This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
File:                     jYdAeZyRwmMKgJIXjbgk86iJp18.mft (raw, json)
Hash identifier:          WuH05JlMAD+UQog37s1uEDdIPcgGgrbEbgLnza9LDSw=
Subject key identifier:   5D:2A:BA:DE:61:C4:31:28:8D:A0:81:64:8B:C3:17:EB:BF:F6:94:3A
Authority key identifier: 8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
Certificate issuer:       /CN=8d8740799c91c2630a8092178db824f3a889a75f
Certificate serial:       019AF1D1A0582A0B3B693944ECB868799DA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
Manifest number:          1760
Signing time:             Sat 06 Dec 2025 04:00:38 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:38 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:38 +0000
Files and hashes:         1: K-6vxGr3EkVKtgWk3f7FXppAHWU.roa (hash: OqJwTUOjnt783umU3SvwJ0pGKHDe69wtlF63xIDInso=)
                          2: K7Su5tLQd2NMZMj9NBaGujGCyFc.roa (hash: mUfUc0m1Q5fvSqMO5jRLGU7xEPj6/17vBXx5MZ0j9fY=)
                          3: eE7CtoiQAT2pLGSZ83z4bGyxlms.roa (hash: 0jzCXVU/84NgsdnKR1p45oVJW0ZBdnomnSJlnmwgNt0=)
                          4: jYdAeZyRwmMKgJIXjbgk86iJp18.crl (hash: N/D1YO9Iu01RWEgS40nYO1OLVWVVlMgs9TPVx7AvE1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:a0:58:2a:0b:3b:69:39:44:ec:b8:68:79:9d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8740799c91c2630a8092178db824f3a889a75f
        Validity
            Not Before: Dec  6 04:00:38 2025 GMT
            Not After : Dec  7 04:00:38 2025 GMT
        Subject: CN=5d2abade61c431288da081648bc317ebbff6943a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c1:64:1a:3c:37:16:bf:f9:c3:f4:4e:df:57:
                    ec:f0:24:b5:bc:19:69:b6:db:55:7b:7e:50:22:4e:
                    97:6a:9c:b9:6a:50:1e:8a:97:9b:7a:bf:b8:8a:3d:
                    e6:a1:7f:47:3c:f8:a2:34:7b:eb:ee:fc:c1:c8:bb:
                    7e:6c:3e:bc:fa:3a:db:b2:a7:40:fc:a8:93:5a:45:
                    7d:04:34:cf:3d:32:f5:37:17:52:b7:50:9a:48:d3:
                    dd:7a:a1:c8:0b:78:65:3e:28:58:ce:dd:ea:29:29:
                    a7:df:43:7c:7d:2d:66:fb:09:66:b0:00:5c:68:c8:
                    ab:2d:3b:1c:4e:e5:4b:a3:82:2a:19:f2:96:b7:f3:
                    af:03:ca:e5:c3:74:3f:b0:80:dc:18:55:bc:a5:f1:
                    49:25:5e:1e:c1:34:23:c3:2d:e2:d8:7e:e0:10:f0:
                    fa:d6:e3:97:21:4f:38:15:d3:c6:49:a0:54:52:f3:
                    85:e1:a7:d3:0a:1c:78:3c:d3:ea:dc:cf:a1:de:09:
                    a1:90:41:8b:17:50:f1:d2:dc:08:36:c6:2a:f7:68:
                    12:ad:68:0a:a7:27:05:f2:ad:a9:34:cd:ea:bc:d7:
                    28:f4:87:54:cf:33:86:0c:ca:c1:9f:5a:0c:01:db:
                    94:b9:06:74:23:ea:68:fd:9b:ec:aa:70:bc:92:3f:
                    2e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2A:BA:DE:61:C4:31:28:8D:A0:81:64:8B:C3:17:EB:BF:F6:94:3A
            X509v3 Authority Key Identifier:
                keyid:8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:9b:24:3f:92:f1:ca:cf:e3:2b:98:a2:dd:ad:51:6e:1b:f6:
         8d:b5:ea:11:fd:4e:20:bb:fa:de:73:84:16:19:3a:54:32:78:
         50:c6:b6:f3:c4:7f:94:b8:64:d8:06:6a:b2:aa:47:7e:1b:80:
         11:d1:b2:7f:c1:74:b4:35:72:c6:d6:46:a2:d8:d5:e9:7e:3f:
         25:7b:56:ac:0c:3e:de:47:ed:1a:52:17:41:c3:fd:50:96:13:
         2c:d4:98:ae:e0:f5:b4:16:42:48:0a:2e:c4:72:42:21:e7:c6:
         54:40:06:16:58:6e:5f:d5:3c:7b:0b:40:76:11:91:96:71:ed:
         64:52:5d:18:42:da:df:87:da:27:b2:b2:3c:93:57:01:61:29:
         4c:7a:d6:2e:d5:5e:bc:8e:e3:1d:ed:01:a9:55:55:d5:f1:e2:
         33:73:d1:ed:60:4a:9c:da:2f:19:9e:be:cb:b0:06:a8:6a:39:
         f2:71:e1:e1:dd:2a:7c:72:45:56:cf:66:ff:31:9f:94:18:21:
         32:61:a2:92:eb:68:9c:8b:9e:29:92:57:c1:ed:23:33:31:54:
         3b:5d:10:32:95:28:7d:3d:cb:1e:ae:16:27:dd:0f:e8:d4:ce:
         c1:ae:bc:b8:d5:de:2f:39:85:bb:73:fe:1b:c7:35:01:61:fa:
         ce:ad:9c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:24:36 2025 by rpki-client