This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
File:                     sjby5CUi6Y03a-OKieXdUau_eZY.mft (raw, json)
Hash identifier:          FyByENEOSV6x4DLdNnZmtMHCxqndJu93p+Knh67nJ54=
Subject key identifier:   EE:FE:98:20:02:F9:75:B4:DA:3A:F8:25:01:88:54:F2:8B:C4:A6:80
Authority key identifier: B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
Certificate issuer:       /CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Certificate serial:       019AF3F7D57312415EC8DFEB395DC1ADC8F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
Manifest number:          1765
Signing time:             Sat 06 Dec 2025 14:01:36 +0000
Manifest this update:     Sat 06 Dec 2025 14:01:36 +0000
Manifest next update:     Sun 07 Dec 2025 14:01:36 +0000
Files and hashes:         1: 6iKkuLhTnDFWaq3-3shTrwGrJ8g.roa (hash: ss9t8FqhS0xrNtCTKl7Xpo6Vl1ClWOF8J3Gh9ZaVFpU=)
                          2: I-Uqa1zPH3U2lg8ZFnzuOmPnTWg.roa (hash: u740YP79Lg/XA3U3RRNbSWSMGjpptyvItjaGSDwTCrE=)
                          3: sjby5CUi6Y03a-OKieXdUau_eZY.crl (hash: 66Na3npDEpAobc9j906mJaY38ylSx800+d5r7HWejHc=)
                          4: v0rFapiuVgAPd3myx6BzGGJPu3Q.roa (hash: xPkjdAicyKc46/gVu1t411DskLBNUbMsE7SCd3XdA1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f7:d5:73:12:41:5e:c8:df:eb:39:5d:c1:ad:c8:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b236f2e42522e98d376be38a89e5dd51abbf7996
        Validity
            Not Before: Dec  6 14:01:36 2025 GMT
            Not After : Dec  7 14:01:36 2025 GMT
        Subject: CN=eefe982002f975b4da3af825018854f28bc4a680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e4:e2:06:79:2d:6f:03:4b:99:b4:2b:4c:5f:
                    83:e5:b0:0e:66:97:a1:e4:e4:4f:cb:72:37:83:2d:
                    7e:7a:fb:f8:38:21:95:ea:c7:cb:18:92:87:0d:06:
                    95:bc:ea:ce:39:0a:3d:79:51:5b:fa:a1:f7:e8:af:
                    04:00:cd:d7:97:67:9e:e5:2d:f6:b0:5c:ea:cd:a7:
                    34:be:bc:9e:aa:2c:f7:18:ad:6f:ff:b7:31:51:e2:
                    b9:43:71:fa:d9:6f:07:6d:f0:7b:ca:6c:f6:fe:2f:
                    09:0f:ba:8b:fc:f4:62:a8:d9:9f:26:1e:3b:6c:ee:
                    e9:fd:f5:dc:ea:2f:fb:cf:b5:12:38:12:23:a7:76:
                    c6:c5:9b:81:e7:cd:aa:91:ac:08:84:1c:5a:57:1b:
                    f7:be:7e:3a:6a:10:c1:c1:e1:dc:b7:47:d9:72:af:
                    f8:a2:93:37:cb:1e:5b:63:65:4c:f0:b1:51:4d:5f:
                    10:fa:65:79:5e:04:82:6f:8d:0c:9e:87:d6:68:0a:
                    ba:1e:1b:18:b0:c0:34:dc:41:4b:8c:31:d8:79:2b:
                    b0:72:78:5e:7b:e3:33:f7:97:50:0c:b6:0f:eb:ed:
                    5f:7d:db:05:91:ac:02:9c:12:8d:f4:44:61:26:f4:
                    96:fd:cc:29:cb:5b:b0:35:da:16:f6:fb:ec:59:9d:
                    73:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FE:98:20:02:F9:75:B4:DA:3A:F8:25:01:88:54:F2:8B:C4:A6:80
            X509v3 Authority Key Identifier:
                keyid:B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:b3:37:ee:e0:e3:69:e1:a2:c5:8f:e6:86:f2:80:0c:2a:35:
         85:69:41:1a:46:b9:b0:4a:8d:b2:f7:05:a7:e0:2a:d6:63:79:
         45:04:a9:42:1f:80:f2:45:66:49:70:0f:9d:d7:a4:9e:d5:de:
         85:d5:8a:2a:4e:df:84:91:da:15:e2:ea:ad:95:40:02:9c:6b:
         18:a5:4c:84:bb:6b:dd:b8:22:a2:94:96:ca:1f:70:3b:b3:2a:
         f6:0f:4f:1e:0c:4c:8a:02:12:f9:84:88:75:60:db:74:57:36:
         64:20:14:e3:39:71:1e:ea:46:a3:ec:ab:3f:77:b8:13:71:5a:
         73:66:94:ad:bf:17:37:5b:41:6f:0b:e4:f7:f0:57:8f:db:6e:
         91:91:6d:0d:5b:3c:6a:0f:6e:9c:d5:4b:22:31:46:90:3a:c8:
         ab:01:58:cc:46:5a:b1:26:c8:59:58:95:b3:3f:e8:02:1f:d4:
         42:bb:20:84:d6:c2:6b:9b:8a:b1:d8:d1:2d:86:a3:1d:83:d4:
         28:ea:91:4a:b8:14:96:bb:21:7c:6f:0b:45:70:7c:71:3b:37:
         71:29:ce:28:e3:b9:42:76:5a:3c:88:0a:2f:f3:6c:e5:51:8a:
         a2:40:45:27:c8:da:d5:a9:84:06:71:d8:97:a6:42:dd:4e:bb:
         b6:15:30:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:44:34 2025 by rpki-client