This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
File:                     SY_UU_XjX5x30dcG5WUTit-CJWo.mft (raw, json)
Hash identifier:          jGbW9xPCuo0x56wMQtchEMpy1OMMD8bSsivRUYsqa2Q=
Subject key identifier:   10:D8:D4:34:A4:B2:E1:7D:BB:31:C0:97:0D:77:07:41:F5:CA:D6:68
Authority key identifier: 49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
Certificate issuer:       /CN=498fd453f5e35f9c77d1d706e565138adf82256a
Certificate serial:       019AF5AE59BC6F2BE994D798CF2844FF1BB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
Manifest number:          1764
Signing time:             Sat 06 Dec 2025 22:00:35 +0000
Manifest this update:     Sat 06 Dec 2025 22:00:35 +0000
Manifest next update:     Sun 07 Dec 2025 22:00:35 +0000
Files and hashes:         1: 507THO5dSIj7LdWG8g8XVK755Y0.roa (hash: k708wccd30u6jz4kYVPuam78Zj3k5ZZTQId0uERtVOk=)
                          2: 7QVUBJnH8byE-Jg05fyEzfqRiCA.roa (hash: aQaoN+Lrx+ZD/V+55LTcCmW9vizCL4wQOGOO6cgtzbA=)
                          3: SY_UU_XjX5x30dcG5WUTit-CJWo.crl (hash: cyLNo+6vNWimTXt7Fi/Y3RnOYBSE9twF81ZpMQSqwA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:ae:59:bc:6f:2b:e9:94:d7:98:cf:28:44:ff:1b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498fd453f5e35f9c77d1d706e565138adf82256a
        Validity
            Not Before: Dec  6 22:00:35 2025 GMT
            Not After : Dec  7 22:00:35 2025 GMT
        Subject: CN=10d8d434a4b2e17dbb31c0970d770741f5cad668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3a:0f:c7:0e:4b:fe:fa:f2:ad:f6:d8:9c:09:
                    65:1a:0f:cf:45:bd:16:b4:1b:8e:79:44:f3:cc:df:
                    60:3c:0a:8b:8f:cf:fe:a6:11:ef:af:72:76:be:bc:
                    75:be:78:84:54:af:b5:a6:f8:1c:02:e2:e7:b0:af:
                    e3:74:61:1f:17:d4:ba:db:07:31:16:d1:a1:bb:02:
                    e8:8a:64:8a:6e:c9:9e:42:5a:4a:6e:22:81:9f:0a:
                    4f:64:a1:84:e6:e0:14:02:4b:4d:62:6d:79:56:cd:
                    c8:04:f2:c0:f6:f5:c4:61:27:c1:45:cd:cd:4d:5d:
                    6e:b5:a0:81:2b:60:cd:1b:17:84:41:1d:e2:9f:19:
                    05:45:1d:2b:d0:cd:69:84:05:2d:c4:d5:25:bc:ee:
                    6d:21:42:a1:0c:db:63:1a:ca:29:4e:c7:a1:aa:d7:
                    f1:1e:0f:22:62:11:c0:5d:f1:59:03:4e:3f:e5:f5:
                    4c:9b:4f:5f:1b:2a:97:82:01:5b:1a:2d:9e:23:a9:
                    4a:3b:de:1d:2b:3b:ec:05:50:7e:8d:3f:20:87:44:
                    d6:af:f8:df:49:61:35:21:1c:3e:70:2e:96:aa:bf:
                    01:12:f0:bd:1a:20:d8:c3:05:cf:b8:4d:27:f1:2c:
                    18:57:6e:4d:4e:d5:76:be:18:aa:03:27:a6:2f:ce:
                    0b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D8:D4:34:A4:B2:E1:7D:BB:31:C0:97:0D:77:07:41:F5:CA:D6:68
            X509v3 Authority Key Identifier:
                keyid:49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:e9:90:61:ae:14:25:8b:4f:47:34:72:30:c5:09:57:8d:b7:
         b9:23:f9:4b:5d:ca:9a:56:43:ce:50:82:3e:49:35:34:e6:49:
         7d:21:95:5e:75:f0:9a:90:72:09:ee:2c:d1:a0:65:c3:a0:d3:
         11:e4:5a:b5:cf:11:70:a7:5d:6e:b9:97:f2:81:f4:cc:10:49:
         78:15:44:b9:1d:b4:bd:2b:57:77:5b:9a:51:2f:c9:2c:67:a4:
         54:3b:ee:06:18:44:e4:89:bd:27:45:62:19:ff:ee:e0:64:4c:
         0f:03:7c:13:51:7a:03:d9:33:3d:0b:a5:23:f8:94:78:3a:a8:
         c8:43:0c:44:b3:88:83:a2:19:d0:d0:cd:37:3d:d1:09:3e:88:
         77:88:1d:85:9d:f5:52:13:e0:2a:5a:cf:af:93:ae:0f:2f:93:
         ba:6b:50:9f:be:5b:23:29:9a:ad:e4:0d:3b:8c:11:4f:77:cc:
         8d:1e:f5:be:4b:bf:46:44:87:a1:8f:34:b8:a4:95:86:77:5a:
         c4:34:97:88:51:d4:3b:8f:32:9f:a1:02:84:48:3d:e5:1b:6a:
         df:ee:70:78:d2:48:9a:e6:5e:86:d7:a0:1b:b6:80:2e:00:fe:
         36:8b:0b:d1:1c:5a:77:23:2d:2f:cb:13:b5:e0:af:7f:80:66:
         b4:b4:db:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:12:16 2025 by rpki-client