This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
File:                     JACyBgYxSFins_Kpdejp2RnsdTo.mft (raw, json)
Hash identifier:          edi9iedqBqi4c558YJNf4FdASqoun9eZRksD914VJIc=
Subject key identifier:   BC:83:D7:9C:A8:21:9E:1B:DF:C6:3B:F3:D7:E2:33:06:20:75:10:FF
Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
Certificate issuer:       /CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Certificate serial:       019AF31C62B4325D2554B457397E0132F405
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
Manifest number:          1764
Signing time:             Sat 06 Dec 2025 10:01:54 +0000
Manifest this update:     Sat 06 Dec 2025 10:01:54 +0000
Manifest next update:     Sun 07 Dec 2025 10:01:54 +0000
Files and hashes:         1: 1-GD2nsdz766uiKd1MTwnY1cAKLQ.roa (hash: NdaepvhGF4pwe1Tt+1kTP6lm7HfWQTHyJYxXLIGTqdM=)
                          2: 9WIEFZ14AFCy-NAdOjUVvXXdBBU.roa (hash: deLRvQCHRdLJ8rvzbnCEvy+iMK3pZ70ZA7pKsNUc6Aw=)
                          3: JACyBgYxSFins_Kpdejp2RnsdTo.crl (hash: ChOMMO/fDWBcOUhQuhHV36jEXvxYuJrjU9XK8j0wFZ0=)
                          4: p8vANLQB0ph98njf_Ufjt4LTAPo.roa (hash: hC+vbzkDFnGFdm53OE/ymTBfwEaU7iAHH3KtWlLJ+q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:62:b4:32:5d:25:54:b4:57:39:7e:01:32:f4:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a
        Validity
            Not Before: Dec  6 10:01:54 2025 GMT
            Not After : Dec  7 10:01:54 2025 GMT
        Subject: CN=bc83d79ca8219e1bdfc63bf3d7e23306207510ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e2:e2:77:26:f6:9e:3a:31:ce:9e:bc:06:0a:
                    61:1c:d4:a0:10:6f:21:42:8d:ef:80:a8:71:70:93:
                    d4:5f:47:6b:da:be:28:43:ce:39:3d:3d:62:bd:86:
                    2f:3b:a6:79:70:43:35:9e:72:7f:6f:3e:3f:a1:c4:
                    2b:fc:4e:12:d6:4b:5d:fd:df:5b:dd:50:f0:a4:14:
                    7e:3c:ee:4f:ed:dc:0a:a1:f2:da:60:31:b8:e1:27:
                    3a:60:a1:49:40:44:c1:37:79:fe:f8:11:9b:7b:08:
                    fc:c4:ef:ac:24:4b:9b:de:a4:d2:00:27:cf:48:68:
                    7b:5d:8f:8f:7c:60:4a:26:82:52:51:0b:6c:a4:42:
                    c0:fe:16:29:0f:11:5c:12:ff:bc:b8:f1:8d:2b:62:
                    95:d9:98:80:1a:67:93:93:6f:bf:49:7d:43:75:34:
                    91:db:2e:a5:43:bd:19:a6:89:f6:d7:ca:75:7b:b2:
                    eb:da:56:fd:49:b5:b5:e0:1a:57:7d:bd:8a:8a:fe:
                    09:48:18:96:8e:8f:63:4f:ab:5a:79:c1:f8:40:5f:
                    1a:de:37:4c:19:4d:4e:c6:2d:74:00:14:ca:15:43:
                    45:80:ba:48:c0:4f:a4:cd:6b:10:5b:12:44:d6:1f:
                    4e:21:6f:35:97:6d:c6:ce:5c:2a:a7:3d:71:a7:9f:
                    81:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:83:D7:9C:A8:21:9E:1B:DF:C6:3B:F3:D7:E2:33:06:20:75:10:FF
            X509v3 Authority Key Identifier:
                keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:54:3a:4a:e2:5b:61:8b:81:04:42:8b:80:43:7a:3e:62:54:
         06:af:9e:d3:cc:03:bc:f5:0e:99:ce:a9:20:4e:e8:59:eb:ee:
         e3:49:d9:c7:16:c8:0a:37:14:d9:54:e7:97:c2:d8:a0:0f:34:
         89:99:0c:3f:a2:36:24:f0:2c:f2:79:b3:aa:21:17:86:76:f1:
         36:f1:53:1b:e0:06:27:dc:37:d8:21:60:d6:2a:23:05:96:e4:
         0a:ad:8c:d7:ab:bf:8c:c5:c9:1d:f9:71:36:c0:0b:d0:4f:73:
         cc:74:c6:0f:31:41:78:5b:1f:d7:7b:f7:de:a2:34:8a:21:48:
         1a:4a:d2:4b:75:7c:1c:29:34:ce:0d:94:d9:f7:40:55:e6:74:
         eb:5a:68:7a:eb:0d:59:d0:16:0d:57:c9:01:4a:ca:7c:11:6e:
         7d:47:68:e4:69:81:dc:49:f1:86:be:3e:9f:f8:be:83:cf:19:
         76:02:cb:51:1f:c4:c0:b4:5d:30:f0:8f:d9:e3:99:74:7b:62:
         a2:5c:f8:bf:70:3d:53:6f:e7:97:79:ea:8d:9d:8b:d8:0e:7f:
         55:2f:e3:c0:f4:87:1b:2d:dc:75:2d:4a:79:0e:46:40:9d:30:
         ef:78:bb:94:39:ad:e2:b5:11:dc:30:72:92:67:b6:5f:34:51:
         21:70:bf:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:05:37 2025 by rpki-client