This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
File:                     jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft (raw, json)
Hash identifier:          hxFTmqGp6GTDylPfREwnLXbIoyrKEk8PZJxO1ONJzz0=
Subject key identifier:   DD:F4:1B:55:CC:90:49:5D:34:3E:91:29:E8:6D:9C:35:87:E7:15:41
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Certificate issuer:       /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial:       019AF4D28C1A0C481412019DAC872E3F18EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
Manifest number:          104B
Signing time:             Sat 06 Dec 2025 18:00:30 +0000
Manifest this update:     Sat 06 Dec 2025 18:00:30 +0000
Manifest next update:     Sun 07 Dec 2025 18:00:30 +0000
Files and hashes:         1: 0JcOAjVYzD7ATTRTY6zM_FW7ibk.roa (hash: ae6zh695aCdxOBAb92vW9Mqs/ewqcDH7wayEClXo5lU=)
                          2: DMHspTa-m7YS1bn5e9JmcIJBzcE.roa (hash: Tguv/ZlkRRgsKXeIni29cWwqnVhv5X7wO7u2hzkn37U=)
                          3: ZlUjZQcl9nR0SUVxsgzMhtk30HU.roa (hash: RueFoN4i6RiouAbfwEgZPqUPq4WVTXhPv6TjG8c7n5M=)
                          4: jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl (hash: i8mSNiVS+Kv6rxhqqrSYfc1HYiaWXQXSk3Et2iJNomg=)
                          5: ySGM40xeAZyu32ERIMnkJoio4hw.roa (hash: w5mMTd2fQSF1PurNOaDTdU1aGhD+Vitko+NZO/EWYYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 18:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:d2:8c:1a:0c:48:14:12:01:9d:ac:87:2e:3f:18:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
        Validity
            Not Before: Dec  6 18:00:30 2025 GMT
            Not After : Dec  7 18:00:30 2025 GMT
        Subject: CN=ddf41b55cc90495d343e9129e86d9c3587e71541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:60:c6:52:be:b0:ae:fb:d3:73:83:ce:67:88:
                    28:e2:e9:79:7a:9c:06:08:d5:6a:3f:c3:e3:fa:04:
                    50:e7:01:7c:f1:ff:f0:7e:cf:c6:ea:04:62:b2:9c:
                    14:c8:fd:ee:fe:8e:37:39:e9:aa:04:b3:31:69:d6:
                    d5:16:63:e6:16:00:b0:4d:ce:43:1e:3c:59:32:c8:
                    62:22:44:41:71:cc:31:f4:fb:5b:06:62:90:f2:f7:
                    f1:cb:b6:0e:89:e3:83:af:68:1c:f7:17:c9:8a:ff:
                    30:bd:83:fd:9c:ad:6e:9e:d6:1f:22:72:0c:96:38:
                    27:26:97:4c:b8:d3:94:40:ef:7c:ca:d5:5a:05:54:
                    6c:8d:d9:39:89:b4:39:61:7c:04:53:80:78:20:ae:
                    c2:c5:52:12:cb:a9:80:ae:5d:ec:1b:42:ac:fa:7d:
                    e0:79:30:2d:23:10:2c:8d:2b:89:c5:8a:13:13:91:
                    cb:f7:b8:3e:bd:dd:d5:30:76:f4:63:e3:22:16:f7:
                    56:61:f9:d6:f2:fb:7c:30:29:e4:33:32:01:db:67:
                    04:af:94:65:32:f3:6f:8b:15:73:10:9a:34:e1:ec:
                    c6:a2:c0:f6:bd:e5:22:a4:b2:1b:25:4e:ba:87:28:
                    3e:35:6e:06:34:0c:4d:57:13:af:33:4c:84:1f:ba:
                    a0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F4:1B:55:CC:90:49:5D:34:3E:91:29:E8:6D:9C:35:87:E7:15:41
            X509v3 Authority Key Identifier:
                keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:c2:ba:c1:35:b5:91:b9:21:76:3f:cf:8b:19:12:fe:ad:75:
         97:cb:05:20:fe:ae:96:f6:97:7c:51:55:c1:46:eb:07:9b:0f:
         08:e2:54:1a:48:7b:fd:dd:b2:43:92:95:fe:eb:dc:be:aa:7d:
         98:14:bb:54:87:a6:19:c2:f6:9b:39:0a:ed:27:df:d9:a7:09:
         d9:df:98:9f:03:36:f2:78:b1:8c:19:53:e9:5c:1e:39:45:11:
         4b:49:98:e7:47:58:9e:c2:2e:1d:22:5c:b3:24:93:3e:b7:1a:
         99:6b:1d:24:33:2a:97:23:05:c8:b3:97:ef:d9:a6:4c:33:75:
         78:8d:e6:e1:2e:fa:d8:ac:08:65:58:1d:45:c2:ca:9a:43:d6:
         68:12:31:26:22:1d:9e:16:92:e5:18:d3:aa:00:40:50:cb:f5:
         ca:8e:c3:25:cf:c2:4d:88:32:b0:08:40:57:d9:41:ff:f9:3b:
         44:75:be:02:75:64:44:e8:df:ea:a3:7d:d3:74:b9:69:d7:c6:
         4f:6d:2d:60:40:da:ea:cf:ed:1d:08:81:0a:1f:33:bd:e5:50:
         61:94:19:f6:95:29:96:6c:e0:9a:2d:62:41:13:2a:5e:87:e9:
         ae:dd:ad:1e:35:4c:85:99:ed:92:3a:5b:d1:1d:bb:7c:e6:a9:
         72:30:54:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:19:12 2025 by rpki-client