This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
File:                     Y0laTOy-r7Pq327QNJuwuW2kZO4.mft (raw, json)
Hash identifier:          eIOd4N6p4Q1nv0iWvAiTGb2pOdb0bFjVaJMpPbqraWQ=
Subject key identifier:   E6:27:3A:72:36:CB:6F:DF:C3:83:EF:A5:A5:D4:E9:6C:74:55:47:06
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Certificate issuer:       /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial:       019B3C7E489156361D84EB5ADF0E6335107D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
Manifest number:          0E1A
Signing time:             Sat 20 Dec 2025 16:01:07 +0000
Manifest this update:     Sat 20 Dec 2025 16:01:07 +0000
Manifest next update:     Sun 21 Dec 2025 16:01:07 +0000
Files and hashes:         1: GHhiTWJIrRnBFMlK6xuYQ1nDUn8.roa (hash: MsTf0syszxTszc8q1axFwJFUrUTMc1YgfxQY+NXxD28=)
                          2: Y0laTOy-r7Pq327QNJuwuW2kZO4.crl (hash: ihmoLpvb0fBFQ9kN7bzQRywbAUfP+pSCbDvlihGTrPE=)
                          3: r8SyFv2fzba2rsaAZpaSWzcngkw.roa (hash: nKMxn+pRmGytAQ++Vu6+D6lCb2MTuAqsH86iDcF9gs0=)
                          4: yLm-AHf2Wu1baGR2558SeGJ9vpc.roa (hash: /Bd5Eq0QqwLJoY4wAtUd+ZWldK7GG5PZ0zCSIxN6jTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:7e:48:91:56:36:1d:84:eb:5a:df:0e:63:35:10:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
        Validity
            Not Before: Dec 20 16:01:07 2025 GMT
            Not After : Dec 21 16:01:07 2025 GMT
        Subject: CN=e6273a7236cb6fdfc383efa5a5d4e96c74554706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e4:44:d4:ef:86:37:53:13:d3:f5:e0:57:4f:
                    f0:e7:7e:9c:c4:3b:a2:b1:58:ff:ce:58:17:f1:4d:
                    66:8e:7d:e3:7b:eb:1a:7e:47:2c:48:eb:46:c3:c3:
                    37:ac:cb:41:5a:08:17:6d:38:80:b4:17:a7:9d:71:
                    96:5a:16:c9:79:d4:de:36:fe:e3:b8:ef:62:09:fb:
                    f5:6f:66:1a:75:7d:e9:93:84:69:e0:bc:e4:3a:8a:
                    a4:72:70:0f:04:30:21:6c:81:d9:c5:bc:52:fa:19:
                    d4:5e:2b:5b:8f:37:b6:5d:7c:a4:a1:c1:42:13:33:
                    ea:17:45:04:46:81:68:f4:1b:a6:73:3e:f5:d9:2f:
                    3d:c3:39:2f:05:66:de:71:86:1a:95:02:e2:da:61:
                    d2:5b:2f:0e:fa:ae:ad:d5:84:0f:cd:33:c9:86:9d:
                    46:98:8d:7b:fe:22:9e:72:8e:59:32:da:1d:8b:69:
                    80:e5:b5:bb:53:50:43:25:6b:74:37:b5:3a:02:ab:
                    0c:5e:71:86:37:16:6a:83:37:29:c5:db:9a:99:97:
                    1b:b0:de:8e:6f:13:6e:58:4c:50:e1:3d:35:d9:3e:
                    ee:7c:5a:87:5e:17:a6:c9:f9:f4:1e:73:b3:37:60:
                    e6:b2:4b:d0:4e:23:91:fd:00:13:b1:21:29:3f:ea:
                    1c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:27:3A:72:36:CB:6F:DF:C3:83:EF:A5:A5:D4:E9:6C:74:55:47:06
            X509v3 Authority Key Identifier:
                keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:b9:90:f0:10:48:ab:e4:2b:a8:11:50:d2:7e:40:b8:d8:77:
         fa:68:1b:69:e8:3e:c8:69:fc:e9:2d:37:49:dc:0c:96:1f:74:
         57:06:80:6b:9e:76:47:b9:1b:3a:59:d5:42:f9:02:b4:73:68:
         3c:fe:78:9a:ff:bb:37:de:61:14:9d:02:70:0f:c0:19:0d:43:
         5c:6d:35:0d:55:c1:70:4c:9d:7c:bf:7b:55:74:8a:ce:a2:ac:
         55:08:c1:14:2e:55:e1:5d:7c:84:90:5c:9e:f9:64:92:7a:47:
         60:8f:d8:64:ee:70:46:a3:ee:9a:3a:05:35:55:4e:9f:07:ac:
         af:e4:eb:2c:e1:3e:c6:56:90:25:0e:cc:13:06:05:99:65:23:
         40:fb:c0:b4:29:58:4b:4e:d8:f4:f2:55:bd:4d:6f:8c:ef:ab:
         40:c6:de:2d:01:36:7c:ca:63:7f:e9:0e:85:bb:4e:41:30:41:
         27:11:05:96:c2:cf:43:89:6b:b5:15:90:d5:54:bb:f0:ba:93:
         7f:7e:77:8e:a5:94:eb:4d:b9:c0:2f:36:5f:49:7a:df:f9:23:
         06:17:47:78:42:bf:c5:03:53:84:45:94:74:88:5c:f8:59:9c:
         ed:04:59:7d:74:bb:fe:25:f8:4f:b5:c4:ba:9e:85:c7:1f:91:
         9f:4b:b2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:35:35 2025 by rpki-client