This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File:                     kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier:          +l3oqRGMRoptiwA7Ey35KSTekX4I4SY8pHz3QD55E6I=
Subject key identifier:   48:3F:79:7E:D5:9E:78:82:85:50:2B:8E:0E:FF:94:74:B9:6A:F6:D9
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer:       /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial:       019AF19AA143DE9D21762A94026FD3EB51EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number:          0C83
Signing time:             Sat 06 Dec 2025 03:00:34 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:34 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:34 +0000
Files and hashes:         1: Ms3efVN_XUHd4QxKef3_YdRpvGM.roa (hash: JqLniVKizln7qKYMvWy43G4dVpEgMo9SnC/GlXkBUPw=)
                          2: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: Yzwh64w5zH64Od+rkeRWubXF90pT0wY47YQLi29u8HA=)
                          3: uDDSIBamhzWkhMClbzH_9oqf3KA.roa (hash: m1HA6uhPnc0quVohM65OVF8eaR3/NxsjEYFcU7UUjUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:a1:43:de:9d:21:76:2a:94:02:6f:d3:eb:51:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
        Validity
            Not Before: Dec  6 03:00:34 2025 GMT
            Not After : Dec  7 03:00:34 2025 GMT
        Subject: CN=483f797ed59e788285502b8e0eff9474b96af6d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:18:d3:35:5a:03:3a:24:0e:11:8f:8e:76:72:
                    51:e5:48:86:3a:52:68:d1:16:35:54:07:cd:0f:0c:
                    04:0b:fb:1e:3a:21:e7:3d:af:4a:6d:e8:93:d5:84:
                    f0:c7:72:66:96:bc:da:2c:46:93:9d:75:83:6e:01:
                    cf:28:dd:7c:a7:0b:16:3b:99:08:28:d7:5e:1a:95:
                    da:7d:4e:7d:fe:a9:a8:9f:9e:73:93:49:20:0c:a3:
                    bd:60:b0:fe:a3:17:fd:1b:01:45:a0:5e:3c:72:ef:
                    ec:d5:4c:d7:fc:35:99:35:5f:eb:92:2a:7c:62:d4:
                    67:9c:a5:39:9d:5d:e1:93:da:3a:f9:5c:9e:f5:bb:
                    a5:09:db:e8:e0:24:47:a4:21:d9:30:e5:23:a6:72:
                    71:11:01:9c:d3:89:fd:7b:17:83:ee:a9:d3:0c:29:
                    36:19:e0:6f:fa:24:d8:24:8b:69:3c:1f:ed:bb:d3:
                    56:6c:1a:97:40:a6:ea:9e:84:af:27:60:93:2f:6d:
                    4c:ae:88:b9:e8:a7:0d:22:8e:f5:9b:f6:89:27:39:
                    c4:8f:1a:93:9b:29:96:77:ab:43:3f:2b:0f:d3:0d:
                    04:92:41:7b:b1:ff:c8:56:5b:87:8f:93:ad:84:89:
                    1f:2f:50:cf:6d:d5:4f:fa:11:53:9d:78:ce:35:cc:
                    cb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3F:79:7E:D5:9E:78:82:85:50:2B:8E:0E:FF:94:74:B9:6A:F6:D9
            X509v3 Authority Key Identifier:
                keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9b:60:5a:ec:fe:4a:41:ed:d4:d1:ae:75:ad:62:be:5d:b8:
         20:dd:88:85:f7:7b:89:cc:f3:cb:93:ff:fa:d8:ef:8a:5a:91:
         fa:1e:d3:dd:00:df:e4:bc:92:a5:78:09:5b:8a:d4:38:a8:2b:
         e4:82:4e:cf:16:9a:4c:87:c3:d2:a2:b0:72:40:eb:bb:ae:b2:
         0e:6b:12:64:f8:67:9c:2b:86:96:41:57:9a:d7:16:fa:0d:65:
         09:44:17:1a:f2:84:09:88:00:15:81:a9:48:c0:6c:da:76:14:
         41:e5:28:01:96:61:87:8d:b0:a8:c5:fc:20:2f:e0:fb:e6:c9:
         89:1c:23:c3:d5:24:49:58:7c:7e:d3:79:58:f4:f9:f5:94:56:
         71:f0:4c:e1:3d:87:e5:47:48:64:bd:cf:66:fe:f6:e6:7a:9b:
         e6:40:81:26:5a:68:f7:ff:23:30:a8:2f:ac:65:5c:1d:93:7c:
         ba:81:e9:6e:b1:d9:e1:2b:55:ec:87:d2:85:1a:9f:ef:7f:52:
         02:12:97:f4:1f:e8:82:8f:89:76:b1:51:e0:05:9b:df:e4:da:
         b4:e6:63:e5:eb:68:c9:c7:e4:48:14:4b:68:d4:ad:b3:e7:bb:
         57:50:cb:18:d1:19:96:ac:77:86:d2:2d:7f:3e:47:65:f4:b2:
         27:54:4b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:22:22 2025 by rpki-client