This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
File:                     YtGQsjjZeveQC9y9AjBLeC_8ryo.mft (raw, json)
Hash identifier:          /M6HpeK06IBnI5SDKI4jQzMTRt+5cuiP13afkJvN3Ng=
Subject key identifier:   5C:EF:0E:E7:0F:56:12:A9:CC:48:C2:BC:55:F1:4F:7E:10:68:36:6B
Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
Certificate issuer:       /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Certificate serial:       019B3C7F0603171CBAFF56E1E2572328FED6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
Manifest number:          166F
Signing time:             Sat 20 Dec 2025 16:01:56 +0000
Manifest this update:     Sat 20 Dec 2025 16:01:56 +0000
Manifest next update:     Sun 21 Dec 2025 16:01:56 +0000
Files and hashes:         1: 1FirROPNrkHN2m5M_tWz9W6Qht8.roa (hash: 7SXTMAkSE5AfqMQSsA8zWzP5U/YDv2PQW+l2GzbvIPY=)
                          2: BZgRuxw6XN5JK6FOhunyeY0a9Fc.roa (hash: yKRC8CuGjayGobPtwmCDX6ktnCZk3RWj3tDYbdA547A=)
                          3: KidBmSJQC90WWlzzX6-raLlPkBk.roa (hash: UjIj4BCKN2Yzl+7rl6tYpEx3eAYndxpux9jsq4JXQKM=)
                          4: YtGQsjjZeveQC9y9AjBLeC_8ryo.crl (hash: m/Z+KwhaYHMJMrKNkzdG4NgjY2soQoO9ymEW931Hakg=)
                          5: bx89FLLhw7rAJUcSgyNM_2tR5NI.roa (hash: 9wF6NZeg8HWtL76RaAClvvi0zdCvUo8Of7MZ27hlf8k=)
                          6: cx-i-vioDiOrCAaf4O-H6J9IkI4.roa (hash: H7gfl8SrS8e2GfxlOJQWxhYqdIi+GK6qhediZVZeGXM=)
                          7: nsMUpYJUmKjCVWCxid0cbuzTzZw.roa (hash: FEv6X45pgppY2d5V8cAE7teEJNJCVmO5qOmeqCJTHkc=)
                          8: oeInBg5Rwvy0Usw7V77XPYFf_kU.roa (hash: J6YiElEmKWUh1A4dZVJ86YSCT+nX2n83GfNXACazcC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:7f:06:03:17:1c:ba:ff:56:e1:e2:57:23:28:fe:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
        Validity
            Not Before: Dec 20 16:01:56 2025 GMT
            Not After : Dec 21 16:01:56 2025 GMT
        Subject: CN=5cef0ee70f5612a9cc48c2bc55f14f7e1068366b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:17:12:ca:1b:3f:f0:fc:18:9f:45:09:b8:e7:
                    a9:eb:80:1b:ee:eb:a3:a5:e4:1d:c3:70:e0:aa:72:
                    4f:6a:d2:c2:ba:25:30:38:bd:4d:85:b0:b5:3f:f7:
                    99:30:9e:35:4b:09:8c:19:12:9d:95:da:5d:6b:fe:
                    5d:bd:71:e2:c0:d4:78:1a:b8:53:29:6a:ec:f1:87:
                    9b:45:93:b7:8c:1d:87:63:aa:c2:0c:eb:10:79:ac:
                    68:99:ab:ae:be:a4:e8:84:d9:29:11:c3:de:6b:ea:
                    32:2e:7c:9b:d4:18:ff:b4:36:39:df:cf:31:06:b2:
                    9c:81:98:b8:03:2e:2c:04:30:00:2b:37:83:b6:39:
                    e2:1a:e0:9f:40:b8:05:a2:b5:dd:d9:d6:89:d7:02:
                    7b:77:d6:34:6f:46:6b:e4:a6:8c:4c:7a:51:57:a5:
                    1e:03:2a:fe:f2:60:5c:b9:a5:86:29:61:07:88:e8:
                    ff:b3:6c:f6:f6:b9:ed:4e:86:40:0b:09:38:02:6d:
                    13:1a:7e:52:39:5e:55:16:5f:94:42:d5:82:ae:bc:
                    18:03:9e:31:1c:7e:56:3a:5c:56:11:15:b1:7e:a3:
                    7f:ca:21:95:4a:6c:43:65:f7:ee:40:3e:99:0a:6e:
                    c3:6e:42:72:71:4a:0e:d5:7a:c5:28:49:6f:d6:3d:
                    97:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EF:0E:E7:0F:56:12:A9:CC:48:C2:BC:55:F1:4F:7E:10:68:36:6B
            X509v3 Authority Key Identifier:
                keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ba:8d:24:83:f3:24:b2:87:f3:76:06:3c:a6:6c:d3:80:76:
         39:1d:03:c7:ff:2b:ed:4b:10:71:db:34:9d:ba:4b:4e:51:8d:
         0c:6f:1a:2f:25:f5:66:ef:1c:ee:0d:ce:7a:22:c8:a4:06:83:
         98:b2:c9:54:75:96:3f:0b:50:bb:7c:5d:7c:64:35:d6:dc:61:
         7b:d8:5e:fe:91:73:0a:03:95:b6:98:57:ea:59:39:1b:a7:aa:
         ef:45:9b:2e:12:62:ed:5e:da:35:0d:31:09:01:a1:6e:99:42:
         33:47:79:e6:75:f8:7b:5b:e2:3f:67:d5:e3:cf:d8:73:b8:e0:
         5d:36:36:57:51:d2:b8:ff:3b:86:c0:ed:ce:ce:1d:ef:d4:9b:
         10:a5:24:25:a3:ef:9d:c4:6e:95:89:f8:f0:32:78:0e:29:3b:
         a8:00:81:ff:68:b0:cb:4e:2d:dc:de:86:c4:64:5d:50:91:2e:
         13:56:b4:d4:09:45:65:ca:d5:de:26:d2:bc:2c:f0:af:06:f4:
         dc:8b:09:05:a4:a1:f8:84:1e:4f:b8:27:09:39:e1:07:d2:76:
         d9:aa:0d:03:ad:8b:08:13:fe:61:cf:6a:82:a8:b2:16:a8:c2:
         03:01:d3:18:cc:65:a7:08:80:4e:0e:f4:d9:8b:c7:c8:84:48:
         40:42:e0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:14:59 2025 by rpki-client