This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft
File:                     _YgaVMfaqF6iOSqTEpRXjbzWp3c.mft (raw, json)
Hash identifier:          QhAPKJ6xrHoFJO00jEzPoBm5CJl8+WkZH2BheTYP5ok=
Subject key identifier:   05:CD:DA:99:1E:75:2E:FB:E3:D7:ED:46:1A:7D:C3:E8:2D:0D:FF:DF
Authority key identifier: FD:88:1A:54:C7:DA:A8:5E:A2:39:2A:93:12:94:57:8D:BC:D6:A7:77
Certificate issuer:       /CN=fd881a54c7daa85ea2392a931294578dbcd6a777
Certificate serial:       019B3946E3741B70D231BBB5C8C8CF2695A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_YgaVMfaqF6iOSqTEpRXjbzWp3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft
Manifest number:          02F2
Signing time:             Sat 20 Dec 2025 01:01:45 +0000
Manifest this update:     Sat 20 Dec 2025 01:01:45 +0000
Manifest next update:     Sun 21 Dec 2025 01:01:45 +0000
Files and hashes:         1: Nrv8RmxCZSwlroYNjaCzC_gNRbA.roa (hash: z0Wt+SHMhk+eKo3V2z0COv5ilnG0T4vZIO6vh0M7eRI=)
                          2: _YgaVMfaqF6iOSqTEpRXjbzWp3c.crl (hash: VLuIMVxLtFRbufS/3NUANPkHD7ir0D88tB1TM8k0qUY=)
                          3: mP9V6Aj18VCMrj4XFwGFW0OW6UE.roa (hash: toSYJiG8N793iae27SJdKYFpAYguNX3k92Kzmh23MYM=)
                          4: t_aUQpjmHC8hsa9s9dp7snO6GLM.roa (hash: EMjKr1hOyaIzjfvQlqtk+HjL3E6MN7ciA1JY5E4ZJKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_YgaVMfaqF6iOSqTEpRXjbzWp3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:46:e3:74:1b:70:d2:31:bb:b5:c8:c8:cf:26:95:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd881a54c7daa85ea2392a931294578dbcd6a777
        Validity
            Not Before: Dec 20 01:01:45 2025 GMT
            Not After : Dec 21 01:01:45 2025 GMT
        Subject: CN=05cdda991e752efbe3d7ed461a7dc3e82d0dffdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:50:ca:b0:bc:ef:cd:e0:f2:cf:bc:7d:dc:
                    a4:7c:d7:af:24:bf:ce:a5:0b:b7:d1:3a:76:63:ef:
                    24:65:60:eb:a5:d9:ce:87:12:2f:b2:4d:7b:fc:a9:
                    70:3b:46:97:10:76:1f:e2:bd:6f:56:d4:71:8b:25:
                    0b:b9:98:5c:5f:3d:a4:52:d5:05:a1:3b:39:72:d4:
                    d0:ce:6e:09:fc:68:e9:4e:c0:57:e8:17:33:f9:3b:
                    94:20:e1:fd:49:51:b0:0d:5b:1d:e6:db:cf:17:8e:
                    89:73:db:47:fb:a7:89:65:a4:6a:7e:a4:9a:2e:1f:
                    37:c6:86:cb:6e:e1:39:47:27:44:ed:d3:6b:66:f4:
                    34:b8:45:a2:c2:c5:70:7c:1a:fc:af:fa:3b:28:1f:
                    99:ba:d3:fa:54:43:df:9b:cd:ad:59:0a:44:f2:e5:
                    12:b3:70:fc:30:56:da:93:48:43:59:f1:3e:9b:67:
                    8a:78:4f:0f:8b:74:fb:fb:6a:b6:b6:de:3c:a6:4e:
                    ce:f8:b6:f2:7d:5a:d7:58:c2:7d:2c:2a:1c:29:67:
                    90:32:fd:fe:7c:e3:a3:e0:2a:c8:e5:c0:13:7e:18:
                    18:55:4e:c4:ac:7f:e1:a9:11:e4:dd:ef:6a:ff:bc:
                    62:43:ef:3f:14:92:b7:36:e4:36:62:a7:3e:c4:40:
                    f4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CD:DA:99:1E:75:2E:FB:E3:D7:ED:46:1A:7D:C3:E8:2D:0D:FF:DF
            X509v3 Authority Key Identifier:
                keyid:FD:88:1A:54:C7:DA:A8:5E:A2:39:2A:93:12:94:57:8D:BC:D6:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YgaVMfaqF6iOSqTEpRXjbzWp3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:da:29:65:52:df:f6:1e:0f:05:bc:cf:61:b5:ff:97:92:9f:
         5d:61:a5:0a:ef:4a:99:28:ea:24:29:b6:db:7f:81:f4:7b:74:
         2f:af:3a:81:10:d3:55:65:f6:f5:25:20:58:c3:74:92:4b:68:
         ab:00:54:a6:b2:fa:9e:b5:fb:3c:96:7f:e6:44:2e:9e:37:0a:
         62:73:45:11:08:ba:3c:c6:6c:1f:f6:29:98:50:b3:8d:84:57:
         16:7b:cf:bf:3d:94:f4:96:40:c4:87:b7:5a:5f:f2:fc:c0:4d:
         b9:91:f6:e4:26:d8:01:c1:d2:70:d1:9c:c0:d9:5b:cc:97:26:
         d6:a0:ca:4c:24:69:3b:84:a0:3c:da:74:d1:e9:d7:1d:d6:ac:
         c5:2b:76:8b:55:8d:b8:36:0b:18:86:05:86:3a:7c:ad:57:6f:
         6a:48:95:e2:58:c2:0b:4f:87:a9:b4:b7:7f:18:6c:cd:13:32:
         fa:5b:ef:4d:32:8f:49:13:dc:54:f3:dc:bc:fa:ad:8c:7f:0e:
         59:60:3c:dc:bc:8e:d2:e0:31:9d:cf:f8:5c:e5:cb:70:a1:dd:
         c0:56:06:0b:1f:01:7c:89:94:be:23:53:5b:84:5b:a1:6f:14:
         8c:e8:3a:ff:43:37:4b:6c:66:48:97:b2:1e:b7:c4:f0:05:df:
         62:c7:5a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:30:24 2025 by rpki-client