This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
File:                     Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft (raw, json)
Hash identifier:          UTS1mhJOkaF51yfBJX5sCIGpDm6VW0xLj3VBAq8uXWQ=
Subject key identifier:   CD:D9:8E:6F:97:B1:B5:B6:D7:78:04:34:A8:E2:45:1A:19:A3:BB:57
Authority key identifier: 3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
Certificate issuer:       /CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Certificate serial:       019B3EDAB9A49754112B17F668E7A6B0F7ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
Manifest number:          1789
Signing time:             Sun 21 Dec 2025 03:01:20 +0000
Manifest this update:     Sun 21 Dec 2025 03:01:20 +0000
Manifest next update:     Mon 22 Dec 2025 03:01:20 +0000
Files and hashes:         1: 1adP5-NZ3OGm9i9jXo5g2DtuEHg.roa (hash: 4GXA+o0SJCtO2Bu0u+0CpRTj3wJJBPSJUEdoH/BzRg4=)
                          2: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl (hash: 5CAXIIa+UWNKyyvrl68HfThrD8RE3d4UHCaQloeXB2A=)
                          3: XfcUo_pFgzzQK3LpHanDAL6qsm8.roa (hash: PqM9+rcTrXNoQwaCLTQL6oXgVIvAF+akxeev/02act4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 03:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:da:b9:a4:97:54:11:2b:17:f6:68:e7:a6:b0:f7:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
        Validity
            Not Before: Dec 21 03:01:20 2025 GMT
            Not After : Dec 22 03:01:20 2025 GMT
        Subject: CN=cdd98e6f97b1b5b6d7780434a8e2451a19a3bb57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a0:2b:2e:cf:7b:37:35:f9:cb:b2:12:88:91:
                    5b:82:ff:56:23:7e:73:c9:c0:68:79:60:ee:36:93:
                    15:47:ec:e8:64:cc:7c:4d:9a:d1:31:6f:57:06:59:
                    c0:e4:47:54:5c:3c:50:1a:15:12:38:7c:05:43:70:
                    ac:ad:c1:f9:6f:0f:bf:7d:f6:dc:f6:89:cb:6a:4d:
                    3b:f5:75:91:15:07:21:f7:8a:2e:33:44:a2:0e:a4:
                    d2:d4:c2:73:4b:ab:96:6c:10:0b:4b:d9:e1:45:22:
                    5a:cc:3a:b0:d8:45:74:a8:2a:03:6c:81:68:84:41:
                    74:d9:36:e3:19:62:26:22:e0:09:48:fe:aa:2f:5d:
                    0a:bb:e2:4e:7b:37:f6:50:e1:44:91:a6:be:e5:42:
                    a0:e4:46:ae:c5:ad:df:7e:a9:53:4c:40:56:4c:26:
                    95:b0:bc:cf:86:5d:95:c7:98:3f:52:fd:23:86:b7:
                    d3:9a:7e:ad:9f:e9:be:ce:7a:0b:b3:19:17:8b:ad:
                    86:5e:39:18:ad:bb:a2:22:51:ab:24:6a:98:cf:d7:
                    12:ea:92:da:8a:ae:7b:c5:fc:5e:ee:bd:a6:b9:9d:
                    e3:48:f3:1a:5d:6d:fd:b1:63:13:58:bd:c9:ee:35:
                    cf:ed:d4:07:af:42:c6:3c:3e:2e:8d:c5:80:0c:08:
                    a8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D9:8E:6F:97:B1:B5:B6:D7:78:04:34:A8:E2:45:1A:19:A3:BB:57
