This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
File:                     yHR0zrha8xEi7eWG1NZbD1tNl_A.mft (raw, json)
Hash identifier:          +xz4Htgngi3V1m5sirBM720OJK+k+EWpi0Rblt6+QGA=
Subject key identifier:   6D:82:06:80:B2:C7:87:0B:4A:2C:7C:E2:92:C1:93:C1:6C:CC:69:E5
Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
Certificate issuer:       /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Certificate serial:       019AF31BBEB454EE3FC2F03DC21F460CB820
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
Manifest number:          1765
Signing time:             Sat 06 Dec 2025 10:01:13 +0000
Manifest this update:     Sat 06 Dec 2025 10:01:13 +0000
Manifest next update:     Sun 07 Dec 2025 10:01:13 +0000
Files and hashes:         1: 6thBO5jod-S22ld5I7cCUqU9PPU.roa (hash: whhraWURnepuYYNpLNQlvK7It8S7aCrmfs8zXpfqsOc=)
                          2: bNZ4Q9wcD7yZAP2RwlbB4JNFkjQ.roa (hash: JZzkHPxKw9rE1eeiiSJfGm5FFzPkvIECAGzsNfZT2+0=)
                          3: yHR0zrha8xEi7eWG1NZbD1tNl_A.crl (hash: mDG5q318iGKAIfcPOrsuP8Vb78jFixgkT7tNnj+H/XE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:be:b4:54:ee:3f:c2:f0:3d:c2:1f:46:0c:b8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
        Validity
            Not Before: Dec  6 10:01:13 2025 GMT
            Not After : Dec  7 10:01:13 2025 GMT
        Subject: CN=6d820680b2c7870b4a2c7ce292c193c16ccc69e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e2:38:ad:29:6a:36:41:a1:dd:47:e1:79:3c:
                    2f:66:37:11:4a:80:0f:05:7d:40:98:92:b9:c5:6f:
                    54:72:b7:4a:c6:26:d1:c0:62:75:fc:5b:81:59:e6:
                    4c:d6:be:85:56:9d:99:47:84:84:1e:3c:a4:96:5d:
                    a0:3d:6d:b7:67:97:7e:f8:20:bb:4b:56:80:ab:ad:
                    4f:fa:f6:22:76:34:65:8b:49:a9:b5:ee:0a:d8:00:
                    86:ba:de:39:33:78:4a:97:31:07:dc:31:2a:eb:29:
                    f6:b2:78:1d:12:9e:85:c4:8c:fd:a9:0c:95:f5:ac:
                    a7:6f:8e:bd:8d:64:71:57:a0:41:0b:d8:10:17:9a:
                    41:4c:27:38:c3:82:d4:d5:d3:4a:d0:b0:3f:a8:7e:
                    46:fc:c8:f5:c6:2b:f3:46:4f:57:ae:ea:a5:85:24:
                    ca:26:8c:72:28:8d:95:e5:6e:be:f4:b3:69:aa:6e:
                    95:63:57:53:64:b7:31:f8:a1:22:8f:43:ba:c6:e9:
                    d6:c9:c8:03:6b:07:f7:79:03:00:db:0f:38:4d:cf:
                    69:04:ad:78:02:78:9f:c9:0f:3d:9c:bc:8a:06:0e:
                    dc:5c:da:84:98:b3:f4:61:35:33:65:9d:2f:0f:42:
                    e0:3f:f2:3d:67:1b:94:05:68:c4:6f:cc:14:a0:95:
                    26:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:82:06:80:B2:C7:87:0B:4A:2C:7C:E2:92:C1:93:C1:6C:CC:69:E5
            X509v3 Authority Key Identifier:
                keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:5d:6e:0c:39:1b:39:48:3a:99:a1:17:4d:df:73:8e:7e:1c:
         17:ac:8c:7d:b7:9f:d1:3d:5b:65:24:83:c4:0c:dc:3d:e6:aa:
         83:ce:91:23:c6:45:80:1d:ea:a4:ac:1c:96:11:19:8d:18:86:
         ec:fc:71:30:6d:c9:a6:3a:b6:e6:30:63:90:0d:cd:2a:2b:14:
         cb:c1:72:fb:b1:cc:b4:34:af:b2:30:da:f1:25:cc:d2:b2:5e:
         24:65:2d:00:4b:6e:52:3f:50:97:88:1a:a0:3a:f4:45:77:a4:
         16:d2:cf:47:b6:33:30:b7:c1:69:1b:60:65:94:e9:6e:a9:9d:
         5c:03:68:78:7f:dc:6a:f3:7e:a1:86:86:95:dd:c3:1c:b8:f9:
         56:d2:70:17:1a:64:d7:04:2a:94:2b:d0:0b:b6:2c:66:ce:2a:
         b5:42:50:bc:1f:45:6b:79:d7:76:7e:d1:19:0c:0d:7e:bc:e2:
         ed:77:e6:d9:19:57:03:9c:db:ef:ba:d6:97:2e:b7:04:3e:9f:
         60:74:05:f7:ed:61:b2:9f:a2:86:06:82:8e:33:08:32:99:d5:
         ca:60:52:93:c9:15:b4:d2:19:3f:e2:b0:86:df:d5:99:e1:b7:
         14:6b:72:83:5d:81:df:e5:af:d9:1a:1a:7b:35:a0:fc:d1:f6:
         90:58:b6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:22:39 2025 by rpki-client