This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
File:                     Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft (raw, json)
Hash identifier:          paJwiZoQDF47MdFsO9Dlc7fYNwh6gqHoWN/fZ1s/eDY=
Subject key identifier:   94:40:3A:73:F9:74:01:16:24:8E:11:0B:7C:C9:EC:F9:E3:AD:C7:8D
Authority key identifier: 23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35
Certificate issuer:       /CN=232b798ff76e8d5cec5ba47f7be7832983db3335
Certificate serial:       019B4437B2D2C0107EBC95E244BF14865AB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
Manifest number:          0703
Signing time:             Mon 22 Dec 2025 04:00:59 +0000
Manifest this update:     Mon 22 Dec 2025 04:00:59 +0000
Manifest next update:     Tue 23 Dec 2025 04:00:59 +0000
Files and hashes:         1: Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl (hash: AAuNX2dbMWLR/Dc2wBv3enGGij+rg9hFsqj6KkfzVgs=)
                          2: jSw8bTH4hTcqpfa7bHW8ZyPkknU.roa (hash: ABUXiiTkIZUHgQ3xysDCG98yDMZyrM6LOi10VqvVwCc=)
                          3: zC-XVtksfypCOwDmUdUeVllfLQI.roa (hash: q1lLlXPM1B2OuaAxpSk6zZYVH0rc6yp93NQ9Af6bSzU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 04:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:44:37:b2:d2:c0:10:7e:bc:95:e2:44:bf:14:86:5a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=232b798ff76e8d5cec5ba47f7be7832983db3335
        Validity
            Not Before: Dec 22 04:00:59 2025 GMT
            Not After : Dec 23 04:00:59 2025 GMT
        Subject: CN=94403a73f9740116248e110b7cc9ecf9e3adc78d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:11:38:2c:9f:ac:5c:1e:8b:16:21:6e:01:ec:
                    c7:e3:1a:f9:b5:63:29:46:30:21:21:20:02:8f:08:
                    f6:bd:a6:04:88:e4:73:a5:11:97:10:bd:bd:45:15:
                    97:9a:3c:9b:5a:5f:96:f1:79:ad:3c:42:2c:d6:1d:
                    53:f1:38:f0:3a:41:e7:85:b1:f2:a0:d6:6b:4c:83:
                    72:f1:11:dd:e5:d8:cc:7b:bf:d2:a6:19:61:77:6b:
                    c5:46:a2:3b:9f:43:37:97:a2:de:bf:71:21:bb:8b:
                    fc:3f:52:f3:29:fa:c0:2a:6a:12:3f:34:57:1f:ce:
                    f5:63:e6:55:0a:6e:32:3f:be:05:a8:19:af:06:c1:
                    fc:43:ad:16:d5:b9:9a:85:94:d5:91:21:b4:76:43:
                    d6:d4:fe:4c:82:01:a3:d6:eb:3f:de:97:85:5e:6a:
                    35:a5:2b:a9:9c:d0:f9:b5:0d:c0:fb:31:21:88:2a:
                    f3:ad:d6:e2:1b:42:17:ef:a8:79:11:2d:09:38:1e:
                    2c:25:d5:44:2a:c0:cd:c5:2f:2e:09:c6:01:73:18:
                    45:c7:3f:7a:89:84:98:49:db:c5:d2:78:f5:b0:31:
                    04:b2:54:78:fc:34:2b:80:7e:bc:82:1d:af:b1:5f:
                    dc:d9:9b:f5:c7:45:3c:07:88:99:90:37:2f:e9:87:
                    3a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:40:3A:73:F9:74:01:16:24:8E:11:0B:7C:C9:EC:F9:E3:AD:C7:8D
            X509v3 Authority Key Identifier:
                keyid:23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:e5:1a:2b:40:23:17:88:33:fc:f3:7f:93:75:76:c1:b8:bb:
         e5:a7:0b:02:8d:ce:79:7a:11:bb:e3:1c:4e:31:00:18:9e:1b:
         88:66:fd:c5:b3:c4:67:3c:d5:34:60:93:95:43:78:a0:5e:0c:
         64:f4:28:1e:c7:fe:46:71:66:d1:2c:ee:f2:b7:3f:db:85:d9:
         39:64:8f:e9:65:45:be:75:64:d6:5c:b9:06:05:57:95:c5:1b:
         21:59:7b:71:ab:f8:d2:77:5f:98:d5:09:7a:d1:de:0c:b3:0d:
         6b:80:61:a9:43:da:2d:43:37:bf:a8:dc:77:1a:54:19:6c:44:
         c3:67:07:f3:c3:73:66:b6:ee:58:75:09:12:c9:97:69:b9:a9:
         db:9e:9f:fe:b4:fe:ec:ec:64:42:0f:f4:b6:5d:8c:1f:b1:72:
         2d:d5:0a:4d:69:b0:5a:c7:25:c9:15:34:90:24:37:15:8a:b9:
         48:e4:f1:0a:ab:72:f6:cc:d2:88:f0:b0:a6:44:bc:a7:28:12:
         8d:e1:b3:12:bb:a5:c9:22:0d:f9:e2:fc:c6:dc:5e:de:e5:69:
         b3:41:7e:3d:12:00:c9:b8:26:7f:a7:93:8d:49:cd:19:1e:e7:
         81:ca:40:8f:b3:86:4d:ac:d7:30:d2:bd:4a:08:ea:de:c7:06:
         35:6a:5c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 10:36:15 2025 by rpki-client