This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
File:                     RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft (raw, json)
Hash identifier:          7+gedbspejrOPV8QVLye4g8JAVcCV9b8iU709+dURPI=
Subject key identifier:   21:81:0A:F7:66:BE:AE:F6:6D:4A:49:F9:D5:D9:1F:96:D1:EA:FD:23
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Certificate issuer:       /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial:       019B3B34D29D197172867A02F7F936757EE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
Manifest number:          1793
Signing time:             Sat 20 Dec 2025 10:01:15 +0000
Manifest this update:     Sat 20 Dec 2025 10:01:15 +0000
Manifest next update:     Sun 21 Dec 2025 10:01:15 +0000
Files and hashes:         1: BFq1km9XkHnmoDoXJVc27vizfZA.roa (hash: cHrkhcCjIdFy9DEItV+YoEGVfmLA0+VuuQv0zsT4f+Q=)
                          2: QVRWqhYUwIkNvJnwNn5ilovQsG0.roa (hash: ECIpmtTYGjYR3kRGmh6WnnV42XGn8NJAMdwXjOT27zA=)
                          3: RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl (hash: 5jJbltmNTXNxjFbaARYi7AkvYbQ0m88slYu97Ztm8Eg=)
                          4: Y9K3JlofK8POwOywRHQ-b7Rojd0.roa (hash: abVW39/CWooNu9JnN4E4q2eaNvJVrXWE5ieZckwkUSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:34:d2:9d:19:71:72:86:7a:02:f7:f9:36:75:7e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
        Validity
            Not Before: Dec 20 10:01:15 2025 GMT
            Not After : Dec 21 10:01:15 2025 GMT
        Subject: CN=21810af766beaef66d4a49f9d5d91f96d1eafd23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bf:93:2d:bc:47:a1:7f:2a:d3:8b:ef:9c:b8:
                    3a:9c:40:d1:09:79:0f:54:10:9f:cd:4f:ce:e3:35:
                    88:52:92:ec:0f:20:e2:7a:33:f7:1b:04:b4:0a:6f:
                    5a:c6:22:b8:20:6a:ca:aa:b6:d4:41:88:0a:b8:b7:
                    d0:39:d1:43:ae:cf:4a:16:01:02:42:e2:29:ce:ce:
                    ad:15:9e:7c:4d:62:ec:d5:62:f2:03:52:65:af:7e:
                    01:ba:62:ac:f2:a6:73:a0:bc:cc:2f:02:50:95:92:
                    0a:5c:fe:b1:c5:51:db:5b:aa:53:20:00:bd:91:e1:
                    13:75:17:bb:8b:ea:ad:86:a9:79:2d:9c:79:9b:27:
                    e9:62:99:27:2b:00:ca:8c:0f:b5:d5:b9:c1:6a:08:
                    65:06:a5:49:87:a1:e9:75:00:0e:46:63:7d:3a:50:
                    be:7c:d6:11:fa:90:1d:5f:4d:5d:16:66:c4:fa:93:
                    77:7c:83:01:0f:76:bd:e6:bd:aa:fb:2d:1e:85:d3:
                    53:3a:26:12:55:d1:62:19:e8:63:74:16:ba:4f:36:
                    58:5b:84:0f:27:88:24:5a:0b:5a:92:49:a4:91:a3:
                    0b:a0:04:f6:6b:31:9b:84:0d:4e:74:3a:76:2c:53:
                    4a:ed:8b:5f:c1:34:17:33:d7:20:cf:57:33:54:63:
                    68:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:81:0A:F7:66:BE:AE:F6:6D:4A:49:F9:D5:D9:1F:96:D1:EA:FD:23
            X509v3 Authority Key Identifier:
                keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f5:31:09:36:9d:b3:9f:df:10:de:a3:1d:d4:8a:90:f6:00:40:
         a1:0e:eb:f6:51:a9:be:3c:d4:8b:69:3c:30:0f:22:01:1f:87:
         1e:4e:d6:68:11:19:72:9a:81:a6:ba:a8:be:22:1b:51:41:db:
         88:2e:bb:04:98:57:34:e4:25:04:c7:5d:13:3b:ed:71:c9:75:
         32:bc:83:b9:60:a0:d4:93:f8:6a:d6:f9:9f:6b:18:fb:92:9f:
         f7:99:14:58:f8:f2:c9:07:14:7e:15:2e:3c:ff:d2:cb:fc:85:
         fb:01:1d:ea:9a:c6:5d:0c:af:3c:9f:c2:06:0c:66:53:5f:a1:
         16:91:2b:45:06:45:f5:a1:61:2e:83:0f:14:82:f3:45:ad:d5:
         03:ce:d4:71:a7:93:b8:37:01:68:68:ec:60:14:4d:a6:74:e0:
         ff:87:92:af:dd:41:d5:0c:36:85:86:a0:23:07:30:26:60:36:
         05:e7:cd:32:c9:14:cd:7c:fa:ef:d0:39:7a:cc:a0:da:c6:b2:
         1b:44:83:8d:51:12:0c:1a:60:b4:3e:03:15:3f:91:ef:f3:4d:
         c3:d6:c2:fc:15:73:fa:86:55:2a:11:97:51:a3:67:1c:1d:4a:
         3d:c7:e7:76:d2:6a:ed:d7:39:0f:97:26:99:be:10:5f:43:8d:
         27:0c:7c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:21:22 2025 by rpki-client