This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
File:                     yHR0zrha8xEi7eWG1NZbD1tNl_A.mft (raw, json)
Hash identifier:          iTYYO3FY2UQsFRa157qiJH8uMOJ1QsBQaSxePxkC5LI=
Subject key identifier:   8D:4E:47:BD:C9:9C:0A:48:1F:0B:3F:7D:23:75:79:A6:3E:AC:A9:E4
Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
Certificate issuer:       /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Certificate serial:       019B3E6D73ACC60FE2559FEBB44339D7A0D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
Manifest number:          178C
Signing time:             Sun 21 Dec 2025 01:01:59 +0000
Manifest this update:     Sun 21 Dec 2025 01:01:59 +0000
Manifest next update:     Mon 22 Dec 2025 01:01:59 +0000
Files and hashes:         1: 6thBO5jod-S22ld5I7cCUqU9PPU.roa (hash: whhraWURnepuYYNpLNQlvK7It8S7aCrmfs8zXpfqsOc=)
                          2: bNZ4Q9wcD7yZAP2RwlbB4JNFkjQ.roa (hash: JZzkHPxKw9rE1eeiiSJfGm5FFzPkvIECAGzsNfZT2+0=)
                          3: yHR0zrha8xEi7eWG1NZbD1tNl_A.crl (hash: xLL6M3wOfzbj3SP6N++q8YKU64hxOnHc619dspP+knc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:6d:73:ac:c6:0f:e2:55:9f:eb:b4:43:39:d7:a0:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
        Validity
            Not Before: Dec 21 01:01:59 2025 GMT
            Not After : Dec 22 01:01:59 2025 GMT
        Subject: CN=8d4e47bdc99c0a481f0b3f7d237579a63eaca9e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7f:1f:6a:cc:a7:0d:46:9e:1e:a2:2e:72:35:
                    88:e6:18:39:b6:f9:23:32:bc:f7:5f:c5:d0:94:99:
                    3b:a4:ab:0c:ff:c3:a1:61:a8:ea:fe:78:7b:17:ab:
                    99:cf:ed:01:c1:88:96:bd:ee:73:87:7f:4b:6e:32:
                    3d:db:2c:16:9d:bb:11:6f:90:cc:a3:a0:78:8c:f6:
                    60:89:ff:a9:20:52:d0:5c:21:c7:49:63:82:20:cd:
                    cc:0c:34:33:a9:d3:a8:b4:1a:ab:be:22:a9:d9:34:
                    aa:39:f0:92:ff:cd:21:e0:02:6a:5b:f6:4d:1f:86:
                    75:c6:50:94:8d:79:2b:09:6b:25:00:e6:fb:42:69:
                    3c:f3:d2:15:f8:ec:98:ce:08:43:2c:6d:7d:4b:79:
                    2c:94:5e:85:31:46:df:47:41:05:d0:35:3c:5d:75:
                    3a:0b:51:44:f7:b7:2b:93:f2:e5:5a:90:ec:0c:d1:
                    55:a1:d1:d3:e3:d0:f8:bb:aa:50:12:af:bf:c1:bc:
                    9d:f3:03:7a:b0:52:ce:31:1b:76:8b:21:ef:ca:a9:
                    d8:71:af:ac:77:65:76:57:3c:6f:bc:ba:b5:13:71:
                    14:7f:c0:dd:44:eb:be:31:e9:0a:c2:30:3f:e4:e3:
                    12:17:73:90:0b:52:85:c5:1b:29:ce:22:7c:51:fb:
                    9b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4E:47:BD:C9:9C:0A:48:1F:0B:3F:7D:23:75:79:A6:3E:AC:A9:E4
            X509v3 Authority Key Identifier:
                keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c1:00:a0:82:b3:dc:12:fe:1d:2e:99:cf:c9:39:a0:44:cd:
         b5:f2:99:2e:f6:a2:e3:82:9c:c4:d3:0a:f3:e5:84:b2:90:bf:
         3d:06:bc:c7:8c:3b:07:bf:ba:a8:9b:f9:4a:cc:25:d3:50:b1:
         45:80:52:9c:f5:74:bc:24:5b:74:0c:74:b0:e6:19:7e:d5:da:
         37:7f:5f:90:8d:7a:5c:b9:08:5c:c8:1d:35:f9:e2:bf:db:90:
         5e:07:5f:b6:cd:62:fc:8a:5e:a6:63:04:8f:11:80:b5:8e:64:
         5f:61:04:f5:75:e6:85:1e:17:17:10:63:d8:7f:e2:44:05:56:
         4c:a3:84:42:b2:4c:61:b8:12:61:7e:4c:90:1a:28:50:f2:cd:
         8c:59:fe:31:fd:64:39:21:a3:97:9b:68:7f:91:54:da:ab:19:
         8b:1f:dd:77:c1:86:85:03:5c:ca:cb:00:ae:f4:bd:5c:ad:57:
         9c:03:b3:bd:7b:31:2f:57:69:d1:44:df:ac:a4:ad:cb:58:ba:
         43:e6:f7:cb:c6:a9:77:c2:89:00:2e:ce:86:27:a0:89:b8:0d:
         8d:88:e8:3f:c4:a7:3c:21:78:6d:30:25:50:5d:ee:09:34:40:
         e1:8b:b1:75:48:c5:b6:85:82:16:88:ba:cc:b9:a4:33:84:1d:
         1a:03:99:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:24:29 2025 by rpki-client