This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
File:                     yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft (raw, json)
Hash identifier:          ZJzzgf4yokpZwgZCeL63Md2CBFSxCPIO3OWpyE3uprc=
Subject key identifier:   3C:8E:8A:E2:1E:0F:9F:81:41:F8:14:72:2F:AC:07:EC:40:AC:7A:76
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Certificate issuer:       /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial:       019B3A908A3BDABBED679BCDEEEFFD442BD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
Manifest number:          178D
Signing time:             Sat 20 Dec 2025 07:01:49 +0000
Manifest this update:     Sat 20 Dec 2025 07:01:49 +0000
Manifest next update:     Sun 21 Dec 2025 07:01:49 +0000
Files and hashes:         1: 2q7qFO0SAjMdaNENG8krQrfpEsw.roa (hash: MRyfRcQ3vFTbqLu3EtrXWQ8bXorq49HiuJbhIqPCu2k=)
                          2: qdjN7PwUTgcUnjjFAlonTerXwAE.roa (hash: VbOA5tJgv2XPJFvDfrmwF7dfcvJwsiBE98hvS8Guihg=)
                          3: yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl (hash: cwz8pmlZKAbCcVTknfOGYPAYu0mQYrRmrleXyAwl5+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 07:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:90:8a:3b:da:bb:ed:67:9b:cd:ee:ef:fd:44:2b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
        Validity
            Not Before: Dec 20 07:01:49 2025 GMT
            Not After : Dec 21 07:01:49 2025 GMT
        Subject: CN=3c8e8ae21e0f9f8141f814722fac07ec40ac7a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:64:87:14:d6:ee:71:df:bf:2a:3a:a2:75:0b:
                    85:07:a6:c2:6c:85:f6:bb:9c:da:ad:00:c1:18:41:
                    af:a5:83:68:e7:24:b5:d0:5a:90:0c:10:3d:43:97:
                    2a:7a:6c:8b:38:4d:cb:0c:a0:d7:29:fe:61:4e:33:
                    05:e0:93:d2:ab:e4:6f:81:d0:e5:cb:41:ae:9d:41:
                    d1:e3:53:ac:b1:d8:e7:11:34:00:10:bc:19:09:6e:
                    7e:b9:0c:35:f6:37:73:e6:3f:11:81:5b:f8:ec:df:
                    64:85:f2:26:7d:0d:bc:bd:71:e1:b8:a6:a9:ea:34:
                    79:16:01:09:d1:9e:0a:86:07:32:f8:e9:54:3c:b7:
                    9a:94:a6:e2:c8:ac:10:ab:69:4b:15:26:6a:f4:90:
                    b4:3b:84:22:11:f2:4b:62:09:af:ed:f6:d4:2c:34:
                    44:42:b9:27:47:2f:a2:56:6f:d2:27:0c:43:82:79:
                    e5:86:fa:cd:61:1b:36:04:d8:ee:46:6f:24:91:88:
                    e8:a8:8d:f6:63:a9:2f:d1:8c:74:e7:6b:05:a9:b0:
                    e9:d6:fc:b6:99:01:30:8c:c4:15:df:c2:7c:a2:ac:
                    e3:72:76:2f:9a:b6:7e:6c:df:19:5a:45:27:70:e6:
                    70:f1:38:fc:7e:68:69:9a:96:ed:88:39:49:31:f3:
                    52:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:8E:8A:E2:1E:0F:9F:81:41:F8:14:72:2F:AC:07:EC:40:AC:7A:76
            X509v3 Authority Key Identifier:
                keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:98:c7:70:be:b2:68:40:6d:9f:0c:6a:84:80:8e:d4:7e:1e:
         cd:b3:fe:cb:b6:80:8d:11:8e:fa:44:1b:09:19:65:00:40:8d:
         b3:50:b4:1c:98:f7:93:9d:72:09:35:dc:1d:5d:73:3c:5f:83:
         5a:78:84:2a:5d:1d:ef:5c:d4:be:22:d2:55:52:6b:f6:e0:08:
         f4:20:40:a1:cb:96:65:5d:c5:bf:20:23:fb:20:bf:61:b9:d6:
         19:da:b3:95:a1:ac:ff:c5:80:91:b7:6d:93:58:63:b0:b5:e1:
         4a:8e:dc:ed:c4:a4:1e:de:94:bd:13:5c:8f:e8:84:31:98:5f:
         8b:7c:2c:d8:60:36:e4:77:5b:89:f4:1c:63:c4:b8:bf:cc:8b:
         59:d0:1b:62:4a:95:6d:c5:4e:0a:52:73:3b:c6:c9:05:be:38:
         b8:21:d7:e0:8d:d4:e2:ae:64:dd:56:bb:7a:8d:83:c3:b8:f6:
         8c:16:f8:b3:9f:8f:dc:a8:3e:02:90:c6:38:ea:16:dd:0d:ec:
         73:90:6c:02:77:05:c4:77:21:2f:47:00:54:c8:7d:26:f0:27:
         e1:c9:02:f3:51:0c:60:d9:9b:8f:d0:b1:13:0a:b8:fb:b9:7f:
         d0:d5:7e:37:32:3e:90:03:4a:bf:2d:3b:9c:50:71:8c:7e:d3:
         58:f7:75:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:12:17 2025 by rpki-client