This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File:                     jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier:          fX8hrmQpmwUhQmwGXXeImyC4YFsF2vSNfiyFS5PwddY=
Subject key identifier:   24:0F:ED:FE:A4:9B:DF:BC:96:FB:7A:60:89:D6:B4:18:D6:A8:A7:11
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer:       /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial:       019AF19BA05C3733AD55953AE05064C60A32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number:          0A22
Signing time:             Sat 06 Dec 2025 03:01:39 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:39 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:39 +0000
Files and hashes:         1: 7Ubso5FdbE6ZVPGCJdUs8ldLo7U.roa (hash: tWUhwGRkp2Wsw0AlBIbHfFNBO7ZZIwFLWe7kWJVHhhU=)
                          2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: P4MpV1yywOd2jKPicxzGrOW1fc09tu5GfidYtaqoZck=)
                          3: xCpTTt1wRZxUJy83ro30pVk-tGs.roa (hash: +pLDEi2uyNtFVpGTsTvFaAzRGQwyt1tEAP+HX+n7b3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:a0:5c:37:33:ad:55:95:3a:e0:50:64:c6:0a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
        Validity
            Not Before: Dec  6 03:01:39 2025 GMT
            Not After : Dec  7 03:01:39 2025 GMT
        Subject: CN=240fedfea49bdfbc96fb7a6089d6b418d6a8a711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:39:7c:2c:c0:b8:8b:32:4c:89:7c:6c:c4:e0:
                    99:69:e5:bc:42:97:2d:77:5f:da:03:e3:a8:95:3e:
                    78:0f:3a:4c:a3:73:f4:8e:89:d7:f1:79:bc:6c:2b:
                    77:4d:03:a5:84:8b:c5:1a:59:f3:f2:80:de:ad:d8:
                    41:20:03:9d:63:1a:2e:20:33:b8:33:e8:2d:e1:ec:
                    21:1f:c9:ed:64:a4:51:4f:39:d7:6b:a2:e8:27:aa:
                    d5:b8:a7:30:22:75:7e:ea:ae:f4:1e:0f:2b:11:bc:
                    1c:6d:fb:26:e1:20:81:12:51:95:49:51:92:4a:74:
                    f9:b4:07:14:25:57:30:ce:7c:f5:c8:64:aa:f6:38:
                    af:72:a2:14:ae:c5:1a:77:91:ca:25:24:16:f0:f2:
                    b7:4c:b1:3e:4a:5e:8d:4b:9e:56:19:e3:ee:1a:24:
                    c0:cf:2f:91:37:4f:b5:a1:15:51:a5:6c:1e:9f:bf:
                    67:de:cd:90:a8:8b:fb:7b:f2:de:5a:a0:db:a1:95:
                    c3:a2:58:43:dc:90:a2:eb:6a:b7:48:0d:8c:73:36:
                    ee:21:8f:0c:b9:cd:4e:9b:ae:b9:9d:32:aa:73:87:
                    ac:24:b5:7d:0f:cf:2a:d3:23:09:cb:df:30:b1:e9:
                    69:0d:4e:3d:79:72:18:6c:59:a3:26:ec:3b:dc:92:
                    6a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0F:ED:FE:A4:9B:DF:BC:96:FB:7A:60:89:D6:B4:18:D6:A8:A7:11
            X509v3 Authority Key Identifier:
                keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:35:3c:7d:19:e8:b8:e8:63:df:44:5e:3f:ed:c3:bc:ce:22:
         d1:a3:71:1b:f7:e4:49:14:60:90:30:bf:29:3f:49:c3:d7:0a:
         23:ad:e5:d8:94:70:2c:6e:1a:3a:09:89:0f:8c:a0:17:30:19:
         b8:69:42:71:d7:72:53:4b:8e:7b:d4:ba:55:60:65:38:96:a0:
         ba:1f:00:90:d4:65:29:95:7a:39:b9:16:c4:89:93:47:79:9a:
         7b:7a:0e:ca:41:4d:84:a8:42:00:e9:0a:33:09:0b:01:da:bc:
         32:24:20:86:52:88:cd:76:60:97:8e:05:eb:09:07:da:93:a5:
         a0:3f:af:4b:a5:ca:2c:f4:c7:38:62:f0:65:54:53:c9:f6:98:
         69:2e:8f:47:15:ec:a5:91:86:b6:c4:43:1a:8f:9a:a8:a5:6b:
         78:ab:f1:2b:92:13:43:9b:01:71:00:d5:ee:0c:ac:23:7a:0c:
         62:f7:ca:30:53:05:45:07:e2:39:4f:74:24:53:25:a3:1f:b3:
         c5:3c:01:4f:c1:40:48:61:51:c8:24:a8:ed:e3:91:f5:72:76:
         b3:61:eb:8e:e7:68:ef:79:6e:7a:58:0b:f4:86:5a:3d:72:f7:
         71:86:9b:95:9b:f6:2c:f9:a0:64:92:15:6d:d5:55:e5:b0:7e:
         24:c5:d2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:26:00 2025 by rpki-client