This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
File:                     yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft (raw, json)
Hash identifier:          mcCM/wbS3sY7YfhCq68cQdg3CtIT8eXDni6m4+24xSA=
Subject key identifier:   B1:52:57:26:A9:EE:65:5B:6D:78:0C:12:9E:96:F5:66:BE:19:0B:00
Authority key identifier: C8:47:58:05:3A:0C:4C:6D:5E:00:3F:3C:86:9A:89:E4:F2:A9:E1:77
Certificate issuer:       /CN=c84758053a0c4c6d5e003f3c869a89e4f2a9e177
Certificate serial:       019B2AAEA2CAF39A59134478BBCA6F970D74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
Manifest number:          0E0B
Signing time:             Wed 17 Dec 2025 05:00:46 +0000
Manifest this update:     Wed 17 Dec 2025 05:00:46 +0000
Manifest next update:     Thu 18 Dec 2025 05:00:46 +0000
Files and hashes:         1: _Z27vdbVNx1AkVs4_tUBUqOLYnE.roa (hash: GcXnOCS0CtBJVhbx+3s+RdmGrB9WpH4rUku+ZZjo1A8=)
                          2: yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl (hash: NPqT1GD+B3epZrOzBFpOC4x66UqUK1uc+ak2VmQatgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 05:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2a:ae:a2:ca:f3:9a:59:13:44:78:bb:ca:6f:97:0d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84758053a0c4c6d5e003f3c869a89e4f2a9e177
        Validity
            Not Before: Dec 17 05:00:46 2025 GMT
            Not After : Dec 18 05:00:46 2025 GMT
        Subject: CN=b1525726a9ee655b6d780c129e96f566be190b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f2:19:be:1d:d9:36:0f:b9:95:fe:4b:c1:10:
                    de:56:4f:e7:16:55:7c:30:4d:0b:b6:52:6e:6e:12:
                    4b:2e:1d:86:60:79:d5:68:bd:93:e5:94:f1:4d:f4:
                    eb:60:be:15:bb:2b:6b:7f:46:29:55:ea:1c:9d:e0:
                    aa:fa:4e:64:ef:c6:2b:ff:b3:b4:74:8e:d1:0c:a1:
                    ff:dd:38:8d:47:02:22:ef:6b:50:cb:c6:71:50:89:
                    46:b5:7e:5c:cb:a7:71:85:b6:15:86:93:fb:aa:7e:
                    53:d0:a1:d3:3d:8c:9a:91:28:08:bb:4a:45:92:b0:
                    35:6c:46:2e:db:75:1c:ea:78:0c:59:a5:2c:ac:db:
                    db:f1:f8:d7:04:4d:c2:1c:52:5c:11:d1:ed:c0:b1:
                    ff:49:a5:75:73:bb:b5:dd:a1:70:bc:20:a1:6a:cb:
                    63:0d:a7:84:46:07:cd:3d:23:5b:9e:c7:35:e8:3f:
                    66:2f:c1:63:36:87:44:34:84:74:ab:03:cf:8d:23:
                    12:cc:cd:24:21:1f:95:9d:1b:f7:f5:b4:72:d8:3c:
                    01:45:dc:a6:6c:eb:71:c1:3b:ff:4b:0c:28:7e:4e:
                    e0:c2:9e:ab:49:4d:23:fc:95:c5:67:56:02:5b:fd:
                    49:c3:ae:53:8d:d6:1b:07:34:0b:e6:d8:43:e2:83:
                    56:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:52:57:26:A9:EE:65:5B:6D:78:0C:12:9E:96:F5:66:BE:19:0B:00
