This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
File:                     TJETJOhpvEyl7IutDT3f9oVEGXk.mft (raw, json)
Hash identifier:          TUYX8l0DGdSs6Eu3EN+hCC1zvF5gqw3BHFtdsXgM3NU=
Subject key identifier:   BD:0B:67:B7:DD:12:E2:69:F4:2F:B1:33:D0:19:F4:FA:A8:99:51:46
Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Certificate issuer:       /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Certificate serial:       019AF46554313424BCE8DF0248DE2F02E380
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
Manifest number:          1769
Signing time:             Sat 06 Dec 2025 16:01:12 +0000
Manifest this update:     Sat 06 Dec 2025 16:01:12 +0000
Manifest next update:     Sun 07 Dec 2025 16:01:12 +0000
Files and hashes:         1: 06AfR8ZbdQ5_MZMYhDQjdfTo_kA.roa (hash: EEGnzX0afqpfc3Kn5NnezY7IPw+uVu1JdUrzEk+iDpk=)
                          2: 1-g-A4hn_DsUBjrSOtmwbaV2sjfc.roa (hash: H/p8gImyoUDaEoDvhM9gHqspIznQXZjV/layX0BmypQ=)
                          3: 43zHI9RV_-UV0H8FudTqslXERT8.roa (hash: jjlOWoTue0eCIb3Fk8Ot7n6TxzmNBAQWzlFe/V95Bl4=)
                          4: NBksY7qoZYso21Vw3xYrZFLq5eE.roa (hash: uWalzSU+haa+ieD4qUwSSt1pReJEBtMSVsUZjZILj3c=)
                          5: TJETJOhpvEyl7IutDT3f9oVEGXk.crl (hash: IqeIWEJX0ql/+FQtNxx7vyBi2wHKo8wtSeBT+Z/iAMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:65:54:31:34:24:bc:e8:df:02:48:de:2f:02:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
        Validity
            Not Before: Dec  6 16:01:12 2025 GMT
            Not After : Dec  7 16:01:12 2025 GMT
        Subject: CN=bd0b67b7dd12e269f42fb133d019f4faa8995146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:5f:42:63:4a:0a:b2:fe:93:c5:0a:dd:24:
                    25:4a:95:25:d8:92:2b:f7:8c:ac:be:36:03:e4:6d:
                    09:18:e8:17:4b:26:cd:f7:37:4e:4e:51:48:17:26:
                    bd:99:1c:90:7e:c3:be:db:21:45:76:e4:89:2e:1c:
                    d0:29:ff:25:fc:7f:c4:8f:d7:e8:54:7e:9d:5d:b6:
                    8e:a9:85:09:a6:18:d7:c4:10:34:80:a6:b9:03:eb:
                    b7:2d:2b:7f:83:fb:57:be:59:9f:c1:ce:2d:8b:a0:
                    33:ad:37:c7:55:de:03:a3:d8:13:89:42:06:da:a1:
                    d7:b9:6e:b6:29:13:94:cc:01:65:c5:c7:1f:03:ec:
                    59:90:b6:17:62:01:ec:ad:11:75:68:23:1f:8e:66:
                    ed:ab:08:89:f0:d9:c2:93:a2:81:7a:01:21:4e:ab:
                    b2:9b:cb:80:1b:98:84:c9:0d:36:3e:c0:11:a2:80:
                    90:26:f2:01:53:bc:5a:d6:71:f8:3d:28:1c:40:72:
                    96:b3:c8:76:24:11:a6:86:f9:5c:09:df:4a:f3:21:
                    fd:5d:f7:5a:de:f3:09:71:99:66:7f:bd:94:25:d9:
                    99:aa:e7:8a:e2:1d:e0:98:04:aa:1a:72:8b:16:1a:
                    a7:18:57:6d:7e:8b:d9:87:f2:b7:4a:6f:c8:9d:d9:
                    c6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0B:67:B7:DD:12:E2:69:F4:2F:B1:33:D0:19:F4:FA:A8:99:51:46
            X509v3 Authority Key Identifier:
                keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:cc:2b:04:5a:17:62:ed:b8:0a:08:65:e9:31:cd:45:c5:21:
         a4:6c:c0:51:4b:9b:75:dc:7e:e3:06:26:2d:84:7d:03:8b:5b:
         28:50:72:93:71:93:49:d3:b2:c6:20:36:63:c2:8f:05:6c:c9:
         17:8e:12:37:a8:89:de:2f:27:9d:31:af:c8:22:5b:da:18:22:
         43:b3:a6:48:1c:7a:94:91:bb:23:1e:c5:92:af:3b:c9:19:03:
         fc:5a:55:33:1c:1b:23:0b:a8:15:9c:5b:97:46:57:65:9a:0d:
         ec:c9:83:6c:e3:21:00:90:ae:8e:f2:b1:93:1c:1b:b0:35:99:
         66:8c:bc:7c:89:a3:27:f0:ee:b5:ff:61:74:38:0e:87:64:26:
         08:b3:6c:58:7c:99:f3:c4:0e:cb:28:ad:97:96:41:64:40:09:
         67:fd:d3:51:4e:13:ab:63:53:84:a2:55:80:49:1d:c4:0d:ba:
         01:9e:70:92:3d:29:a7:fb:ac:2d:dd:46:bb:d8:6c:3a:a6:65:
         ce:c2:b1:99:73:e1:64:6e:d6:ea:24:9b:37:4d:34:5a:ed:68:
         5a:d5:7d:ec:60:3c:a8:4c:06:8a:58:08:5b:ac:08:bb:40:78:
         86:5e:7e:58:db:cf:39:17:77:db:70:2e:4b:63:26:9c:ad:71:
         64:3d:50:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:56:41 2025 by rpki-client