This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
File:                     yYra-x8x-YiapHNXkrbj20aTG7k.mft (raw, json)
Hash identifier:          8QQGVmoWdUVha0KCMlp2PqHFk+Ov2K33ub55Z7h8Tro=
Subject key identifier:   BD:8D:BE:FD:B2:77:15:07:90:5A:F1:6E:3A:CF:CB:2B:62:B7:D7:14
Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
Certificate issuer:       /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Certificate serial:       019AF209206F3BF7B368174038031331885E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
Manifest number:          0269
Signing time:             Sat 06 Dec 2025 05:01:15 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:15 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:15 +0000
Files and hashes:         1: TV9MBnLCdq0YXMlS7n0N6-374eE.roa (hash: 29vVPe5fMsq8wMs3CBPsJgBaxcV4vylFIV1zsoy0JlI=)
                          2: lAJZYJJzGp5HPbuIC7fuB-JbImQ.roa (hash: KjiWHR4FndPu1pOu7SlliXtRRkAXn6COl4Ndm2nMAAw=)
                          3: nGx1SbHdnrm1rX0qlOFShwhhrvk.roa (hash: vTyHGstj9RMJZ9VP2y031XxQBN2W9t1AKq82ozdPQVw=)
                          4: s2J0JZZ-ObzDtacn5mrd8XtqC34.roa (hash: Y+AIs8qpenHiIXCup80QSbaypa7oPZCeyGun7W4ZSYw=)
                          5: yYra-x8x-YiapHNXkrbj20aTG7k.crl (hash: 2LtdsJaEB7eFT6busXCMO1Z4d2GwAtnBgyNY8WPcalY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:20:6f:3b:f7:b3:68:17:40:38:03:13:31:88:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
        Validity
            Not Before: Dec  6 05:01:15 2025 GMT
            Not After : Dec  7 05:01:15 2025 GMT
        Subject: CN=bd8dbefdb2771507905af16e3acfcb2b62b7d714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:59:c1:70:79:28:e4:aa:d0:85:7a:8c:d3:75:
                    d5:da:2b:e5:8d:60:ec:8c:5f:6b:fe:62:ab:b8:ba:
                    12:66:11:cd:c7:af:b7:89:d8:cc:1b:18:89:5f:17:
                    f4:d2:77:5b:a5:56:e1:68:de:9b:d3:1b:ae:4c:58:
                    d4:73:2a:b3:4a:34:eb:60:f0:c3:f8:c9:06:df:d3:
                    60:0d:58:02:a9:01:5a:49:80:c8:88:db:71:1f:5c:
                    6c:41:c5:bb:e7:af:d9:dc:59:cd:ff:ae:d9:dc:60:
                    fd:40:67:09:52:35:6d:85:0a:47:d0:3f:93:fc:7f:
                    c8:e4:c4:dc:5f:5c:68:11:03:f0:7c:4a:e7:b4:06:
                    ef:b8:91:05:77:af:b9:72:6e:56:01:76:27:a8:4f:
                    59:c2:62:5a:13:99:5b:60:27:b1:55:91:7d:c0:c6:
                    01:2d:f8:7a:29:fa:cf:45:8f:6b:1e:ef:5f:9c:0d:
                    a8:14:22:c6:3a:1e:46:66:b7:a0:dc:d9:35:1b:b8:
                    02:11:3a:0b:a4:f0:b2:8d:93:9f:1c:45:21:7b:6c:
                    29:a2:a4:a1:76:de:5f:8b:7f:ee:4e:40:23:87:d9:
                    f8:34:fe:2c:14:7e:2f:23:d9:58:cd:e4:f3:bf:17:
