This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File:                     YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier:          vtZlr/wz1e3ojtzisZnk1J7hHi7cTRmnXYFlbuf7Agc=
Subject key identifier:   58:0A:EA:D7:6F:C5:2B:B9:FB:4C:4E:98:4A:F5:B4:3B:31:6C:9D:69
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer:       /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial:       019B3CEC8919E03361B9C3B31613DB61EB75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number:          1651
Signing time:             Sat 20 Dec 2025 18:01:33 +0000
Manifest this update:     Sat 20 Dec 2025 18:01:33 +0000
Manifest next update:     Sun 21 Dec 2025 18:01:33 +0000
Files and hashes:         1: 1VADO_17q_s1vi4sUX8qvyaTKS8.roa (hash: mWvBqtGQDs1pA/HxiZ8AHfsR4oNjr1Yi2fZMV/jNGTc=)
                          2: QXkpqlLeH0lSYY0nblkHSzaO1Ew.roa (hash: IjUEjsO2mbnzmz7vjeL8ZIzctqSaR82F+Efqt7aXfAU=)
                          3: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: q1hrSO5juSs339Kbu+3VTnknVcUwMK9Q/SRKIUQPRZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:ec:89:19:e0:33:61:b9:c3:b3:16:13:db:61:eb:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
        Validity
            Not Before: Dec 20 18:01:33 2025 GMT
            Not After : Dec 21 18:01:33 2025 GMT
        Subject: CN=580aead76fc52bb9fb4c4e984af5b43b316c9d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0e:05:19:0a:c4:5a:e5:60:97:fc:6d:17:a6:
                    2d:aa:99:31:9f:6e:8c:a0:68:6f:c3:c0:db:74:90:
                    24:db:30:8a:2b:60:51:c3:2d:20:f9:10:49:17:24:
                    46:63:84:fb:c5:77:eb:7f:38:f0:37:b4:94:70:f6:
                    48:0c:43:83:e0:58:4a:53:98:75:1d:15:50:f3:d1:
                    20:e2:51:19:5e:06:5e:b1:c1:a7:82:7c:91:71:6c:
                    06:a9:80:d3:a8:77:46:a4:4d:20:61:09:ad:c1:b1:
                    fb:0d:fa:5b:8d:0b:cd:55:01:24:54:4e:3b:02:1f:
                    95:dd:d3:c8:6e:08:7e:ba:0f:97:0e:eb:2a:89:f0:
                    91:c3:cf:d5:e8:8f:33:6d:86:7b:4d:3f:90:4b:a5:
                    d2:ae:91:f7:61:8e:a5:12:70:92:e7:a9:15:b8:14:
                    ef:f7:cb:1f:81:5a:fd:ea:d1:1e:b2:80:d1:15:aa:
                    b3:d7:bf:98:88:df:58:05:b7:2c:f6:61:7e:9b:5e:
                    ef:4f:a9:86:4d:f4:dd:ed:43:b6:6b:c1:9f:7e:ee:
                    75:38:81:13:41:96:16:f0:82:17:a1:22:34:9e:d9:
                    f6:f6:b3:36:a2:e3:bd:07:24:5a:66:5d:df:6e:19:
                    c8:33:ec:b9:a2:3c:ec:22:1e:06:fc:1c:a5:5d:bd:
                    66:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0A:EA:D7:6F:C5:2B:B9:FB:4C:4E:98:4A:F5:B4:3B:31:6C:9D:69
            X509v3 Authority Key Identifier:
                keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:07:32:be:79:72:50:8f:a2:ce:c2:65:ff:8b:5d:63:13:56:
         f5:ee:f9:a7:28:34:9d:9d:05:7e:2d:48:f8:2c:de:e7:cd:e7:
         83:fc:1f:cf:98:c6:7f:e7:92:b3:c4:16:41:f5:92:2e:f9:9e:
         15:76:c8:96:ad:c5:44:1a:d4:30:79:5c:03:6f:71:95:75:61:
         d7:e0:39:44:f6:51:8f:01:a9:37:65:16:51:e5:bd:bd:ad:0d:
         d7:c2:97:e9:7e:cd:3f:fd:8b:2e:0f:e9:0e:e4:d1:71:75:7c:
         a3:8f:15:67:83:de:86:a4:a6:c6:c3:16:29:06:ef:1f:b9:af:
         b3:8f:71:85:6a:51:cc:c9:b8:0b:8e:90:88:17:0b:de:b1:9d:
         38:5e:4b:78:87:98:bb:44:5e:42:88:6c:98:fb:94:4c:e1:58:
         8a:5a:9d:d8:5b:40:b2:99:7c:7e:7a:ae:92:b8:e9:11:cc:cd:
         64:cb:37:dc:71:a4:be:ea:f6:c6:25:cb:6a:34:5d:1b:a8:d3:
         07:ab:bd:f4:1c:a8:4c:4f:2b:45:8a:bf:2b:bd:0d:23:ea:84:
         58:61:c7:b6:4e:6f:f9:15:a1:39:9a:df:19:1f:1b:c6:31:6b:
         3d:f5:c7:c1:4f:64:09:5b:83:3a:4f:6e:71:b3:23:e1:f6:90:
         36:99:a7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:19:27 2025 by rpki-client