            X509v3 Authority Key Identifier:
                keyid:3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b7:c5:f9:ca:f1:25:46:bf:3a:ce:54:8a:0e:15:62:69:e8:
         27:1b:b1:0b:2d:a3:34:4e:f5:32:0f:be:57:b7:ee:0b:f6:1c:
         ca:69:d4:60:ef:54:bb:a3:bc:ec:f8:18:d7:33:ac:26:1a:69:
         00:d1:d5:fd:1f:10:6c:31:73:24:1b:a3:8d:df:f3:78:97:c7:
         d1:8f:ac:ac:9e:64:34:4e:3e:78:4f:28:ba:c0:9c:a1:39:7e:
         1b:8f:f1:cf:11:cb:fe:1b:a6:09:e6:3b:04:96:22:4a:30:22:
         91:0c:83:83:96:de:cd:11:18:14:d7:bb:3f:3c:fb:4b:03:89:
         c8:e1:5c:1d:49:75:63:61:90:e1:d4:48:6f:f6:0d:32:d1:6b:
         70:8f:48:81:c2:e9:5b:2c:68:16:02:c4:88:f3:de:79:6c:bb:
         5f:fa:69:07:b8:32:32:46:5f:7f:4d:cf:a5:dd:b0:fc:5b:0f:
         ef:b3:ba:0b:f5:28:25:8e:8c:0e:85:d6:62:f9:1c:2f:2e:13:
         b3:bf:60:aa:d6:27:4e:6e:05:34:a5:f3:b9:8d:10:08:3f:64:
         96:db:d3:12:2e:ea:3c:17:84:01:ba:d5:3d:ef:fc:2b:56:ca:
         b3:90:83:74:6a:02:56:d9:98:e1:aa:a3:c8:64:6a:be:85:38:
         7f:00:82:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs+2rmkl1QRKxf2aOemsPftMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMjczYjY4NjFjZjdjZjQ2NDZjYzVlMDQyNzVkNjYxNzYz
NWYwN2IwHhcNMjUxMjIxMDMwMTIwWhcNMjUxMjIyMDMwMTIwWjAzMTEwLwYDVQQD
EyhjZGQ5OGU2Zjk3YjFiNWI2ZDc3ODA0MzRhOGUyNDUxYTE5YTNiYjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6ArLs97NzX5y7ISiJFbgv9WI35z
ycBoeWDuNpMVR+zoZMx8TZrRMW9XBlnA5EdUXDxQGhUSOHwFQ3CsrcH5bw+/ffbc
9onLak079XWRFQch94ouM0SiDqTS1MJzS6uWbBALS9nhRSJazDqw2EV0qCoDbIFo
hEF02TbjGWImIuAJSP6qL10Ku+JOezf2UOFEkaa+5UKg5Eauxa3ffqlTTEBWTCaV
sLzPhl2Vx5g/Uv0jhrfTmn6tn+m+znoLsxkXi62GXjkYrbuiIlGrJGqYz9cS6pLa
iq57xfxe7r2muZ3jSPMaXW39sWMTWL3J7jXP7dQHr0LGPD4ujcWADAioHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3Zjm+XsbW213gENKjiRRoZo7tXMB8GA1UdIwQY
MBaAFD8nO2hhz3z0ZGzF4EJ11mF2NfB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHljN2FHSFBmUFJrYk1YZ1FuWFdZWFkxOEhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83NTQ2NWYtNjc5Ny00MTQxLWI5NjEt
OGI3YzU3YzU2MjE1LzEvUHljN2FHSFBmUFJrYk1YZ1FuWFdZWFkxOEhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC83NTQ2NWYtNjc5Ny00MTQxLWI5NjEtOGI3YzU3YzU2MjE1
LzEvUHljN2FHSFBmUFJrYk1YZ1FuWFdZWFkxOEhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7fF+crx
JUa/Os5Uig4VYmnoJxuxCy2jNE71Mg++V7fuC/YcymnUYO9Uu6O87PgY1zOsJhpp
ANHV/R8QbDFzJBujjd/zeJfH0Y+srJ5kNE4+eE8ousCcoTl+G4/xzxHL/humCeY7
BJYiSjAikQyDg5bezREYFNe7Pzz7SwOJyOFcHUl1Y2GQ4dRIb/YNMtFrcI9IgcLp
WyxoFgLEiPPeeWy7X/ppB7gyMkZff03Ppd2w/FsP77O6C/UoJY6MDoXWYvkcLy4T
s79gqtYnTm4FNKXzuY0QCD9kltvTEi7qPBeEAbrVPe/8K1bKs5CDdGoCVtmY4aqj
yGRqvoU4fwCCaQ==
-----END CERTIFICATE-----
Generated at Sun Dec 21 13:04:40 2025 by rpki-client