This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
File:                     YJ6nq6_FLH_6IKemquSuLSYlIHY.mft (raw, json)
Hash identifier:          fMva1k2mCpU2i/gkoNVSooe77aZsjcYpSBeaDEI7PqQ=
Subject key identifier:   BE:4B:46:B8:27:D3:D9:9A:3E:A0:00:9A:3F:68:FF:32:E0:3A:52:19
Authority key identifier: 60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
Certificate issuer:       /CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Certificate serial:       019B390F3E1277CB3D8BF9CF1EE9E0CDCCB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
Manifest number:          01F4
Signing time:             Sat 20 Dec 2025 00:00:58 +0000
Manifest this update:     Sat 20 Dec 2025 00:00:58 +0000
Manifest next update:     Sun 21 Dec 2025 00:00:58 +0000
Files and hashes:         1: XeHwlV4_nC5T8BptDxih7yIgLeg.roa (hash: SOsMIv7q0cLJ7sDVkddmO8lkJPy7j4qBPOmyU0Pco9g=)
                          2: YJ6nq6_FLH_6IKemquSuLSYlIHY.crl (hash: IB41qkh+brrnXEB13I+woM+n+mJeuF8WUx/4tewgB2E=)
                          3: _CP3e0WLgHreGwKUhpdfEeFss0U.roa (hash: QypuSrQ37amqxwFK8xiRJM3wGtIQUHMjSUwWELe4qw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:0f:3e:12:77:cb:3d:8b:f9:cf:1e:e9:e0:cd:cc:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
        Validity
            Not Before: Dec 20 00:00:58 2025 GMT
            Not After : Dec 21 00:00:58 2025 GMT
        Subject: CN=be4b46b827d3d99a3ea0009a3f68ff32e03a5219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b1:d8:0e:16:29:e6:b5:af:0e:01:1d:cc:df:
                    c6:db:bb:21:4d:b8:ce:32:ac:51:54:81:8a:b3:5e:
                    fb:9e:90:79:00:4a:c6:cf:0d:8d:4d:62:43:f7:00:
                    46:4f:ac:d9:7b:c2:e7:2a:65:59:d2:cb:11:7e:2b:
                    b2:b5:9c:68:b4:a2:4a:10:ae:20:5b:fa:90:00:9f:
                    80:7a:9d:20:5b:a8:04:41:d1:52:08:6e:fa:12:bf:
                    aa:29:fa:6e:94:e2:6f:3c:60:eb:f1:d6:20:1f:3a:
                    20:49:f1:a4:e6:74:c0:6e:86:d9:d2:f1:d0:1e:06:
                    60:0f:0f:63:4d:1f:63:32:0c:cc:15:07:64:48:8d:
                    f5:e8:d1:8a:a6:50:2f:df:99:c0:fc:1a:19:65:27:
                    b5:8e:53:f0:bc:27:50:c3:1b:a6:a4:85:9b:42:f6:
                    a4:42:c7:d0:1c:9f:41:5f:12:31:3c:41:23:04:ac:
                    8a:aa:f8:da:d4:73:3e:88:c0:f7:0d:ea:e9:fd:95:
                    f1:d1:99:57:5a:f1:c7:c3:bd:70:23:25:01:2b:a2:
                    43:74:68:1f:33:3a:8e:07:83:6c:02:f1:5f:d8:a1:
                    30:e0:9c:d9:7e:fc:41:1b:1a:8b:09:19:ac:cf:ed:
                    1f:e0:55:dd:9f:35:d8:77:87:e0:d3:52:66:73:b2:
                    80:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:4B:46:B8:27:D3:D9:9A:3E:A0:00:9A:3F:68:FF:32:E0:3A:52:19
            X509v3 Authority Key Identifier:
                keyid:60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:e7:0d:06:61:87:8f:10:e7:64:55:4a:23:d3:9e:9a:c2:3e:
         02:f0:32:45:1d:f3:30:f5:33:10:c7:d4:a3:da:19:46:05:9e:
         22:54:ef:64:d6:ba:eb:87:dd:7f:c9:b2:88:2d:59:d1:ac:ab:
         47:77:db:03:09:a0:f7:d7:6e:0f:80:b7:23:2f:52:09:e9:8e:
         07:c0:26:48:c4:b9:c7:de:9d:4e:f6:83:07:88:eb:0a:45:63:
         83:88:3e:45:6a:3d:13:32:fd:74:a0:33:3c:bd:e7:28:f5:29:
         8d:f8:9e:86:3c:af:f7:be:1d:c2:7d:d2:58:3c:99:4b:d4:2d:
         c5:c4:75:be:3e:b2:25:3f:42:43:66:d4:00:02:32:e3:72:b0:
         5f:05:48:e2:19:0a:68:5f:61:73:5b:2d:87:73:d5:9a:70:6f:
         4d:b7:bf:6f:78:69:0d:2f:0a:2b:1b:2f:5f:96:f9:d0:a7:bc:
         b7:f5:38:26:39:6c:04:45:13:ea:21:49:4a:38:64:83:25:ab:
         14:39:6f:23:62:97:0d:6d:2b:26:34:00:47:f9:05:92:36:49:
         0b:92:ae:fb:29:d9:2e:33:0b:45:cc:be:70:3a:01:f2:3c:b7:
         98:ad:28:78:e8:05:8c:0d:09:ec:5f:d7:82:ab:c1:b1:57:e9:
         fd:db:51:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:13:22 2025 by rpki-client