This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
File:                     YvSxR6sO_r8-RubeqYXXUYd8u04.mft (raw, json)
Hash identifier:          6zXDZWuB9k7maTA3w9KZHFkknLrL8ertO1WveAQou+0=
Subject key identifier:   07:DF:F8:8B:A3:41:DF:13:8A:16:6B:7D:4B:7C:27:95:70:2C:7E:97
Authority key identifier: 62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E
Certificate issuer:       /CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e
Certificate serial:       019B6E461C77EBB113965419E3520FBC34A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
Manifest number:          17A9
Signing time:             Tue 30 Dec 2025 08:00:46 +0000
Manifest this update:     Tue 30 Dec 2025 08:00:46 +0000
Manifest next update:     Wed 31 Dec 2025 08:00:46 +0000
Files and hashes:         1: B254PCc3PRUmXT9tMIpAl8XNBm8.roa (hash: DpvsWvC8Sgiw0PT2yPQOf/12fRPoJTcquOU/HLYaUhc=)
                          2: J59u2BmsQF-lPgsXDgML3YW9EYg.roa (hash: bjXPi4LmjoKUaLE0TDsNz6nSI8OxQWrWRYgOLdLvs8M=)
                          3: YvSxR6sO_r8-RubeqYXXUYd8u04.crl (hash: fcMERZ+bnG0w3BTe6GjtZmJNvRXoGK2noMFbx4+i+f8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 31 Dec 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6e:46:1c:77:eb:b1:13:96:54:19:e3:52:0f:bc:34:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e
        Validity
            Not Before: Dec 30 08:00:46 2025 GMT
            Not After : Dec 31 08:00:46 2025 GMT
        Subject: CN=07dff88ba341df138a166b7d4b7c2795702c7e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:57:92:8a:23:c2:8b:97:dd:87:15:ab:ca:98:
                    d1:da:a2:07:f1:74:21:80:4f:2e:d7:0a:ee:99:42:
                    0f:4c:0c:40:15:b4:6a:e0:8e:4c:d1:81:7b:73:6c:
                    90:72:f5:34:e0:db:2a:56:d7:64:97:8b:03:c3:6c:
                    da:57:9e:c2:8b:e1:ce:3f:da:7b:99:7f:27:80:90:
                    93:f5:b0:39:a2:1d:30:e7:72:b6:b0:ef:71:c0:15:
                    fb:5e:0c:ef:ba:7d:f2:c6:bf:55:58:5a:ba:8a:94:
                    f6:83:46:35:71:e3:cd:f5:d8:83:a0:b4:8f:d9:93:
                    da:24:44:5c:64:38:bc:72:f3:43:86:3e:e8:0d:ea:
                    d5:0a:f0:14:25:a9:36:31:6a:fd:62:2f:a7:1a:37:
                    d6:5a:d2:64:75:91:2f:74:24:14:05:e9:03:81:9c:
                    93:8f:8a:4c:b9:d0:ba:9e:94:4e:61:95:46:62:d5:
                    79:ce:21:40:40:89:42:92:65:54:8c:fc:12:25:c1:
                    77:bf:c3:50:f4:b8:2b:b3:f2:0e:f4:1b:df:f6:29:
                    8b:5b:2e:28:e3:59:f8:d5:6a:60:b3:3b:2d:d3:8e:
                    80:fa:f5:f8:11:36:c2:4b:29:fe:6d:13:65:e5:59:
                    99:93:12:ea:de:1a:41:fa:62:15:f2:89:39:74:e4:
                    0f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DF:F8:8B:A3:41:DF:13:8A:16:6B:7D:4B:7C:27:95:70:2C:7E:97
            X509v3 Authority Key Identifier:
                keyid:62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:17:25:70:e7:17:ed:94:ab:e4:dc:5c:33:41:6b:b6:0f:ab:
         56:14:2b:69:c7:1b:25:01:11:b4:cf:8e:97:e1:d4:4b:20:2e:
         5d:18:44:a2:18:40:02:c4:38:a5:2c:c6:b8:b7:af:df:79:e5:
         69:95:ee:52:98:5a:05:a9:96:aa:f0:4b:3d:39:1c:8f:b9:d7:
         a3:3c:12:f2:d1:ec:15:a8:6a:cb:66:cc:5a:9a:4e:e4:9d:cd:
         1c:e6:2f:d2:dd:23:4d:e7:a7:14:39:6a:39:d1:a7:72:3a:50:
         2f:85:ec:11:b0:de:4c:0d:f4:9a:b2:37:5c:ce:08:87:db:c5:
         c4:22:f0:bd:82:6e:d7:35:8a:ae:63:94:ca:82:65:7c:5a:ea:
         d4:c9:da:5b:86:1a:d5:c1:e0:51:d3:30:68:3d:c5:e4:ae:b2:
         a4:d1:d1:cf:52:37:e0:e1:2b:b8:16:92:08:0e:72:8b:f7:00:
         56:37:64:f3:14:1b:2b:54:53:8e:91:6d:a5:b1:f4:b9:5d:4f:
         7c:7b:7a:64:a2:73:fc:ab:1a:2d:97:71:58:48:50:8d:d8:76:
         32:de:1e:3f:82:ea:ef:bb:cb:4c:e1:4c:5d:1a:ee:19:cf:e0:
         6f:6b:be:c6:81:5f:ee:e8:8a:08:8d:a7:de:d0:d1:be:7f:4b:
         be:86:a0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 10:32:36 2025 by rpki-client