19:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
        Validity
            Not Before: Dec  6 04:00:57 2025 GMT
            Not After : Dec  7 04:00:57 2025 GMT
        Subject: CN=05589ce9b3a8647daed965d89655a733b423428e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:08:bb:63:7e:20:7b:ed:de:cb:3d:2b:da:12:
                    41:16:b4:d7:91:d0:f9:49:9e:5a:58:a0:b6:2a:a8:
                    80:16:99:7f:8c:73:0b:c1:4e:7f:97:b3:2c:96:02:
                    91:72:ed:f0:1b:8a:fb:f3:0b:63:93:74:86:e2:c2:
                    05:f1:fd:7d:c7:8e:c5:f2:21:78:77:b9:bc:12:5f:
                    ba:4f:65:e3:3e:ae:1b:1f:34:c8:6d:2e:ef:38:77:
                    a5:ef:3e:d1:3a:1b:e7:1d:fd:f2:13:bb:db:ba:22:
                    63:26:0c:6a:ed:a1:1f:ba:73:12:49:12:e3:bc:3e:
                    8c:ca:09:d4:e0:c2:ea:ea:d4:18:6c:2b:bc:ff:28:
                    87:11:44:0c:75:57:15:db:db:4e:21:a4:d0:10:be:
                    3b:7f:77:78:c4:60:9d:58:1d:d2:cf:0d:2c:2f:49:
                    a9:2b:69:9a:03:59:39:03:97:82:04:46:8e:ba:89:
                    15:1a:31:28:39:81:cf:4a:50:e6:8c:58:a2:bf:44:
                    07:a9:3d:6b:05:8c:81:e7:61:82:16:28:bf:f4:11:
                    f2:09:2a:30:c8:20:7e:48:da:18:43:f5:fb:a7:0e:
                    96:f2:00:c3:f9:2c:73:fb:24:eb:66:1e:01:66:7f:
                    cf:c3:b8:4b:50:99:53:b2:94:20:d1:17:a9:a7:9f:
                    d0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:58:9C:E9:B3:A8:64:7D:AE:D9:65:D8:96:55:A7:33:B4:23:42:8E
            X509v3 Authority Key Identifier:
                keyid:61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:35:ce:41:ec:7a:3a:12:9e:12:14:a4:d7:75:d7:55:fd:a6:
         82:26:1e:a7:e5:68:32:ad:46:0a:94:b5:5e:fb:1b:75:86:aa:
         a2:97:fa:bd:0a:ef:ef:98:73:a7:c0:1a:92:a9:f2:d2:80:43:
         81:e1:a3:b3:38:08:69:0c:4f:7a:3e:fa:86:f0:56:42:67:49:
         23:a3:62:71:93:79:85:dd:8f:1a:c8:05:6d:d9:a5:70:0d:80:
         54:41:64:6d:a8:2d:57:cf:7f:49:2b:f0:9d:a8:d8:3b:81:45:
         de:b0:7a:48:62:73:92:f7:5d:86:7c:58:8a:40:6a:6f:37:23:
         37:23:38:c7:57:e3:5c:0e:1b:ba:15:dc:c9:ef:11:42:ec:54:
         98:7f:04:6d:f1:fb:06:b1:41:4d:39:b3:0a:3c:2e:31:e6:cf:
         58:6b:94:6b:07:26:2e:e9:2b:55:c0:cb:96:29:3a:4e:06:c8:
         3a:6a:90:e2:e1:25:1f:34:f2:c3:5d:d7:21:af:78:b6:1a:0b:
         b6:49:b4:99:ac:e9:03:e4:c5:a5:aa:73:1d:bd:f3:6b:48:6d:
         bb:a7:bf:87:6c:10:21:73:80:8d:71:87:f4:37:bb:32:44:50:
         bf:6e:cc:9a:c6:96:98:5b:c1:d3:08:62:8c:0a:5c:04:b7:4a:
         d7:19:42:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:00:22 2025 by rpki-client