This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
File:                     yMyL2gxj59LWXBntcEO1oteRwfE.mft (raw, json)
Hash identifier:          6t9G593h6QSftZSXgigjMXbKoDBerM4xuOnbpOiVEUM=
Subject key identifier:   E9:46:6D:2F:40:4D:AC:22:CA:97:3C:A1:E2:DB:BF:46:D2:D1:3A:43
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Certificate issuer:       /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial:       019B3CB551A531252942292307A8C4BD3DD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
Manifest number:          070C
Signing time:             Sat 20 Dec 2025 17:01:14 +0000
Manifest this update:     Sat 20 Dec 2025 17:01:14 +0000
Manifest next update:     Sun 21 Dec 2025 17:01:14 +0000
Files and hashes:         1: 0-0QU-mcwsSjRhq471-gtd5ufh0.roa (hash: VGJkz0Kb+B/ZQAVYufjsQPwByA4ZPAxHr/hG7qTqtp4=)
                          2: 1iyiGCCaZCOIy-3SK8-ztkCORB0.roa (hash: 4+8lvNVy48rfdEy8LO/Fif5vr+YXhPfmQva+BSbThYY=)
                          3: yMyL2gxj59LWXBntcEO1oteRwfE.crl (hash: f90qP9a3GXL4YHPbdColKx3FPVAwSrhEeWsPB8+YhUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:b5:51:a5:31:25:29:42:29:23:07:a8:c4:bd:3d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
        Validity
            Not Before: Dec 20 17:01:14 2025 GMT
            Not After : Dec 21 17:01:14 2025 GMT
        Subject: CN=e9466d2f404dac22ca973ca1e2dbbf46d2d13a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:47:98:c6:1c:b9:e2:86:10:a6:32:fc:cf:17:
                    8f:cb:88:e0:e0:31:55:58:31:2e:0d:15:e1:92:79:
                    26:1e:b7:0a:16:4d:12:7b:4c:8c:ce:f3:63:3b:06:
                    f9:3c:ab:8d:f8:21:7a:5c:ec:c7:62:d9:53:03:f8:
                    9c:ed:5d:8b:68:c3:40:41:ff:96:b6:78:50:07:ff:
                    06:c3:0f:79:b2:11:aa:d7:3b:13:85:98:f1:c3:94:
                    6b:d3:8a:fa:9b:e5:c6:10:75:eb:49:8d:0e:d4:ca:
                    78:a0:9b:f7:93:bc:db:0c:0f:9b:26:c1:08:33:76:
                    8e:b6:b6:e0:57:59:e6:da:fe:ec:6a:c9:86:c7:30:
                    4d:39:9d:b1:d9:3b:7b:98:d2:ed:ca:2b:c4:30:91:
                    53:2c:ba:5b:71:22:90:89:1a:f7:7b:75:42:f3:bd:
                    8f:84:0c:a4:b0:22:eb:2d:70:25:3b:f8:f1:af:ed:
                    42:dd:14:5f:4c:5d:a5:06:01:81:f2:99:8f:c4:4f:
                    1a:8e:76:16:d8:01:37:e8:29:b6:cb:6a:c0:7e:7a:
                    cb:6e:9c:fb:df:e6:59:bf:15:a9:2c:f8:9a:d8:b2:
                    fe:85:72:aa:47:f2:ee:2e:6b:e6:59:3c:24:73:33:
                    ee:10:e7:e3:bc:9a:8f:da:85:de:21:cb:67:7f:f7:
                    d2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:46:6D:2F:40:4D:AC:22:CA:97:3C:A1:E2:DB:BF:46:D2:D1:3A:43
            X509v3 Authority Key Identifier:
                keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:60:76:a7:df:f5:4b:5e:98:84:91:4e:64:1c:a5:2f:aa:6e:
         53:f4:64:cf:a2:8d:eb:1f:03:6b:35:e8:d1:98:18:a3:1e:2e:
         82:f4:65:9f:6b:ad:25:12:99:a9:70:d5:b7:f0:ea:e3:00:56:
         e4:cd:5f:ac:18:ed:93:ca:68:3b:73:18:4c:10:d3:48:79:89:
         03:f6:da:5f:96:5f:ee:a2:50:c1:cc:5e:4e:b3:2f:c7:37:d5:
         80:be:0d:d2:0f:97:5b:a4:23:2e:b8:57:4b:d0:58:61:14:8e:
         59:32:98:c0:a3:96:a9:52:34:9f:23:7e:68:92:93:c9:bb:21:
         54:f6:d3:1b:c3:ca:4c:66:2c:ad:5a:ba:49:74:70:fb:4a:36:
         36:0e:3b:4b:5f:ae:e0:b7:72:d7:2c:15:a4:c0:92:c4:a4:4d:
         1a:0b:25:83:ef:e9:54:0a:45:9c:16:3a:c7:7a:50:71:85:c6:
         7f:5c:75:6e:59:a1:15:31:b3:3d:75:91:1b:ec:81:d1:67:2b:
         28:36:1b:34:92:a5:5c:b2:1a:0d:b4:29:9f:55:1c:20:d3:3f:
         58:3a:4f:50:3a:51:2b:35:e0:8b:71:69:c8:47:df:66:25:be:
         c6:5a:03:a2:e9:4c:dc:fe:78:72:e3:fe:34:84:58:23:a5:ca:
         6d:2b:f0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:28:45 2025 by rpki-client