This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
File:                     Y7gncq89YRuZsbpuPrbL_RaWU2M.mft (raw, json)
Hash identifier:          zmWd1oIpQbgfBGHFcD9jfoP0+cEEV0y7fI/7+r1dtDo=
Subject key identifier:   D2:7F:3C:EF:54:02:59:1A:20:DE:CB:F0:68:03:7E:4E:B9:2F:E3:77
Authority key identifier: 63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
Certificate issuer:       /CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Certificate serial:       019B650C0D52FEF18471DC156997C29C8FFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
Manifest number:          179F
Signing time:             Sun 28 Dec 2025 13:00:47 +0000
Manifest this update:     Sun 28 Dec 2025 13:00:47 +0000
Manifest next update:     Mon 29 Dec 2025 13:00:47 +0000
Files and hashes:         1: XH3IImnZQORJDcY8K4c1sqi8npk.roa (hash: o40iI1L0Dj1I3pYOBYI+Dt7Aw45pOymMFxf/GGvdYFY=)
                          2: Y7gncq89YRuZsbpuPrbL_RaWU2M.crl (hash: yH8UVwSvoIrX7NxWDvzlW+vzg54VHJerbTe+mzaI0no=)
                          3: iXJOEjsOn5QC56oWOinXWEqS8Pw.roa (hash: jHJ0wtuFjDDxH8Gh1uDFMh4KEFYRZhcEVsJ0/xmH1ig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Dec 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:65:0c:0d:52:fe:f1:84:71:dc:15:69:97:c2:9c:8f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
        Validity
            Not Before: Dec 28 13:00:47 2025 GMT
            Not After : Dec 29 13:00:47 2025 GMT
        Subject: CN=d27f3cef5402591a20decbf068037e4eb92fe377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ce:ff:99:b9:99:92:ef:9b:0e:3e:c5:d8:d7:
                    22:31:62:13:16:d0:cb:f9:6f:f9:bf:ae:51:ac:1d:
                    ba:5e:47:24:ec:c9:8b:8c:1c:35:ef:31:97:3f:a8:
                    5a:87:65:5e:95:1d:a2:5c:9f:9d:4f:03:aa:c4:6b:
                    70:3d:27:0d:0b:3d:3d:9e:99:c0:58:7e:d2:11:57:
                    2d:12:cf:f8:2c:b7:59:97:bf:58:51:5e:15:ac:b6:
                    42:bf:a0:ee:1a:a2:ee:f8:f2:a7:bd:3e:75:82:51:
                    35:93:c2:fc:07:cd:fb:56:70:c3:2c:7d:69:a5:f4:
                    75:58:19:97:d2:62:b0:74:74:71:d7:3e:68:84:e2:
                    0d:1f:8e:c8:20:e0:91:f4:c9:f7:5b:d7:55:c1:66:
                    49:6e:83:ed:9e:d1:a9:44:92:07:39:af:f2:bc:e7:
                    6b:76:5f:da:4b:53:2c:17:17:79:57:ac:55:6b:f5:
                    aa:c2:76:bb:22:9c:0b:33:6d:56:a3:84:d4:62:c1:
                    fa:da:31:6a:af:25:72:ba:94:d3:7a:a0:61:93:2d:
                    0b:57:62:34:62:01:43:30:1e:70:41:53:7c:ff:88:
                    6b:46:0f:c9:af:2c:a2:56:60:eb:ae:a0:56:38:41:
                    2b:39:c7:4f:9f:6b:46:ed:9e:b6:d4:e3:34:0d:c1:
                    97:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7F:3C:EF:54:02:59:1A:20:DE:CB:F0:68:03:7E:4E:B9:2F:E3:77
            X509v3 Authority Key Identifier:
                keyid:63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:82:0e:4f:14:72:3c:c1:f1:5d:12:8c:3e:6a:db:8d:a9:51:
         70:ea:99:a6:d2:71:78:84:69:95:23:37:89:7c:55:0f:14:b3:
         70:5d:24:36:09:49:92:ea:c8:c4:cc:67:6c:67:d5:10:70:86:
         73:38:d6:d3:a4:55:c3:66:48:41:27:a7:af:af:01:3f:1d:6d:
         a5:ea:c2:19:74:62:b7:4f:d3:84:58:e3:49:97:3d:76:62:c0:
         a1:c8:90:04:63:10:d3:ff:36:d9:1b:86:59:d2:a0:62:ba:ba:
         f7:b1:e3:62:88:a0:bd:4e:60:c6:52:f3:c4:8e:c5:22:3c:67:
         ae:02:21:c1:eb:b8:fa:13:b2:49:80:26:a6:60:15:7a:30:76:
         67:d8:c6:9d:16:71:36:39:d7:02:54:6e:d9:22:3c:5c:6a:1a:
         8f:a1:9e:7a:96:9a:0d:42:f3:3c:8d:b2:51:5d:07:f8:3c:84:
         51:ea:6d:e9:dc:aa:d8:8d:c0:9a:04:ec:fb:ed:e3:0b:a9:6b:
         07:4d:e8:1e:c0:ea:f2:b1:5a:d8:7c:8a:23:81:fc:3d:cc:c5:
         bc:53:5a:91:21:34:9d:40:f5:80:6d:f3:63:f1:b6:c1:bc:35:
         c0:9c:f5:b4:9b:c4:26:f4:4d:60:7f:ce:cc:ca:53:04:45:9c:
         e6:d8:e1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 18:53:05 2025 by rpki-client