This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
File:                     ybBR6OaBSbZgROfeSuWdc25Teqo.mft (raw, json)
Hash identifier:          ORUgrs3MMSf3QNyipHLQnn/SepK4IZwrf6cMLGmufSU=
Subject key identifier:   70:76:42:28:51:0F:B8:C9:F7:79:00:30:6B:D2:48:51:37:DC:D9:A9
Authority key identifier: C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
Certificate issuer:       /CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Certificate serial:       019AF19B41EBCD5C8AF0EF4EDAAD41EA64CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
Manifest number:          074A
Signing time:             Sat 06 Dec 2025 03:01:15 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:15 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:15 +0000
Files and hashes:         1: ArFunhGUh4z5gE5BaMxIilumjuo.roa (hash: +Y+pIXJkKqGVxuRKoBP5VqtBPTsF8z5U0O22HLQqFaA=)
                          2: byUVA5qV1IbcwSPIkfdvjR5Q_jI.roa (hash: dK4W//mWQId08viaOEDpjWgfsu+tE5gfBKP2LChtCus=)
                          3: tLmXVGY6n6fVRzQmW79aMR0MJps.roa (hash: TSYx/9L1XrTJwYjdabKmZhceP9EJlWD0fOeM06mdy/g=)
                          4: ybBR6OaBSbZgROfeSuWdc25Teqo.crl (hash: rxGdnDPYHCLAq8g03quiJhCjuf3KaBm66i4ONOBsQG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:41:eb:cd:5c:8a:f0:ef:4e:da:ad:41:ea:64:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
        Validity
            Not Before: Dec  6 03:01:15 2025 GMT
            Not After : Dec  7 03:01:15 2025 GMT
        Subject: CN=70764228510fb8c9f77900306bd2485137dcd9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:82:ca:95:52:8f:12:09:3d:bf:8d:b7:f0:80:
                    2b:29:96:4e:ad:3e:65:3f:73:30:b8:58:87:03:4e:
                    99:b7:9a:dd:d6:e4:a1:3b:1f:84:19:7c:f5:3b:ea:
                    9e:25:cc:39:12:55:90:76:27:fe:5b:e4:26:4f:e6:
                    6f:2d:e9:42:e1:b8:db:0b:ba:a4:a8:98:14:cd:3d:
                    ec:77:55:76:b6:bc:95:59:ca:79:44:d4:cd:25:59:
                    a1:1f:d5:9b:34:58:9e:0a:a2:19:8c:6b:6b:52:ab:
                    09:bb:a2:f8:62:1f:b0:86:4c:9f:96:30:38:76:c2:
                    5f:44:3b:94:da:82:1a:85:dd:05:d4:80:54:b5:e7:
                    28:fa:cf:29:78:0d:67:ee:07:25:8c:e0:f2:5e:f1:
                    dd:25:7e:a0:ae:a6:16:11:ce:02:ed:f1:30:c8:a0:
                    20:ba:97:2b:19:49:8c:e2:4e:9f:7b:85:54:3a:50:
                    65:b3:08:ce:1c:fb:2b:6a:85:f8:31:2a:09:a6:0e:
                    49:91:89:0d:fd:31:b2:6c:f0:47:c9:17:be:f8:19:
                    2c:8e:37:59:d0:cc:83:77:e1:38:42:1f:fd:42:18:
                    ac:81:cf:76:3c:c7:75:e6:04:01:4a:5d:f9:ed:85:
                    49:a4:33:05:1b:4f:c8:09:4a:d5:5d:c7:12:fd:0c:
                    bc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:76:42:28:51:0F:B8:C9:F7:79:00:30:6B:D2:48:51:37:DC:D9:A9
            X509v3 Authority Key Identifier:
                keyid:C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:65:15:30:75:3e:07:18:85:c8:54:f7:15:d8:88:ae:9f:20:
         db:56:92:f0:49:8e:55:97:2b:33:7c:03:94:6e:f3:6e:b3:e4:
         7a:cb:ad:70:52:4e:12:96:b7:ac:8c:8a:6f:cd:49:e9:74:07:
         0c:ea:64:e0:fb:eb:ea:b2:aa:36:e0:0a:39:59:45:53:62:15:
         74:81:de:3f:09:58:1f:6f:5f:d2:bc:00:95:d8:68:76:ac:c5:
         6a:6d:46:07:f6:d6:37:35:71:89:18:9c:2b:54:02:bd:2d:c2:
         66:d7:29:1b:d4:ed:23:63:a5:a0:55:ad:5f:ad:da:c3:d3:d3:
         f2:6f:35:4a:fc:1a:16:69:fb:67:2e:c4:3e:43:e2:27:14:4e:
         92:39:53:77:4a:63:3c:a9:49:ff:f9:cc:ff:52:99:08:e3:f6:
         11:67:3a:1a:28:73:58:30:80:1a:94:3e:8a:d0:64:1a:52:4b:
         d0:9a:fd:47:9d:a6:9a:2e:65:fb:5f:02:32:0a:0d:00:ef:89:
         f4:35:9b:37:3e:6a:89:23:51:26:5c:6e:5b:b9:dc:8c:c4:e0:
         e6:8c:47:24:cd:c9:69:5e:5b:f5:7a:44:5d:13:84:fb:e3:6f:
         30:da:92:ec:23:cb:9b:31:fe:15:df:7c:e3:8f:c6:14:f3:c6:
         ac:9d:ff:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:58:56 2025 by rpki-client