This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft
File:                     pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft (raw, json)
Hash identifier:          7d8c0ZXkETfePGYMa6BsUxlH+736VPbXMZp4ZgaRmxc=
Subject key identifier:   6D:71:EB:20:46:0F:81:15:F2:7E:52:0A:7C:A4:7F:06:13:D5:EA:B1
Authority key identifier: A7:24:38:34:90:A1:05:BD:C0:D2:15:97:BF:B1:47:8E:F0:46:30:B1
Certificate issuer:       /CN=a724383490a105bdc0d21597bfb1478ef04630b1
Certificate serial:       019B50E072FC0DA8C4A4454B3FEB29842707
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft
Manifest number:          0763
Signing time:             Wed 24 Dec 2025 15:00:45 +0000
Manifest this update:     Wed 24 Dec 2025 15:00:45 +0000
Manifest next update:     Thu 25 Dec 2025 15:00:45 +0000
Files and hashes:         1: pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl (hash: TxwE8mUU3JeegQZNZFJe+c0boFr+MKiNhian/1FjYIM=)
                          2: zq6R1CnWZYXNrJ9Nu3qaClXC_EI.roa (hash: ak8xaUb5ScJnJTZZZkylfOFl3x6iHQeLyCotCjAzekI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 14:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:50:e0:72:fc:0d:a8:c4:a4:45:4b:3f:eb:29:84:27:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a724383490a105bdc0d21597bfb1478ef04630b1
        Validity
            Not Before: Dec 24 15:00:45 2025 GMT
            Not After : Dec 25 15:00:45 2025 GMT
        Subject: CN=6d71eb20460f8115f27e520a7ca47f0613d5eab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d1:b9:ce:6f:bd:05:1a:f5:62:dc:a3:ac:db:
                    19:e9:96:12:a7:22:27:20:9c:6a:21:c7:ab:29:72:
                    c8:3d:25:06:7a:fb:28:2b:4b:bb:e9:60:73:ce:2c:
                    61:ab:40:29:86:ef:99:04:27:0e:ba:f7:d8:46:ab:
                    dd:25:d0:9e:b5:f9:50:15:2c:42:b5:70:ff:19:c4:
                    0f:02:a6:cf:a7:9f:38:26:ba:25:98:16:1a:e5:34:
                    15:79:f3:09:65:5b:04:b5:3a:36:33:13:5f:2f:0a:
                    9e:35:15:f3:fd:76:98:1f:13:01:70:4c:d2:3e:e2:
                    36:dd:78:49:f3:0b:d4:c4:a8:36:ac:19:b0:70:00:
                    df:ab:18:39:bb:4a:4e:44:50:3d:87:c9:be:b9:b3:
                    61:68:f0:b8:f3:77:fe:fe:3e:ac:4a:af:79:82:2f:
                    ab:a6:ec:93:db:86:54:8f:2c:12:c5:c6:48:b4:f7:
                    78:5d:ad:ef:de:93:a0:29:bf:fa:0e:40:2c:81:e1:
                    bd:7f:58:f5:73:df:59:3c:7e:a0:49:f1:d4:0a:f6:
                    60:a3:5b:f6:fa:a0:ae:f5:20:ea:f5:18:83:74:09:
                    fe:1c:be:ac:5f:8f:6e:9e:29:0e:82:6d:40:89:78:
                    a4:eb:de:4c:4d:7b:0f:65:ca:de:fc:53:70:51:47:
                    ca:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:71:EB:20:46:0F:81:15:F2:7E:52:0A:7C:A4:7F:06:13:D5:EA:B1
