This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
File:                     YtA4iKQF5huH0XBvkzs2aob7QpU.mft (raw, json)
Hash identifier:          Q9dXLOMF3pOiLRSZQhIMafVvug1jyDEQIAESV20b9Wk=
Subject key identifier:   DF:A0:B1:0E:5A:5C:BB:CD:5B:D1:28:17:47:EE:90:92:FA:73:62:50
Authority key identifier: 62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
Certificate issuer:       /CN=62d03888a405e61b87d1706f933b366a86fb4295
Certificate serial:       019B372093F531477040516017DF6FB74922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
Manifest number:          076E
Signing time:             Fri 19 Dec 2025 15:00:40 +0000
Manifest this update:     Fri 19 Dec 2025 15:00:40 +0000
Manifest next update:     Sat 20 Dec 2025 15:00:40 +0000
Files and hashes:         1: HQp_yUg92FF87DlWPtvQf8oIbtU.roa (hash: WdzVBva5nz5iKOf23yLPoQ+M9QxUiJxb8xYxHWes+RI=)
                          2: YtA4iKQF5huH0XBvkzs2aob7QpU.crl (hash: eE1MddYBQBiL/Q7viJkKoH8Nr4VZp0r0gqIByvWVL0w=)
                          3: zCw-9AZjP26xMi8ifkh6cllXO9s.roa (hash: D1nIK1UZwod09XQftoKXhB7rZyXrZ+n2IZxVQbyl2wc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 15:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:20:93:f5:31:47:70:40:51:60:17:df:6f:b7:49:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62d03888a405e61b87d1706f933b366a86fb4295
        Validity
            Not Before: Dec 19 15:00:40 2025 GMT
            Not After : Dec 20 15:00:40 2025 GMT
        Subject: CN=dfa0b10e5a5cbbcd5bd1281747ee9092fa736250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:85:dc:cd:75:dc:61:d2:bd:1a:7f:ef:d8:e9:
                    9b:8f:99:12:d1:f0:b9:ac:c3:19:1a:10:2c:62:b3:
                    db:2a:2d:b0:69:55:24:cd:48:e3:e3:e4:58:a8:1f:
                    1f:bb:e6:60:6b:d7:26:11:09:00:6f:52:7b:48:d1:
                    c4:bf:62:dd:5c:52:77:a3:1f:cc:43:90:aa:54:ae:
                    ef:6a:45:9a:59:98:d1:a9:2e:ee:d5:6b:a5:74:f8:
                    06:fc:3e:59:1f:93:86:18:38:39:77:a9:1e:49:74:
                    7a:58:8c:ba:f2:a4:0b:80:55:45:14:f4:3c:d8:97:
                    91:a6:1d:d9:87:d5:f8:af:bf:bb:88:ba:50:3d:3d:
                    02:15:79:ef:a1:8c:0b:39:9d:ab:95:3a:d9:e7:4e:
                    86:e0:b0:6e:92:8c:8e:9a:ca:b6:20:fa:dc:ae:e7:
                    80:e4:52:82:22:a7:e0:35:8f:31:c2:f9:03:b1:32:
                    a8:a1:b8:b6:3b:c7:f9:c7:5a:35:17:2f:0d:11:84:
                    df:bd:0c:f6:80:d5:58:0a:4f:f5:19:5f:4a:07:f1:
                    fd:60:4b:b6:97:ee:ad:dc:d0:58:1b:0b:7a:1f:85:
                    a6:46:1c:0b:99:25:db:29:75:9b:e9:18:24:82:8f:
                    e3:78:b6:72:b2:20:06:49:b9:75:95:40:e5:e0:ae:
                    c0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A0:B1:0E:5A:5C:BB:CD:5B:D1:28:17:47:EE:90:92:FA:73:62:50
            X509v3 Authority Key Identifier:
                keyid:62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:06:4b:79:56:63:d8:12:60:5c:35:cf:e5:43:3c:cf:0b:a7:
         d0:5c:29:f1:9a:7a:c9:22:cf:b5:da:3a:b2:41:1d:27:bc:b0:
         ff:a0:98:37:78:92:1d:f3:17:ef:20:81:6e:c4:7b:9d:07:ec:
         e5:da:15:2c:40:71:ae:79:8e:70:b4:55:6b:83:3f:4e:70:99:
         c3:06:73:d4:fd:e3:4d:f0:5b:1d:ad:a6:6a:86:c6:d1:30:0b:
         5b:ba:8d:b2:16:04:e6:1e:3a:13:f4:81:26:c2:b4:26:bf:a8:
         69:e7:0e:e7:98:d8:d0:8b:00:8f:b1:98:ac:73:ae:dc:7b:87:
         70:bd:48:ba:9b:ce:95:5d:61:7a:ad:5a:11:b3:9c:32:ce:5c:
         7d:a2:12:5c:65:f3:ab:f1:64:cc:0c:a3:69:86:61:7f:b0:34:
         5b:9a:e8:a4:f6:7d:9b:fc:4e:2d:82:c4:16:b8:90:a3:55:7f:
         23:83:b7:df:d8:6b:db:1b:bc:4e:58:3e:b5:f5:63:1d:44:db:
         7c:3a:40:51:bf:d5:a4:e3:b4:b9:b3:60:0a:29:22:5b:bb:08:
         fa:12:2b:af:70:0f:05:27:c7:89:2c:9e:7a:b4:7f:ff:cb:67:
         36:2b:54:54:c7:99:39:84:d1:9c:4c:52:60:0f:e1:95:42:f3:
         41:5b:84:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:01:15 2025 by rpki-client