                    a2:ab:db:8d:f3:f5:c0:50:db:7c:b8:6e:08:7f:2a:
                    4c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8D:BE:FD:B2:77:15:07:90:5A:F1:6E:3A:CF:CB:2B:62:B7:D7:14
            X509v3 Authority Key Identifier:
                keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:53:7e:aa:1d:0d:5a:7e:d7:7f:73:fe:a8:0a:0a:87:48:08:
         15:5b:3e:60:57:44:2d:a4:a9:44:44:49:65:4e:c6:1b:2b:08:
         7c:77:3c:60:97:ad:ef:b2:f4:d0:aa:ae:5a:f9:53:26:c7:9f:
         91:b8:00:6d:3f:7e:ba:0b:ba:b3:98:76:3e:a1:87:1e:b9:a7:
         c2:52:48:73:86:5d:b9:ba:27:84:32:1d:61:51:ed:10:da:72:
         d3:88:ce:32:a1:09:0f:bc:df:c9:b2:e9:27:84:3b:ef:c7:14:
         21:d6:78:14:62:e4:83:25:82:7c:06:2f:c3:b9:8a:6a:70:8c:
         2b:2a:51:3b:ad:d5:f1:b2:5f:6d:b1:82:92:e5:36:fa:7f:42:
         ab:64:b8:8e:8a:9e:8d:ad:a9:d0:a2:b6:58:07:bd:4b:ac:6c:
         77:3c:b7:6c:c9:f2:92:72:06:ca:49:ef:29:88:9e:84:db:7e:
         48:68:2d:cb:4b:fc:4c:bd:f5:b4:8a:3a:f2:10:23:0a:27:4c:
         80:03:ad:35:74:09:c9:6b:9f:11:4a:b5:9d:8c:b5:cf:af:d7:
         82:3d:88:8f:1d:47:87:32:47:94:43:fe:d9:31:a8:84:b6:3d:
         26:42:c2:77:39:c2:4d:61:e4:0a:b5:45:c3:17:52:6e:f6:d0:
         6b:f9:f0:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryCSBvO/ezaBdAOAMTMYheMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5OGFkYWZiMWYzMWY5ODg5YWE0NzM1NzkyYjZlM2RiNDY5
MzFiYjkwHhcNMjUxMjA2MDUwMTE1WhcNMjUxMjA3MDUwMTE1WjAzMTEwLwYDVQQD
EyhiZDhkYmVmZGIyNzcxNTA3OTA1YWYxNmUzYWNmY2IyYjYyYjdkNzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lnBcHko5KrQhXqM03XV2ivljWDs
jF9r/mKruLoSZhHNx6+3idjMGxiJXxf00ndbpVbhaN6b0xuuTFjUcyqzSjTrYPDD
+MkG39NgDVgCqQFaSYDIiNtxH1xsQcW756/Z3FnN/67Z3GD9QGcJUjVthQpH0D+T
/H/I5MTcX1xoEQPwfErntAbvuJEFd6+5cm5WAXYnqE9ZwmJaE5lbYCexVZF9wMYB
Lfh6KfrPRY9rHu9fnA2oFCLGOh5GZreg3Nk1G7gCEToLpPCyjZOfHEUhe2wpoqSh
dt5fi3/uTkAjh9n4NP4sFH4vI9lYzeTzvxeiq9uN8/XAUNt8uG4IfypMdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2Nvv2ydxUHkFrxbjrPyytit9cUMB8GA1UdIwQY
MBaAFMmK2vsfMfmImqRzV5K249tGkxu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jZDM5YmUtM2UyNS00ZGJjLTg2MGYt
M2IxMDNkNWE2OTBhLzEveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jZDM5YmUtM2UyNS00ZGJjLTg2MGYtM2IxMDNkNWE2OTBh
LzEveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVN+qh0N
Wn7Xf3P+qAoKh0gIFVs+YFdELaSpRERJZU7GGysIfHc8YJet77L00KquWvlTJsef
kbgAbT9+ugu6s5h2PqGHHrmnwlJIc4ZdubonhDIdYVHtENpy04jOMqEJD7zfybLp
J4Q778cUIdZ4FGLkgyWCfAYvw7mKanCMKypRO63V8bJfbbGCkuU2+n9Cq2S4joqe
ja2p0KK2WAe9S6xsdzy3bMnyknIGyknvKYiehNt+SGgty0v8TL31tIo68hAjCidM
gAOtNXQJyWufEUq1nYy1z6/Xgj2Ijx1HhzJHlEP+2TGohLY9JkLCdznCTWHkCrVF
wxdSbvbQa/nwww==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:25:50 2025 by rpki-client