This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
File:                     ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft (raw, json)
Hash identifier:          5q8rSbDNbIae3J79vTKtXL/kTonL5AG/TASnAIDey9Y=
Subject key identifier:   02:EB:0B:AB:08:03:DC:ED:5B:20:E8:51:2A:DE:D7:8A:52:2F:90:92
Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
Certificate issuer:       /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Certificate serial:       019AF31C4F0421823CD7E38180B7A8649984
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
Manifest number:          0973
Signing time:             Sat 06 Dec 2025 10:01:49 +0000
Manifest this update:     Sat 06 Dec 2025 10:01:49 +0000
Manifest next update:     Sun 07 Dec 2025 10:01:49 +0000
Files and hashes:         1: XYTo8--GaI1zkSFfPzeY28AGPAA.roa (hash: +j8BMCXGsEgMrKyj3p7HthT9rpdHovUFyUwoGx0hCGc=)
                          2: _3URjmHxdeAClYJBPx5hMe6tQL4.roa (hash: Wn6zQOVZOy90FA4ddqwzS9m8fIclPh7APysxlSvJycw=)
                          3: ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl (hash: kK14L6cnOnzXjqQACoqpHHsWYhWB+AK1NvkjwXmCKR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:4f:04:21:82:3c:d7:e3:81:80:b7:a8:64:99:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
        Validity
            Not Before: Dec  6 10:01:49 2025 GMT
            Not After : Dec  7 10:01:49 2025 GMT
        Subject: CN=02eb0bab0803dced5b20e8512aded78a522f9092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5a:a9:f5:fc:46:ea:ac:3a:15:82:05:c5:73:
                    06:f9:98:a1:28:c5:ad:bc:7c:3a:1e:01:b6:39:44:
                    d9:ca:17:fc:e2:7a:61:d5:73:df:c0:33:59:f7:e0:
                    86:22:5b:4e:b8:53:16:0d:a3:14:13:f1:b4:67:1c:
                    e0:64:5a:0c:d1:10:d3:7b:5a:8f:9c:bf:54:4f:b6:
                    00:b5:79:eb:53:d5:6b:e9:89:1b:ea:09:18:66:0c:
                    e1:be:19:38:f2:b3:dc:e3:af:eb:29:3b:e4:75:04:
                    18:94:58:96:da:a0:21:6d:b4:0d:90:08:89:07:a7:
                    f2:cd:28:b8:1a:3e:5b:84:fd:aa:8d:69:c0:b1:dd:
                    e8:c2:ba:eb:04:67:f5:25:0d:a4:7f:7a:e9:27:21:
                    82:b0:d6:0a:fa:ef:b3:b1:b8:a6:0f:6a:09:58:e9:
                    9a:18:14:ff:2d:05:75:e5:e7:a4:37:aa:b0:2e:fd:
                    9a:83:91:9d:1c:cb:78:da:b6:5e:ac:01:98:a8:28:
                    54:4a:9e:e9:4d:5e:94:df:f3:8e:cb:44:1a:a8:e2:
                    8d:3a:ec:15:d1:b0:92:1a:1f:76:a2:e7:b5:68:75:
                    d5:20:fc:05:7e:89:39:ef:f1:2f:c6:3e:86:12:7e:
                    a3:ca:1c:fc:34:1f:bc:04:66:39:70:dc:47:46:82:
                    39:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EB:0B:AB:08:03:DC:ED:5B:20:E8:51:2A:DE:D7:8A:52:2F:90:92
            X509v3 Authority Key Identifier:
                keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:d2:64:c0:76:b3:56:ed:61:4d:b6:bc:cf:83:24:30:19:d7:
         8a:52:62:4c:1f:b6:96:b7:d3:4a:69:70:8a:ee:eb:6e:77:60:
         de:c4:82:cd:e5:b0:8a:b6:90:29:66:1d:9c:52:48:61:cb:a9:
         ea:1c:1c:6d:d8:cf:f9:db:76:97:63:86:62:f5:cd:14:83:ca:
         57:bb:60:1d:c2:d5:f4:52:2b:59:64:f7:a7:c6:38:c3:53:90:
         ad:86:49:5b:4b:9d:81:d7:8d:17:33:17:cf:6b:b5:26:d2:48:
         f4:f1:70:4e:6a:d0:64:8d:ad:73:8e:17:23:46:b5:fd:5c:c4:
         ae:e6:4f:45:e2:b3:2b:25:55:73:a4:40:17:75:ca:36:e0:2c:
         10:a5:91:70:56:5d:5b:d3:b2:b8:b9:63:53:93:24:0e:f3:f0:
         94:44:ab:24:f5:0a:8f:90:2b:83:a5:28:d0:5a:92:4f:09:c3:
         6d:77:a5:64:6d:84:3e:7b:9e:b9:43:7b:e1:f3:bd:ff:0e:d9:
         e3:9f:45:8c:97:b1:b7:3e:fc:c4:0e:60:04:9c:3a:05:ce:11:
         0e:82:60:de:4c:64:5a:88:37:f6:5d:c2:c8:8f:f3:26:e5:80:
         1b:4f:31:a7:b3:7c:34:45:da:2d:ae:8a:6b:f5:b6:fa:5c:41:
         7b:f0:b6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:22:46 2025 by rpki-client