This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
File:                     jTQC6uAnq82SYJDMDd7_gKq5LDU.mft (raw, json)
Hash identifier:          rHucWciw8lXv2BVtDTxewPpLRVumTeyVijOfsF0l2N4=
Subject key identifier:   01:41:0C:7A:87:A9:FF:E0:1D:91:8C:79:15:83:97:3F:8D:28:32:AF
Authority key identifier: 8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35
Certificate issuer:       /CN=8d3402eae027abcd926090cc0ddeff80aab92c35
Certificate serial:       019AF276B48210120E8C1E9A1EA6C84D1E85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
Manifest number:          08FD
Signing time:             Sat 06 Dec 2025 07:00:57 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:57 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:57 +0000
Files and hashes:         1: dDEiYYNHFoAUjwjZLi3ifd8BIIY.roa (hash: +SodypyVeE8cbbVn6AK4ugRpoqPSDjouAybLryZJEA8=)
                          2: jTQC6uAnq82SYJDMDd7_gKq5LDU.crl (hash: 5QayEOr3DzoP07JiR4m0tqDywqD2b+M2ee2b9YwhXxo=)
                          3: rOnq86dV2BXa4tQU-vqcTAdf2VM.roa (hash: nUAAXheN4rY8m+/9k6ldoGDPKA5ssts8flzhVGQ+fHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:b4:82:10:12:0e:8c:1e:9a:1e:a6:c8:4d:1e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3402eae027abcd926090cc0ddeff80aab92c35
        Validity
            Not Before: Dec  6 07:00:57 2025 GMT
            Not After : Dec  7 07:00:57 2025 GMT
        Subject: CN=01410c7a87a9ffe01d918c791583973f8d2832af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fe:59:cd:c8:0d:9e:3b:74:4d:93:0c:cb:4b:
                    1b:46:59:6d:1e:55:34:09:7d:3f:70:5a:aa:c1:05:
                    19:06:e4:18:b6:20:17:a2:e3:6c:e7:f6:d3:c0:7c:
                    12:9a:e6:c4:23:90:29:d3:15:3d:6f:38:04:a0:6a:
                    30:18:30:cb:fb:cd:7f:81:71:55:b9:b0:6c:76:cf:
                    a5:70:43:df:e8:a0:6b:2b:10:96:d7:98:f1:d9:f2:
                    de:d9:e7:82:ab:61:c4:b3:0d:4d:13:3a:d1:e9:c0:
                    e9:a3:6e:d0:93:30:86:99:36:59:b3:4b:42:e2:29:
                    f7:14:b7:b1:66:00:d0:5f:5e:9e:f2:d7:31:48:90:
                    94:e5:5d:16:b5:51:66:1e:ce:2f:f2:e2:9e:b0:ac:
                    19:c3:66:ff:de:c6:0b:16:b4:96:7f:d9:5a:7c:00:
                    f5:a1:87:8c:84:97:62:b1:b1:02:17:d9:fe:4e:7a:
                    da:d8:3d:fc:d1:5c:93:0a:3b:d5:80:c3:51:3c:e3:
                    cc:45:fb:0d:20:c2:67:59:51:f3:8c:96:e9:f2:48:
                    b4:7b:1e:30:36:80:c1:b8:39:a7:ac:5b:7a:ba:57:
                    15:b8:d6:ae:4b:88:73:4b:f3:5a:4a:2c:45:5b:fc:
                    9b:0f:dc:d9:dd:c7:5d:65:a8:26:73:79:b7:fd:03:
                    f2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:41:0C:7A:87:A9:FF:E0:1D:91:8C:79:15:83:97:3F:8D:28:32:AF
            X509v3 Authority Key Identifier:
                keyid:8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a9:02:b4:10:39:0f:50:bd:90:45:62:fc:51:6e:37:d9:cb:
         d5:e5:fb:18:5c:5c:15:89:f1:06:2d:30:0a:db:fa:5a:22:3a:
         82:dd:cf:1e:0a:36:35:61:e3:43:5b:88:78:b5:c7:c7:51:e6:
         26:5a:84:a0:a2:98:c4:64:d7:36:e4:0b:8d:2c:f7:36:de:ae:
         eb:05:e2:14:c0:9f:a3:3b:e5:28:3f:6d:c9:6f:70:f2:4b:bb:
         a8:aa:c5:82:1f:37:b8:ce:a9:25:67:a7:5a:45:3f:a9:c1:9f:
         dd:26:65:e3:97:d8:2a:63:90:36:d0:c4:b5:c9:ce:25:cf:6a:
         30:33:ce:26:74:1f:ef:bd:89:bf:dd:24:70:92:72:fc:92:7f:
         a7:a8:55:e2:26:77:67:54:02:c8:b5:e0:ca:6c:c2:ad:81:78:
         da:3e:a3:8e:b2:df:ea:07:47:14:88:ce:fd:73:7c:7e:7d:86:
         f3:3c:22:75:ee:8d:d6:c4:b1:f1:a6:08:f5:1c:61:ac:ed:46:
         5e:cb:62:05:44:cb:1d:5d:ac:af:3c:0c:31:a9:cf:15:0b:5e:
         cb:1b:d9:fc:f3:ad:d2:3b:1d:1a:71:aa:73:85:2e:42:09:8a:
         98:86:b5:cb:82:e1:fe:4d:c3:9e:9f:70:55:db:05:6d:fd:6f:
         39:cb:6a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:25:05 2025 by rpki-client