This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
File:                     tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft (raw, json)
Hash identifier:          VrnrmNe9XCoPKATfsCl1mbDFeGOGxQ19Xmir16jA3sc=
Subject key identifier:   2A:28:80:64:3B:53:6C:2E:38:5A:9E:EB:BB:0C:06:3B:11:08:DF:7B
Authority key identifier: B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
Certificate issuer:       /CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Certificate serial:       019AF2ADB06CD89C9AABB165513D898F8CF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
Manifest number:          144E
Signing time:             Sat 06 Dec 2025 08:01:00 +0000
Manifest this update:     Sat 06 Dec 2025 08:01:00 +0000
Manifest next update:     Sun 07 Dec 2025 08:01:00 +0000
Files and hashes:         1: 9ykTfaxNeEIbk7wOARPuxoyYN9I.roa (hash: t511WQ9hIp1WWZqq1Z1Tp5plKXaqmdK3FlJidSm8B5Q=)
                          2: TVu5aQ7CXqbPlsSn9wNLY8tYilE.roa (hash: B5zfotvyVUd7f8T5ZgXVly2iMRkx4aTHfTXgfsPh/CI=)
                          3: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl (hash: HUAP+rDb06vh9d+CP26qh0Uxz2cb2u0JA7q/DbgAc80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:b0:6c:d8:9c:9a:ab:b1:65:51:3d:89:8f:8c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
        Validity
            Not Before: Dec  6 08:01:00 2025 GMT
            Not After : Dec  7 08:01:00 2025 GMT
        Subject: CN=2a2880643b536c2e385a9eebbb0c063b1108df7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f1:4e:4a:5b:5a:49:39:71:53:b9:b1:64:7d:
                    38:6f:7d:3f:8c:7e:34:48:6f:5f:dd:9c:bb:61:63:
                    0b:0e:d7:dd:0b:ad:57:07:5a:d4:f1:bd:34:fa:b5:
                    89:40:dc:5c:f3:53:fd:bd:96:4c:af:09:7e:20:8e:
                    55:74:ab:7a:d2:2d:c8:c8:f9:d3:cb:01:99:b6:cb:
                    36:ae:54:02:98:b7:8d:b6:d3:00:cb:7b:ad:5a:a5:
                    38:da:ee:22:f8:ff:d6:c3:10:bf:09:ce:4a:26:16:
                    0e:19:b9:80:f0:65:4e:80:0b:55:97:1d:3f:cd:71:
                    a0:8b:b3:bb:10:22:2f:a5:7d:40:e1:42:60:8e:f2:
                    a6:62:2b:e8:bb:c9:18:4c:f3:7d:3d:a8:f2:86:e4:
                    33:24:bf:fe:9d:41:14:c2:74:e8:54:c4:dc:51:de:
                    17:96:0a:a5:80:0f:0b:86:79:3c:83:62:ec:41:06:
                    ae:04:31:96:e1:f0:a4:14:95:03:24:13:6d:d9:af:
                    2d:08:16:8a:b2:94:16:c5:e2:71:90:1e:dc:f6:12:
                    5b:0c:f3:d1:ee:4f:e4:db:85:80:cc:a7:a6:08:c8:
                    78:a4:5f:03:75:44:3e:00:53:84:a3:0f:46:27:cc:
                    35:42:b4:71:dc:9f:67:ff:e5:ba:e7:b3:f3:40:d7:
                    c7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:28:80:64:3B:53:6C:2E:38:5A:9E:EB:BB:0C:06:3B:11:08:DF:7B
            X509v3 Authority Key Identifier:
                keyid:B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f9:21:93:c6:52:19:f6:97:fb:c6:06:68:d4:50:17:78:ea:
         7a:c7:a5:2b:ad:5c:9b:c4:11:81:12:91:42:31:8a:f0:d1:d7:
         be:0a:9a:6c:8c:7d:2b:5e:66:1e:c4:e4:66:a3:b3:a7:0d:fe:
         4a:32:bf:65:ee:fc:c4:4e:d3:a1:4f:49:17:96:6d:1b:f4:b7:
         4a:6a:10:a4:ef:d0:02:a2:4a:ca:d5:43:40:a1:eb:75:ce:03:
         1b:10:26:a7:7c:77:7c:79:64:fe:fb:7f:98:8e:21:46:dc:22:
         d5:a5:ce:14:a3:64:64:b9:53:0b:44:7f:3d:e5:b8:fa:5a:32:
         08:9b:3a:d9:c5:3f:b5:6c:b7:5b:f7:c0:91:d3:f7:47:0c:ba:
         b0:4a:ca:20:03:68:94:3a:c2:24:6c:28:94:e0:3e:e5:bf:75:
         62:46:d7:28:9a:87:0a:ce:60:ed:55:e2:3e:ab:db:73:9a:33:
         8c:ea:55:f9:f8:04:03:85:7f:cf:6f:be:61:24:b4:c3:94:6e:
         00:96:8f:8b:c0:9f:7c:3e:a7:78:5d:af:2c:6a:df:92:6e:26:
         ef:a8:0a:a1:b0:2f:31:26:3f:9c:ec:bb:7d:8c:0b:6b:50:ce:
         56:58:04:30:fb:f9:8a:f5:31:19:ac:77:5f:4a:f5:75:4f:cf:
         c1:f4:51:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:58:01 2025 by rpki-client