This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
File:                     _JYxHyB-MOBOXtGJYLMfs7pn2cw.mft (raw, json)
Hash identifier:          3H3DIi6ZRI47ZrVX/330f0hOA8F5Rv6CfhqCXQYavis=
Subject key identifier:   B3:7A:19:93:44:31:EC:A0:DE:0A:8B:D6:0A:32:CF:A2:BD:D8:14:89
Authority key identifier: FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
Certificate issuer:       /CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Certificate serial:       019AF240388ECFED4B159EDA85317240FC76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 06:01:26 +0000
Manifest this update:     Sat 06 Dec 2025 06:01:26 +0000
Manifest next update:     Sun 07 Dec 2025 06:01:26 +0000
Files and hashes:         1: AUcUK79-20dcWVzVbs60qA_79k0.roa (hash: FTerUGKVvthiTr4P9HvWIOzRwtpT4BbcBUUyIajjaKI=)
                          2: NLujiyLDNINg7_ALKuGpNWHf90o.roa (hash: S6u8CLwoGP6KKvaV/764lqLnv660M41bJlIaV+CiIbg=)
                          3: _JYxHyB-MOBOXtGJYLMfs7pn2cw.crl (hash: vyNVO92lt8c3lp51tyGweXJGE2tA+G58O5yTKlVnGAU=)
                          4: nQ49DO6jLERCGih3b5vaO6Deyv4.roa (hash: ckCboVu+SkUbYcpUmTQnzPt52sUcRNCO41XKBdBSHpY=)
                          5: xG2m4O3Ec8nKtJOjwCFJQqNJGtM.roa (hash: craC+wIX6RgDFVXZJLTuVHpltgHDojNuxm0azD0e50I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:40:38:8e:cf:ed:4b:15:9e:da:85:31:72:40:fc:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
        Validity
            Not Before: Dec  6 06:01:26 2025 GMT
            Not After : Dec  7 06:01:26 2025 GMT
        Subject: CN=b37a19934431eca0de0a8bd60a32cfa2bdd81489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:71:c2:61:66:73:c4:1c:b9:97:72:16:1e:7a:
                    c8:07:94:f7:de:03:22:49:b1:8d:e6:f3:e9:a3:28:
                    10:92:9c:3c:25:60:15:50:fb:50:3d:77:02:07:3e:
                    3b:de:71:d3:87:5c:c7:91:46:e0:88:29:a9:89:d2:
                    fd:e6:0a:d6:b6:a8:ac:5f:b4:47:c7:e1:88:32:76:
                    1d:57:35:c7:e3:df:e2:73:90:6f:d8:3b:0e:fe:28:
                    19:f0:4f:2b:d3:4d:e5:b0:34:a0:0f:60:97:72:76:
                    1e:e5:f5:31:ff:05:2c:e4:1a:8c:ba:ba:87:b6:ca:
                    2b:7d:51:8b:08:1c:90:0e:eb:e7:2a:05:19:57:9e:
                    d5:1d:fa:79:b3:88:7e:79:30:f0:fa:31:b7:b3:e8:
                    b3:8b:26:83:4b:6a:6b:d8:e5:cb:15:48:d1:fb:8f:
                    03:32:67:29:72:16:69:62:d9:7e:98:d4:3f:7c:0d:
                    8e:47:78:d6:17:b3:74:02:b3:4f:35:4d:3b:05:ac:
                    ed:21:2b:df:0e:73:58:fb:ef:f6:fd:5a:cf:f5:c0:
                    c2:1d:f1:05:a7:2a:b7:19:f8:0f:1f:8a:fb:07:23:
                    a5:d9:0d:c0:b9:0c:dc:c4:23:fa:a3:e2:83:6e:fd:
                    b2:bc:c5:87:8c:d5:c6:e7:53:f0:c7:c8:a1:03:f9:
                    92:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7A:19:93:44:31:EC:A0:DE:0A:8B:D6:0A:32:CF:A2:BD:D8:14:89
            X509v3 Authority Key Identifier:
                keyid:FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a3:78:44:8a:5b:fc:dc:d5:41:ce:39:6d:8a:62:5b:b5:6a:
         92:48:b0:84:b6:3f:2b:61:7f:40:c9:44:0d:3f:61:c6:92:6c:
         64:20:60:bb:e2:9d:9f:c8:2e:32:94:13:69:aa:a7:c0:09:91:
         13:f3:85:6d:d3:80:d3:3d:4f:45:11:c5:6e:c2:05:a1:ff:7d:
         97:f5:c3:8c:9a:df:c0:fc:ce:78:3b:22:73:63:9f:aa:62:6a:
         df:2a:f0:3a:bb:6e:93:f9:ff:d4:21:7d:f2:3d:82:22:58:76:
         0c:ea:ac:80:d3:23:64:bd:22:6b:8d:36:6e:84:e9:39:74:a7:
         4c:44:fc:e3:1b:86:3b:a9:8d:60:93:08:bd:e8:99:82:db:1d:
         37:76:b9:6d:e7:b3:b7:42:73:3b:37:81:ed:c5:cc:43:83:cf:
         21:fb:a4:bf:5f:0d:86:72:4d:60:1e:df:3e:04:b3:e5:13:ac:
         ca:55:b1:6b:53:24:a3:ed:39:9c:fb:85:f1:da:22:df:ff:13:
         ca:a0:a5:5b:be:93:71:13:55:5c:f4:40:5b:fc:cd:6e:7d:6b:
         09:40:ce:94:e5:a4:8a:e1:d2:16:79:02:c4:9f:ee:ac:cb:1a:
         4e:4c:f6:9a:f5:c4:b3:9c:f0:99:56:c6:5f:2a:1c:c3:91:c1:
         49:e4:cc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:49:03 2025 by rpki-client