This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
File:                     yliutBKfjiybxCzRkYXI1_Dm6vk.mft (raw, json)
Hash identifier:          YhXTTNORKXednq2k5RlGhYSxg/w98BhRCCeEfkUUKFA=
Subject key identifier:   5E:97:16:09:1D:32:0F:C9:E9:14:04:0A:48:61:6C:03:A3:70:BC:D8
Authority key identifier: CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
Certificate issuer:       /CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Certificate serial:       019B35A04ED3D235AABDA2DD9DFA692DD3DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
Manifest number:          0846
Signing time:             Fri 19 Dec 2025 08:00:56 +0000
Manifest this update:     Fri 19 Dec 2025 08:00:56 +0000
Manifest next update:     Sat 20 Dec 2025 08:00:56 +0000
Files and hashes:         1: 0HTDBk5MYK2X7vH3zirTqZcpE2s.roa (hash: Sj1nNxaVvmVnP+tRZkLAz31ImmjJvQaxWp+RCkXDwnM=)
                          2: WfvC6123xfKENVd-zb3XlASAszo.roa (hash: 6SvW+m32iHXt+VqGMoFD6E0jUHXyHvqrZQ85os+ovbw=)
                          3: yliutBKfjiybxCzRkYXI1_Dm6vk.crl (hash: pDqQJ05SwIM1Z66X0jFEXTt7bNVHGzB3GslDe4ce7K4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:35:a0:4e:d3:d2:35:aa:bd:a2:dd:9d:fa:69:2d:d3:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
        Validity
            Not Before: Dec 19 08:00:56 2025 GMT
            Not After : Dec 20 08:00:56 2025 GMT
        Subject: CN=5e9716091d320fc9e914040a48616c03a370bcd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:87:5e:36:6b:59:5b:72:ab:07:bd:0b:7a:b3:
                    81:cc:e7:40:71:9e:72:0a:59:9a:f7:0c:c7:80:ff:
                    41:a1:56:f7:bf:46:24:e2:98:6a:0d:fa:8f:c5:b8:
                    74:59:89:39:76:79:6d:4b:0d:02:31:ef:a3:b8:40:
                    63:34:79:26:f6:76:f5:ff:94:1c:22:0c:d1:41:65:
                    21:2e:90:fa:be:85:3d:f5:b4:7f:bf:6e:55:71:55:
                    38:5b:c8:52:bc:55:a8:bc:52:97:36:2a:78:49:0f:
                    a6:a1:0e:01:fe:22:74:12:69:9a:1d:ab:9c:b3:67:
                    8b:9f:d9:c8:e0:a3:a9:5e:3c:c2:c5:70:06:a7:9b:
                    af:1d:df:0e:4c:cb:df:ea:2a:7e:80:99:05:6c:f1:
                    05:64:08:67:68:03:aa:0d:bd:dd:f0:ad:ca:ea:16:
                    4c:1c:6d:56:9c:a9:e0:1f:06:67:d1:1f:2b:db:ee:
                    6e:0d:37:1c:fd:06:56:2c:e0:c1:e7:b0:17:cb:1d:
                    b9:4d:c5:f1:66:cd:a1:8c:19:e8:32:2d:0b:a6:ee:
                    42:59:51:b5:e4:4e:a8:54:de:e4:f4:19:99:a1:d1:
                    1e:81:af:4d:a8:e5:72:02:04:a2:63:94:7d:16:70:
                    27:15:ca:43:22:61:c5:19:ed:4f:ab:9f:3e:94:4f:
                    6d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:97:16:09:1D:32:0F:C9:E9:14:04:0A:48:61:6C:03:A3:70:BC:D8
            X509v3 Authority Key Identifier:
                keyid:CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f3:5c:97:02:35:ff:1e:65:bb:4b:3f:50:e9:f8:05:0d:80:
         e0:61:91:f8:b3:86:b0:56:91:42:74:4f:79:02:d1:b1:a2:84:
         42:3a:f7:81:67:3a:20:29:53:70:0f:40:e9:07:81:74:dd:6a:
         e8:13:99:c1:9f:9e:50:9e:23:9c:ce:6c:8b:57:e0:0a:ff:ea:
         f3:dd:3c:6d:7f:1f:06:ee:9a:84:52:bd:ae:78:17:9d:65:b5:
         33:8f:e2:86:27:62:c7:47:e7:db:06:15:46:f1:2b:8d:1d:2f:
         94:9f:87:1c:c6:6c:1e:4e:97:45:7d:f3:bf:0b:98:de:e8:a1:
         79:d9:f9:03:fa:a2:28:f8:d7:f5:22:27:15:2b:33:0d:f9:4c:
         de:67:97:dc:1b:c3:32:2c:79:a3:9f:90:1d:6e:13:30:5b:18:
         aa:f1:20:2a:79:e5:02:d5:2f:13:f9:f8:40:45:03:10:7b:8d:
         3d:54:7d:aa:28:a5:ae:5a:d1:0b:71:36:c9:2f:7f:30:19:fc:
         45:a4:15:4a:bc:c6:87:c1:3f:8e:b8:f7:b3:37:e2:3d:73:ab:
         a6:2a:41:cb:c0:d5:40:a8:43:6d:8e:97:97:66:83:17:a8:1b:
         49:5a:4b:d8:73:2d:72:f4:07:d8:3e:d7:1d:8c:f8:1b:ce:df:
         7d:9d:8d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:19:32 2025 by rpki-client