This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
File:                     YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft (raw, json)
Hash identifier:          800McFP4j1XbnRen63OoOej9cocSGrYG3bh2TgbQKUU=
Subject key identifier:   3A:8F:84:A7:89:A6:41:D6:95:9E:8D:B2:0C:4E:4B:6A:47:AF:96:7D
Authority key identifier: 61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C
Certificate issuer:       /CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
Certificate serial:       019B5D530BB26A26B7D40E634229AE56AF28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
Manifest number:          0F41
Signing time:             Sat 27 Dec 2025 01:01:22 +0000
Manifest this update:     Sat 27 Dec 2025 01:01:22 +0000
Manifest next update:     Sun 28 Dec 2025 01:01:22 +0000
Files and hashes:         1: 1-ACv8TAdNs0gbWjdydU8sE6LRqI.roa (hash: sldQ+jkEkh3NjeBRI9Vm42AYV7O+YARRotzm3PLAwyo=)
                          2: LfLqxUaT3QrnBmzzsTl49po0YNQ.roa (hash: L0cl7tw/Ws1r/mR8qiaEzUND2tiL5WY6XNQQ0gamYcs=)
                          3: YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl (hash: V3JoRed9Tt65QVtkWSbKyHIq92TZXM77ejvrrFOnRTM=)
                          4: zVuCymN8JrRk9IcWOjdOd2y5_r8.roa (hash: 0in95Q1f0yHm24tHTyK5WD1k8nyUtT+dnuohH7HB7vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5d:53:0b:b2:6a:26:b7:d4:0e:63:42:29:ae:56:af:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
        Validity
            Not Before: Dec 27 01:01:22 2025 GMT
            Not After : Dec 28 01:01:22 2025 GMT
        Subject: CN=3a8f84a789a641d6959e8db20c4e4b6a47af967d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:69:d8:7e:cc:47:bf:b4:23:7f:5f:c5:b4:98:
                    85:98:e3:ec:4b:d7:ec:22:8d:54:86:8f:09:47:78:
                    18:79:44:94:2e:c2:41:93:42:02:77:ba:f7:8e:52:
                    f3:e0:9d:d6:dd:db:07:b8:42:f0:a8:78:86:60:ee:
                    9e:9d:eb:16:f9:10:89:4d:14:19:7c:e0:77:3c:96:
                    92:a5:2a:31:1f:66:b2:20:44:fa:34:b0:c8:dc:fc:
                    17:9d:c0:02:e3:dd:39:7b:be:c3:1c:0b:00:2d:5c:
                    a0:3c:91:a0:75:7f:91:a1:51:03:dc:a5:09:d8:c0:
                    e4:d6:c8:35:d2:6f:82:42:78:b3:c6:41:9a:86:c8:
                    97:ab:00:e8:db:b9:58:13:ca:55:0d:72:bd:ee:ba:
                    22:76:7e:89:f0:3d:78:58:01:ff:03:5f:b1:1c:2c:
                    ae:56:1a:f3:7e:09:a6:d2:47:ec:b8:b6:cf:36:75:
                    f0:8e:b2:c1:38:8f:fa:dd:a3:6d:af:b1:e9:54:52:
                    22:c9:15:34:04:1b:a3:71:6f:64:bb:37:ea:39:43:
                    ff:18:ae:e5:4c:c5:b3:e1:da:f7:f5:3d:de:72:0a:
                    b9:64:b7:bd:d1:34:90:e9:19:6b:79:1f:73:51:a7:
                    a6:01:57:ee:71:c6:37:29:76:b8:69:ee:fc:8f:14:
                    7f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8F:84:A7:89:A6:41:D6:95:9E:8D:B2:0C:4E:4B:6A:47:AF:96:7D
            X509v3 Authority Key Identifier:
                keyid:61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:bb:e2:24:cc:80:86:b6:ba:90:00:c8:43:4d:14:a7:0c:ff:
         20:25:7b:44:15:88:dd:81:85:fb:4b:c5:e3:65:ea:09:78:1f:
         d3:46:fc:9c:45:9b:56:56:4a:2e:d0:ce:b9:49:3b:d4:c2:66:
         34:bc:67:f8:38:be:15:ba:58:84:a6:58:5a:26:b4:85:93:73:
         a5:38:aa:3e:0d:4d:ba:4e:92:68:2d:3c:9f:4d:84:59:7c:0a:
         8b:0e:1b:39:d2:ff:c6:38:1b:fe:65:4b:fb:aa:11:9f:80:a0:
         44:30:0b:50:53:97:ec:65:f4:0e:17:47:4d:21:fd:69:5a:f0:
         4e:b0:40:fc:60:13:ae:c3:d2:b7:b1:a3:8a:c9:02:dc:43:f4:
         67:8b:4d:95:88:26:8e:01:45:9d:f1:f9:a5:f6:d4:ee:7c:d9:
         c5:7d:bf:90:da:9a:56:9a:b9:98:d4:09:c8:61:ca:35:67:02:
         c0:e9:18:2a:90:46:20:cd:22:71:cb:9d:c0:ed:31:25:4c:dc:
         33:ea:48:5f:a2:e4:da:87:ea:9e:f4:58:9b:c5:56:c5:98:b2:
         b7:4e:6a:07:ea:dd:2c:e6:f2:d8:b0:eb:67:a1:99:2d:64:0a:
         d3:9c:6f:ca:ce:3f:26:05:49:15:d9:35:b0:8a:2b:05:8d:be:
         aa:85:c8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 04:24:55 2025 by rpki-client