This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
File:                     jzaP655VO90TFWJYSjNTsddVXFA.mft (raw, json)
Hash identifier:          qKerBoUBeG8K+F+27ZHmII+c3Q9EiZer3dvqYuEqpU0=
Subject key identifier:   9A:98:C3:2A:4A:57:BF:CE:30:50:16:0A:54:E9:65:0C:B6:A3:85:52
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Certificate issuer:       /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial:       019AF31C676381AAA0B2BA62B7559CB6D3C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
Manifest number:          1773
Signing time:             Sat 06 Dec 2025 10:01:56 +0000
Manifest this update:     Sat 06 Dec 2025 10:01:56 +0000
Manifest next update:     Sun 07 Dec 2025 10:01:56 +0000
Files and hashes:         1: VgDY9zN_B3grCrz_H8xjNykqXTQ.roa (hash: V5RUWHdPXufxGeDHhevmGSEqGhIbGyboqgCFXxKzrT8=)
                          2: eWNwoG2gNqVOl4jxtgq3km86-j8.roa (hash: tuYXWwSXyhuCjeV5A6/luy4IrIPezyScgsOJmMQtw38=)
                          3: jzaP655VO90TFWJYSjNTsddVXFA.crl (hash: u4X6EZw+GBA3JDQ1oQqxWBxcGkkD361S3fjnsc35jlQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:67:63:81:aa:a0:b2:ba:62:b7:55:9c:b6:d3:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
        Validity
            Not Before: Dec  6 10:01:56 2025 GMT
            Not After : Dec  7 10:01:56 2025 GMT
        Subject: CN=9a98c32a4a57bfce3050160a54e9650cb6a38552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:62:af:ab:cb:9c:e9:50:1a:09:b6:cf:e8:f2:
                    a0:3f:dd:65:98:ef:9d:b3:3c:f0:76:38:df:76:85:
                    d9:9b:b5:2d:1b:34:5e:ce:90:87:6f:f9:ce:ab:60:
                    20:5e:7e:22:4e:83:2e:08:8e:7c:0e:cd:8b:2e:ae:
                    0e:07:83:81:bc:5e:bd:1d:c2:f9:4f:4d:49:54:cd:
                    ee:1d:16:de:52:ba:6b:06:64:49:9f:fb:e4:65:8a:
                    ed:8d:ff:c9:1f:6e:5d:65:4c:3f:83:9f:c1:40:b8:
                    fc:c0:8c:13:90:d9:90:bb:dd:8b:61:23:f0:24:29:
                    64:36:7b:12:7d:b4:a0:4a:e4:93:27:7a:34:d8:2c:
                    eb:53:28:bf:4a:c4:a5:f4:02:36:4d:c0:19:df:49:
                    3b:a3:20:61:ec:a1:75:0f:70:f5:ae:61:2d:c9:2a:
                    ed:69:fe:77:66:f5:f1:db:ba:8b:31:fb:56:5f:0e:
                    a5:ff:21:c8:7d:4b:03:c4:2a:44:e6:bf:2b:b8:6b:
                    23:77:0f:72:42:ff:a5:62:90:d1:4e:64:bf:b2:b6:
                    cb:74:b4:12:bd:f8:d0:a4:76:06:10:cf:b0:d2:da:
                    78:30:61:4d:2b:24:b9:eb:52:e5:70:db:92:de:65:
                    48:7f:bb:a9:dd:ef:7e:16:0b:eb:8b:1a:82:85:a2:
                    87:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:98:C3:2A:4A:57:BF:CE:30:50:16:0A:54:E9:65:0C:B6:A3:85:52
            X509v3 Authority Key Identifier:
                keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e0:7b:f5:08:65:f6:cd:e9:72:06:72:cf:01:0c:bf:5e:e0:
         32:dc:ea:3a:1c:b2:53:9e:64:c6:8f:cd:b9:25:5a:1e:8d:a7:
         8f:35:b5:85:ee:16:ae:31:65:0d:bd:d3:5d:bf:a1:6d:cb:ca:
         e7:00:6c:ab:46:6b:2a:a3:1a:ab:60:81:78:21:e3:89:57:03:
         68:ef:1b:ec:f8:f4:f4:2f:e0:c4:4b:02:89:3a:5b:bd:a4:d7:
         af:60:3e:7d:b7:f5:e2:c5:6f:f1:ba:b2:8d:94:08:bd:a2:e7:
         df:28:47:71:f6:d6:74:5d:81:4e:de:05:61:55:d0:c3:64:bc:
         d8:f2:02:e7:43:af:55:ae:a7:5e:d4:0f:a8:11:8b:46:f0:88:
         7c:33:b5:3e:4c:eb:e9:b0:5f:a1:20:0c:83:49:19:e4:db:9b:
         e0:26:b8:4e:6c:eb:7e:b8:78:b4:05:d8:bc:69:fe:c3:01:60:
         dd:d4:1f:ef:c2:cf:f8:05:57:4f:31:ac:30:ed:68:40:14:b5:
         d0:92:79:e7:87:53:87:22:60:10:0a:eb:52:36:46:2a:2b:1a:
         66:7f:eb:7a:fb:4a:75:f2:fa:c8:09:bb:54:f5:6c:ab:53:ed:
         60:16:c8:69:c9:84:63:c2:32:62:58:04:ca:17:a6:b7:1c:a4:
         9d:b1:32:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:27:29 2025 by rpki-client