This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
File:                     HyyzW4dHgMuT3EQhC5151u2U_l4.mft (raw, json)
Hash identifier:          i/EaGFxuSG8WwBtuklTwZ3kuIsAlaLNf5TxSOtUzZA0=
Subject key identifier:   73:18:2C:34:B3:90:B3:A9:18:83:F9:3D:16:22:4B:B8:C3:85:4D:9A
Authority key identifier: 1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
Certificate issuer:       /CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Certificate serial:       019B3B6C04C95868F32E20811CEB52F0EBB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
Manifest number:          1788
Signing time:             Sat 20 Dec 2025 11:01:33 +0000
Manifest this update:     Sat 20 Dec 2025 11:01:33 +0000
Manifest next update:     Sun 21 Dec 2025 11:01:33 +0000
Files and hashes:         1: HyyzW4dHgMuT3EQhC5151u2U_l4.crl (hash: 1GAXV+7YfwQu3gspsAZY4EMpzaMgpOzEGPLQMaQfQsg=)
                          2: UyByoYW1eGUazMnJ8I-2ncOK0hs.roa (hash: 2RQW6HeC6UJWl0PyhVUJ1Au2Gjg5MsY0s3xBfwIHAaw=)
                          3: vRyA1sBnGbBdfcd9RnV3r6TFptk.roa (hash: +l9+gT14Y8WjAyCtiqhfE/NWwkGANddHeME8IP4u0y0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:6c:04:c9:58:68:f3:2e:20:81:1c:eb:52:f0:eb:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
        Validity
            Not Before: Dec 20 11:01:33 2025 GMT
            Not After : Dec 21 11:01:33 2025 GMT
        Subject: CN=73182c34b390b3a91883f93d16224bb8c3854d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:05:6e:96:9e:41:ac:af:73:93:5f:5b:51:6d:
                    86:d5:86:15:6d:e5:34:f4:ac:e8:09:1a:90:a0:47:
                    03:20:61:a3:6f:38:f6:af:93:1b:35:70:2e:92:6c:
                    ba:cf:f8:4c:68:79:c0:da:90:d0:ce:d9:47:16:d2:
                    50:64:fd:05:a1:1a:ac:59:a4:30:44:ed:28:5e:28:
                    89:97:1f:b2:be:78:8b:0a:d2:14:dd:fb:f3:2c:38:
                    5c:ef:5a:2a:d5:a4:29:1a:98:4d:ea:d8:6e:d3:ce:
                    51:27:05:e0:53:ce:c0:5c:55:41:6d:90:3c:fb:87:
                    eb:71:44:bd:fe:e8:3c:97:63:0b:99:34:dc:f0:cc:
                    15:46:4b:b5:1f:01:f6:46:4b:df:3c:63:e9:0f:f5:
                    46:a6:f8:3c:e2:3b:8e:54:b8:db:d3:87:99:6d:c1:
                    f0:ad:2c:3e:58:2d:ef:ba:cd:04:82:49:21:c8:fd:
                    87:c4:00:e3:30:aa:fb:9b:12:88:6e:6d:06:ef:98:
                    f7:16:4d:7b:f8:26:2c:71:87:52:b9:56:2a:a9:92:
                    bb:51:5e:11:82:72:60:56:1e:4c:d7:1c:1f:81:12:
                    0d:46:2d:af:10:1a:69:c0:74:13:ed:a6:2c:85:d6:
                    9f:1e:96:2d:ca:02:ae:f2:e3:02:f0:2f:15:3c:4f:
                    8a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:18:2C:34:B3:90:B3:A9:18:83:F9:3D:16:22:4B:B8:C3:85:4D:9A
            X509v3 Authority Key Identifier:
                keyid:1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c2:d6:f5:b7:14:41:c5:4b:54:75:a4:5f:82:8a:c4:c2:11:
         c0:ac:01:41:c8:f6:ac:71:6b:52:1a:05:5d:f8:47:8b:43:2f:
         aa:b9:55:d9:de:b4:a8:02:27:8d:48:bb:54:af:2b:42:62:d2:
         8c:31:a7:77:84:45:cd:51:2e:bf:4c:cd:ce:63:09:95:f6:69:
         4e:e3:fc:46:c8:15:97:1a:43:42:90:c0:49:3d:fe:74:dc:20:
         a7:7e:39:90:07:8e:f6:3b:b1:6e:dc:e7:1f:bd:9c:6f:dd:68:
         3e:3a:a9:d7:90:a4:b2:43:b1:ba:af:bb:5f:9f:26:3c:4d:78:
         56:23:e2:a6:1d:bc:fa:e1:02:2a:62:50:c7:34:69:4a:33:ca:
         57:65:89:31:b4:ab:2c:f0:52:aa:da:bf:90:8c:fe:be:86:a8:
         30:61:5c:55:fd:91:7a:8a:44:e2:94:25:7d:f5:76:b8:77:7b:
         14:32:5a:ca:dc:bd:32:ef:22:05:d0:8d:8a:c7:b8:4f:d4:4c:
         5d:29:e7:4e:02:99:08:65:bc:eb:e5:cf:18:e2:6f:07:45:a1:
         d2:d6:09:05:e3:0c:b8:d8:c1:24:be:16:dc:f9:86:f9:60:c1:
         28:1c:a3:59:ae:e8:99:2d:d7:8e:9a:2b:24:b2:c4:c7:cc:77:
         4d:27:39:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:29:03 2025 by rpki-client