            X509v3 Authority Key Identifier:
                keyid:A7:24:38:34:90:A1:05:BD:C0:D2:15:97:BF:B1:47:8E:F0:46:30:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ce:26:41:39:e5:0c:23:09:c4:f2:ee:f1:48:b2:84:e5:6a:
         2a:27:7b:80:22:50:14:5b:d9:34:d5:37:f3:b3:af:56:62:dd:
         5d:89:6b:3f:c8:f3:f5:b2:d9:65:7c:78:67:7f:6f:0f:0a:a7:
         a0:1a:6e:02:9e:43:9a:0d:72:22:96:65:cd:5c:e3:87:b1:39:
         a2:f0:4e:c7:9d:8f:fe:4c:da:fa:59:01:f7:6d:01:19:d3:71:
         6b:27:24:78:97:ae:41:6a:0a:c1:16:db:d5:69:1a:ba:54:0c:
         7b:ae:ea:a5:ec:14:9e:48:55:b3:a1:42:3d:21:c2:12:45:cc:
         6d:a7:bf:4d:18:09:ab:0b:e9:1f:52:95:7a:6d:f3:91:ed:2b:
         c2:5a:7b:39:1c:5c:9c:1d:99:99:f1:03:32:25:f2:f8:48:12:
         aa:2f:6d:42:76:f1:2b:bb:55:8a:89:6b:4e:6d:ef:4a:8d:7d:
         ec:22:d7:dc:73:ad:7a:40:c5:95:7f:5f:63:5f:a2:25:ba:26:
         93:a6:33:d0:94:f2:56:72:e6:5a:34:41:c7:36:80:49:f3:87:
         34:f9:e9:22:29:eb:a9:f5:6b:34:8c:4a:12:44:09:59:e0:93:
         40:a9:74:87:af:fd:82:e7:01:ab:42:e5:2d:e4:55:fe:d4:11:
         a6:76:45:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtQ4HL8DajEpEVLP+sphCcHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MjQzODM0OTBhMTA1YmRjMGQyMTU5N2JmYjE0NzhlZjA0
NjMwYjEwHhcNMjUxMjI0MTUwMDQ1WhcNMjUxMjI1MTUwMDQ1WjAzMTEwLwYDVQQD
Eyg2ZDcxZWIyMDQ2MGY4MTE1ZjI3ZTUyMGE3Y2E0N2YwNjEzZDVlYWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutG5zm+9BRr1YtyjrNsZ6ZYSpyIn
IJxqIcerKXLIPSUGevsoK0u76WBzzixhq0Aphu+ZBCcOuvfYRqvdJdCetflQFSxC
tXD/GcQPAqbPp584JrolmBYa5TQVefMJZVsEtTo2MxNfLwqeNRXz/XaYHxMBcEzS
PuI23XhJ8wvUxKg2rBmwcADfqxg5u0pORFA9h8m+ubNhaPC483f+/j6sSq95gi+r
puyT24ZUjywSxcZItPd4Xa3v3pOgKb/6DkAsgeG9f1j1c99ZPH6gSfHUCvZgo1v2
+qCu9SDq9RiDdAn+HL6sX49unikOgm1AiXik695MTXsPZcre/FNwUUfK4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1x6yBGD4EV8n5SCnykfwYT1eqxMB8GA1UdIwQY
MBaAFKckODSQoQW9wNIVl7+xR47wRjCxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHlRNE5KQ2hCYjNBMGhXWHY3RkhqdkJHTUxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zMDUzNjAtMjIwMy00YTIxLWEyZmQt
OTFlODU5OWRkYmY3LzEvcHlRNE5KQ2hCYjNBMGhXWHY3RkhqdkJHTUxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8zMDUzNjAtMjIwMy00YTIxLWEyZmQtOTFlODU5OWRkYmY3
LzEvcHlRNE5KQ2hCYjNBMGhXWHY3RkhqdkJHTUxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdM4mQTnl
DCMJxPLu8UiyhOVqKid7gCJQFFvZNNU387OvVmLdXYlrP8jz9bLZZXx4Z39vDwqn
oBpuAp5Dmg1yIpZlzVzjh7E5ovBOx52P/kza+lkB920BGdNxayckeJeuQWoKwRbb
1WkaulQMe67qpewUnkhVs6FCPSHCEkXMbae/TRgJqwvpH1KVem3zke0rwlp7ORxc
nB2ZmfEDMiXy+EgSqi9tQnbxK7tViolrTm3vSo197CLX3HOtekDFlX9fY1+iJbom
k6Yz0JTyVnLmWjRBxzaASfOHNPnpIinrqfVrNIxKEkQJWeCTQKl0h6/9gucBq0Ll
LeRV/tQRpnZFGQ==
-----END CERTIFICATE-----
Generated at Wed Dec 24 23:26:04 2025 by rpki-client