This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
File:                     jV8GavgNDp8H6oeyS9r6WdH18m8.mft (raw, json)
Hash identifier:          sL9oFOuHKzTianH4PimipjZIY6UtLpfVQjAOf8Qeb38=
Subject key identifier:   64:DB:37:B1:ED:A9:1D:60:F3:14:21:04:FF:59:95:69:8C:7D:10:C1
Authority key identifier: 8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
Certificate issuer:       /CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Certificate serial:       019AF164849E1F88A04044EE5501747619A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
Manifest number:          1764
Signing time:             Sat 06 Dec 2025 02:01:27 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:27 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:27 +0000
Files and hashes:         1: Nu6PzktHZPkZpTfNWDAC1WQ31fs.roa (hash: 0olptWKqLuwlqgvdBxIZwPcl+HWoWf7gPYNB7LvpZJo=)
                          2: jV8GavgNDp8H6oeyS9r6WdH18m8.crl (hash: G82AbzDfXg7aEAkDX+xVpQRbY7Xuw3P9uc14UQNBpww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:84:9e:1f:88:a0:40:44:ee:55:01:74:76:19:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
        Validity
            Not Before: Dec  6 02:01:27 2025 GMT
            Not After : Dec  7 02:01:27 2025 GMT
        Subject: CN=64db37b1eda91d60f3142104ff5995698c7d10c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:03:98:4e:14:67:8a:26:00:9f:9d:99:d6:63:
                    e4:44:29:1f:c2:88:0a:a4:47:c2:5a:b4:9b:1f:bc:
                    ab:f4:69:7b:4a:a6:91:6d:d4:d4:29:2a:03:9d:27:
                    40:89:d0:82:24:87:90:64:32:8c:56:18:36:41:d7:
                    62:bc:33:5d:69:6f:90:45:72:f2:42:02:25:80:9b:
                    11:cf:c7:52:e8:20:05:e2:af:99:c6:f0:ff:32:79:
                    81:48:73:21:06:2e:49:8c:f9:ea:62:51:74:52:f3:
                    84:2d:28:67:5a:82:78:b0:19:59:cb:a6:4c:6b:25:
                    72:79:21:38:e5:bd:de:3e:17:af:b6:49:06:3a:62:
                    55:f0:42:92:33:6b:f6:ad:9a:7c:4d:3c:a1:af:7f:
                    fa:50:c5:01:99:80:8a:56:0d:d4:0c:5c:4f:a1:07:
                    ef:e7:9d:65:f0:8c:0e:a2:d4:27:43:a5:17:d4:54:
                    7a:b3:1d:65:c1:d9:94:56:40:9c:18:f4:bc:83:ce:
                    7d:22:89:d0:06:f4:a5:0a:ba:9a:e9:02:78:7f:7c:
                    72:79:77:72:08:e1:61:50:75:d9:90:b4:2b:c6:e2:
                    d5:f0:53:ad:c2:f6:41:05:f3:93:f7:f0:cf:f2:06:
                    d7:ab:87:68:a8:ab:7d:2b:c9:9a:96:2f:22:44:23:
                    0b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DB:37:B1:ED:A9:1D:60:F3:14:21:04:FF:59:95:69:8C:7D:10:C1
            X509v3 Authority Key Identifier:
                keyid:8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:60:5b:9a:d6:7d:1c:86:4d:34:3c:0a:ed:90:40:16:0c:0a:
         69:c4:3f:c8:43:7e:03:d1:29:6a:ee:93:21:24:c4:03:00:9d:
         26:12:0e:1f:37:50:20:ee:a6:17:3f:37:18:6e:29:67:30:ff:
         00:73:0c:65:6b:74:60:f7:1e:5a:bc:5b:9c:80:17:08:dd:43:
         52:ef:ad:e4:4b:ee:e8:43:95:1a:0b:53:d9:11:1d:81:24:9f:
         cf:6a:f9:d9:42:c9:63:e8:27:75:ed:52:a6:cc:c1:1a:bd:76:
         14:c5:56:db:95:ec:2c:aa:cb:6a:cb:0d:fc:da:fa:87:1e:c1:
         78:47:ce:ae:c7:8e:b9:b0:0d:3b:ba:b0:0f:d7:5b:72:48:4b:
         fe:10:3f:5e:90:15:a7:e6:d2:da:6f:90:e5:52:8d:ec:9b:4b:
         33:bf:a3:20:67:c4:82:fa:d6:6e:87:a6:00:83:8a:55:0f:3a:
         fb:55:b8:09:d9:69:81:73:8b:84:72:6b:d2:f5:94:cb:dc:da:
         19:70:78:10:a8:2c:53:42:40:40:87:7e:76:3a:59:1b:df:eb:
         2a:b5:68:32:a4:e7:d8:22:52:6a:92:8d:1f:ba:44:a7:e7:30:
         fc:14:1c:3f:68:46:aa:aa:ae:8a:02:72:21:29:d5:1f:61:36:
         8f:76:71:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:26:25 2025 by rpki-client