            X509v3 Authority Key Identifier:
                keyid:C8:47:58:05:3A:0C:4C:6D:5E:00:3F:3C:86:9A:89:E4:F2:A9:E1:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:81:1f:29:b3:26:26:9a:3e:19:63:1e:2e:ce:f3:bd:af:60:
         7e:58:87:98:2a:ec:58:83:d9:bb:03:52:9b:94:6b:de:91:7d:
         30:20:a0:0b:d1:22:0c:41:44:86:ed:ca:96:c6:77:60:ed:43:
         8d:1f:3b:cf:55:ac:f5:f3:b5:cc:09:bd:89:1d:9e:e6:de:22:
         1d:c5:fa:17:99:af:8a:dd:1d:8e:99:89:b0:33:e0:ab:eb:8f:
         63:4e:bb:11:dc:a9:19:1d:25:7b:65:7f:b8:81:78:c3:e8:71:
         04:8d:09:24:9d:de:de:aa:1c:d8:39:a1:bc:62:5f:03:a8:7a:
         9d:d7:de:9f:8f:5d:b0:fa:ef:76:10:70:70:6f:2d:6f:18:b5:
         1b:e1:61:c5:43:b0:88:6d:7f:f7:46:52:09:e6:25:04:47:28:
         50:8c:92:d9:ee:a8:b8:03:cc:01:26:2c:f1:f5:70:8d:18:ba:
         7d:25:5e:07:81:66:b3:51:ad:1b:83:c1:05:8f:b6:0c:cb:ef:
         d2:7d:c1:ab:36:a5:cd:34:39:30:5f:db:8f:cc:54:e8:98:e3:
         f8:2d:97:69:cc:66:ca:d2:cf:fc:d4:13:42:2e:22:a0:ac:8f:
         93:b4:00:9e:78:39:05:dd:f7:6e:58:ef:66:52:4a:ae:b8:65:
         68:84:4e:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsqrqLK85pZE0R4u8pvlw10MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NDc1ODA1M2EwYzRjNmQ1ZTAwM2YzYzg2OWE4OWU0ZjJh
OWUxNzcwHhcNMjUxMjE3MDUwMDQ2WhcNMjUxMjE4MDUwMDQ2WjAzMTEwLwYDVQQD
EyhiMTUyNTcyNmE5ZWU2NTViNmQ3ODBjMTI5ZTk2ZjU2NmJlMTkwYjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPIZvh3ZNg+5lf5LwRDeVk/nFlV8
ME0LtlJubhJLLh2GYHnVaL2T5ZTxTfTrYL4Vuytrf0YpVeocneCq+k5k78Yr/7O0
dI7RDKH/3TiNRwIi72tQy8ZxUIlGtX5cy6dxhbYVhpP7qn5T0KHTPYyakSgIu0pF
krA1bEYu23Uc6ngMWaUsrNvb8fjXBE3CHFJcEdHtwLH/SaV1c7u13aFwvCChastj
DaeERgfNPSNbnsc16D9mL8FjNodENIR0qwPPjSMSzM0kIR+VnRv39bRy2DwBRdym
bOtxwTv/Swwofk7gwp6rSU0j/JXFZ1YCW/1Jw65TjdYbBzQL5thD4oNWPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFSVyap7mVbbXgMEp6W9Wa+GQsAMB8GA1UdIwQY
MBaAFMhHWAU6DExtXgA/PIaaieTyqeF3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUVkWUJUb01URzFlQUQ4OGhwcUo1UEtwNFhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMDhkOWMtNWNhOS00ZTUzLTk3ZTMt
OWFmMmNiNWRjY2YzLzEveUVkWUJUb01URzFlQUQ4OGhwcUo1UEtwNFhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mMDhkOWMtNWNhOS00ZTUzLTk3ZTMtOWFmMmNiNWRjY2Yz
LzEveUVkWUJUb01URzFlQUQ4OGhwcUo1UEtwNFhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYEfKbMm
Jpo+GWMeLs7zva9gfliHmCrsWIPZuwNSm5Rr3pF9MCCgC9EiDEFEhu3KlsZ3YO1D
jR87z1Ws9fO1zAm9iR2e5t4iHcX6F5mvit0djpmJsDPgq+uPY067EdypGR0le2V/
uIF4w+hxBI0JJJ3e3qoc2DmhvGJfA6h6ndfen49dsPrvdhBwcG8tbxi1G+FhxUOw
iG1/90ZSCeYlBEcoUIyS2e6ouAPMASYs8fVwjRi6fSVeB4Fms1GtG4PBBY+2DMvv
0n3BqzalzTQ5MF/bj8xU6Jjj+C2XacxmytLP/NQTQi4ioKyPk7QAnng5Bd33bljv
ZlJKrrhlaIROtw==
-----END CERTIFICATE-----
Generated at Wed Dec 17 11:20:08 2025 by rpki-client