This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft
File:                     ywyjSKyJHDNtjHlFpb1bMyXrXws.mft (raw, json)
Hash identifier:          Uk/gfyIDJV/rpJXm7JcNdwMbxfteAg4yOtLjT6FtjtQ=
Subject key identifier:   E5:2F:05:30:91:7C:2E:5F:83:B0:C6:8A:B1:44:29:29:5E:01:84:0D
Authority key identifier: CB:0C:A3:48:AC:89:1C:33:6D:8C:79:45:A5:BD:5B:33:25:EB:5F:0B
Certificate issuer:       /CN=cb0ca348ac891c336d8c7945a5bd5b3325eb5f0b
Certificate serial:       019B3C7DBD909D79BC43DF6211DB85DDC0E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft
Manifest number:          0656
Signing time:             Sat 20 Dec 2025 16:00:31 +0000
Manifest this update:     Sat 20 Dec 2025 16:00:31 +0000
Manifest next update:     Sun 21 Dec 2025 16:00:31 +0000
Files and hashes:         1: 1-qEn14mRo-yGu8c_O2fP11Gqe8s.roa (hash: yW4zCmNuVTNX7nPMpOCV5q/ZpdegrJzqa57jVtQ1VMU=)
                          2: bZcXlnVt9TXCSOXEW_tbK9JFnDA.roa (hash: QoLawtosEpM+IFmVYlosGNqhPmD6XmihZ27v/0SHdH8=)
                          3: r0S9lUBCzvxdPzLKHfqohWINZ2c.roa (hash: ZqEGzoMzxDYZJnku4SCWLMdSJqeUHrxwhhK2Ayso5N4=)
                          4: ywyjSKyJHDNtjHlFpb1bMyXrXws.crl (hash: dBpELk6UeUcXUeDV4g2t840U9b8b96wTx/lmCO6NtWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:7d:bd:90:9d:79:bc:43:df:62:11:db:85:dd:c0:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb0ca348ac891c336d8c7945a5bd5b3325eb5f0b
        Validity
            Not Before: Dec 20 16:00:31 2025 GMT
            Not After : Dec 21 16:00:31 2025 GMT
        Subject: CN=e52f0530917c2e5f83b0c68ab14429295e01840d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7e:8b:27:22:6a:d6:51:24:5d:12:a0:1d:35:
                    82:bb:64:26:d3:19:33:83:65:e6:cc:fe:c4:90:b0:
                    60:5c:75:a8:d5:e6:08:3c:68:93:a8:3c:b5:fa:a7:
                    f4:d0:8b:e7:ee:1d:91:3b:68:86:c0:b8:11:17:f8:
                    36:e9:59:72:81:3e:30:f2:58:1a:67:1f:d9:92:05:
                    19:57:c4:f3:93:90:cc:ac:20:6e:c7:9d:f6:8a:90:
                    06:91:a9:3e:05:10:46:9a:bb:e7:32:42:af:02:ed:
                    7b:32:22:80:bd:54:c1:c5:7f:77:11:e0:ed:1d:54:
                    62:17:64:98:16:74:08:68:1d:77:80:47:3a:d7:da:
                    31:fa:c2:f3:fa:0c:4f:90:43:66:28:b2:f6:d9:83:
                    90:03:6d:c7:84:82:58:04:6f:3e:0b:e0:fa:ff:0d:
                    3b:ea:a9:b2:2a:e7:ec:de:14:fd:a2:d8:42:58:47:
                    b8:87:77:97:dc:7e:98:9c:90:f4:10:6a:3f:e0:60:
                    4f:3c:d0:f0:5f:4c:b8:7b:ec:d9:9c:f0:d1:1a:3c:
                    b6:44:54:ea:c2:6e:1e:a7:a8:82:c5:76:5e:ab:34:
                    ae:98:08:6f:c8:b0:bd:4e:43:e5:8c:37:d0:e2:58:
                    be:db:21:8e:7f:f7:21:bf:1d:12:d0:a8:1c:bd:4c:
                    5e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2F:05:30:91:7C:2E:5F:83:B0:C6:8A:B1:44:29:29:5E:01:84:0D
            X509v3 Authority Key Identifier:
                keyid:CB:0C:A3:48:AC:89:1C:33:6D:8C:79:45:A5:BD:5B:33:25:EB:5F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:e6:47:5b:d5:68:d9:0b:6b:d2:f4:be:af:05:c5:61:1c:10:
         fe:a4:6c:d2:f7:72:b6:a3:d8:13:d9:28:d4:66:35:f9:98:29:
         d6:4e:d4:d7:d6:80:0c:cc:65:29:e9:31:38:64:e8:88:97:c8:
         96:5d:66:c8:ab:23:0e:7f:1f:f8:b3:29:37:e3:82:32:0e:c1:
         0d:40:8a:91:bb:53:e8:00:fb:5c:d3:b2:d4:ea:8c:f7:b0:23:
         5b:6b:37:eb:3e:f6:82:32:89:31:b4:34:c0:85:05:e1:62:15:
         be:b3:21:b8:31:c2:f4:be:4e:76:de:77:0a:ac:b4:aa:0c:c3:
         c7:25:7b:61:b6:82:0c:80:aa:32:29:49:af:d3:d0:04:80:b5:
         55:13:f3:03:1a:af:80:8c:47:1e:5b:92:8b:04:7a:bf:09:7c:
         8d:4b:7e:96:66:b9:af:61:32:bb:ec:80:5a:41:b3:d1:e4:2e:
         3e:78:a5:b6:5e:4c:92:29:d3:56:04:7b:fd:40:92:76:33:68:
         53:2f:01:fd:ca:2f:74:13:39:7e:88:2d:8a:8c:00:0d:0c:e5:
         4f:b7:05:5b:3d:d8:7c:c5:9d:74:f5:28:59:ca:73:51:1c:f1:
         30:d6:f8:8e:97:69:ca:f8:37:cd:62:27:cc:3b:75:35:f2:54:
         87:20:70:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:07:27 2025 by rpki-client