This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
File:                     YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft (raw, json)
Hash identifier:          MWERNk/D4qRooN3qmgmdQT3QUn9fYG1toumdQ0+5dsA=
Subject key identifier:   0E:50:2F:F1:35:9B:E6:29:80:1D:A7:47:C0:73:3E:12:C4:92:C5:01
Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
Certificate issuer:       /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Certificate serial:       019AF50A004FB344DB9D83EFDEDE5A5F63EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
Manifest number:          0BA3
Signing time:             Sat 06 Dec 2025 19:01:04 +0000
Manifest this update:     Sat 06 Dec 2025 19:01:04 +0000
Manifest next update:     Sun 07 Dec 2025 19:01:04 +0000
Files and hashes:         1: 7EngYWaeS2TpT1X_mNY6POQq2tQ.roa (hash: zNz9kI654HO/4QgVbj5ixDAz6Dx+uvcUjyawZ8122Wg=)
                          2: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl (hash: sBZP8rYDB8wiz/CHwv/7hA08e1wQWzNCoJtZn7BaTSo=)
                          3: flT0rlNauOXStzroCqDwedgvmO8.roa (hash: 8zjBPUweiTtjRooUddXczYMKyn0J34pB87VyPU3GTV8=)
                          4: x6wZ_QvBNBllirp0YF_4hULUz6g.roa (hash: LS8yqHK0GgRmzQoHTgjOfkAaUaGvQPYikmxDxfWx8H8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:0a:00:4f:b3:44:db:9d:83:ef:de:de:5a:5f:63:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
        Validity
            Not Before: Dec  6 19:01:04 2025 GMT
            Not After : Dec  7 19:01:04 2025 GMT
        Subject: CN=0e502ff1359be629801da747c0733e12c492c501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:43:73:3a:24:a0:78:f4:b8:82:98:4a:df:d7:
                    68:39:9c:d1:e7:85:e8:b5:c4:69:c7:d1:3a:b3:90:
                    85:99:1d:d9:fd:c1:ba:12:51:03:5b:7a:f2:9f:3c:
                    a8:99:f2:4b:3e:ad:db:ea:4c:b5:3a:65:6d:d6:bf:
                    71:89:23:da:fb:ff:c0:1a:ae:dc:35:d3:38:ff:8f:
                    32:f3:50:37:17:b8:af:01:d1:cd:6b:d7:33:33:2d:
                    f8:28:16:e2:cd:69:62:79:53:f3:dc:3f:59:23:92:
                    3f:cd:23:96:11:50:1f:8e:22:5d:e5:76:6a:d4:e5:
                    6c:58:92:2e:84:2f:75:94:4c:18:0c:67:84:da:6b:
                    7c:91:a4:36:12:12:07:ba:0f:55:f3:82:3b:b7:dd:
                    2d:0f:26:fa:70:ad:0c:bf:e4:3d:59:64:72:a0:b2:
                    4e:c8:b7:b8:89:6a:54:07:e4:51:1b:47:2e:80:12:
                    18:59:d6:68:9e:fa:ea:01:4b:f7:c7:70:89:cf:88:
                    b1:39:b4:ae:25:e9:09:a4:e5:44:8b:45:5c:7c:51:
                    04:5e:0b:77:f6:37:6a:ab:41:bb:70:4d:f9:00:82:
                    bf:54:11:df:32:7d:10:73:42:a7:e6:cf:53:74:fe:
                    25:48:80:f2:b3:b5:ce:e2:10:90:be:76:d2:84:a3:
                    e7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:50:2F:F1:35:9B:E6:29:80:1D:A7:47:C0:73:3E:12:C4:92:C5:01
            X509v3 Authority Key Identifier:
                keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:97:72:3f:d2:93:dc:08:4a:4b:07:3f:e1:57:09:31:f9:cb:
         ca:a7:93:64:b1:f0:02:b8:ac:98:57:73:96:64:01:f4:b0:a4:
         6d:cc:54:12:24:65:4a:66:94:85:aa:9c:f7:78:d4:06:3b:41:
         5a:4a:78:aa:39:ad:6d:03:e9:12:2f:a1:ee:9d:ae:9d:84:ac:
         14:26:a1:6c:8e:7b:cf:3e:e2:0c:fe:ea:c3:f9:27:18:e7:cb:
         dc:9a:0b:d1:37:63:a6:9d:18:4f:f4:ba:bb:45:0d:bb:0b:e1:
         66:77:49:0d:a9:ea:23:4c:10:c4:65:fe:7d:e5:4b:a2:c1:54:
         27:a0:36:93:f7:62:1d:2d:71:12:91:97:63:62:c6:6a:05:61:
         91:db:3a:d8:d5:35:de:c8:60:5f:a0:e1:c6:04:0f:c4:48:f0:
         17:a9:8c:49:6a:6e:97:91:97:35:1b:29:97:26:79:d3:78:1d:
         0d:82:7a:35:09:28:58:ea:00:08:91:59:e0:6c:9b:ab:2e:a3:
         d0:01:1d:98:a5:9b:42:26:bf:c4:44:23:fe:8c:b1:28:36:b1:
         b9:7c:25:21:c4:16:ff:9c:d2:d5:5d:a1:92:6f:d4:ac:a1:ec:
         3b:aa:41:5b:ac:f9:b4:a1:f1:c4:60:e6:cb:97:d9:c2:b0:74:
         5b:9a:3e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:16:50 2025 by rpki-client