This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
File:                     tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft (raw, json)
Hash identifier:          hY7LCOiDi52MJwIV5Wgb5BdIjtavTkHynH+wyJLsZyg=
Subject key identifier:   48:E8:E1:CC:69:B0:4C:AB:02:19:11:9A:D4:08:39:89:10:10:E8:84
Authority key identifier: B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
Certificate issuer:       /CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Certificate serial:       019B307989AFCE6F9202560952AA989AE082
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
Manifest number:          146E
Signing time:             Thu 18 Dec 2025 08:00:30 +0000
Manifest this update:     Thu 18 Dec 2025 08:00:30 +0000
Manifest next update:     Fri 19 Dec 2025 08:00:30 +0000
Files and hashes:         1: 9ykTfaxNeEIbk7wOARPuxoyYN9I.roa (hash: t511WQ9hIp1WWZqq1Z1Tp5plKXaqmdK3FlJidSm8B5Q=)
                          2: TVu5aQ7CXqbPlsSn9wNLY8tYilE.roa (hash: B5zfotvyVUd7f8T5ZgXVly2iMRkx4aTHfTXgfsPh/CI=)
                          3: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl (hash: flBqnUHy01HuHJ2h0uyZ/UcxV+Ok1e1P+eYD+8VB/Ho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:30:79:89:af:ce:6f:92:02:56:09:52:aa:98:9a:e0:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
        Validity
            Not Before: Dec 18 08:00:30 2025 GMT
            Not After : Dec 19 08:00:30 2025 GMT
        Subject: CN=48e8e1cc69b04cab0219119ad40839891010e884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:08:a5:a2:62:21:84:97:f4:c6:27:03:e8:a5:
                    de:81:21:3f:1d:96:5a:94:af:7e:dc:2b:e6:b8:75:
                    69:3f:c8:0b:fe:fa:5c:83:3a:ec:6d:20:3b:10:52:
                    46:39:0c:ea:02:0f:cb:5e:85:a1:b2:ed:26:ca:fd:
                    42:7c:fe:73:35:8e:df:3e:b2:5c:2d:6b:df:12:b7:
                    37:38:c5:a3:c9:ec:12:ae:4f:fd:0c:93:86:9f:69:
                    d1:f0:68:15:a8:b6:13:8f:37:5c:b9:ff:bf:ef:2a:
                    2f:82:c6:2e:0b:0b:26:86:97:cd:2c:f4:3e:35:69:
                    5d:07:33:86:41:24:e2:a9:d6:63:b3:a8:55:56:e8:
                    24:c6:c4:f4:31:32:f1:c7:57:2d:99:a2:d0:ca:c5:
                    92:7a:c7:31:c4:95:60:27:05:35:ed:11:12:1f:93:
                    94:72:f7:57:c2:e2:f4:66:39:25:de:02:6c:88:ff:
                    2f:c3:f2:e9:02:2c:01:e3:80:a9:ab:18:29:65:82:
                    99:e7:a3:39:16:81:72:63:40:59:a3:27:3d:07:6a:
                    63:9e:22:bb:ec:d3:13:ff:49:30:cb:9f:72:5f:ce:
                    50:8a:56:e1:da:f9:58:a9:21:14:c3:19:eb:9c:5b:
                    72:5b:31:d6:0d:dd:bf:ab:64:fd:f0:40:55:f8:1c:
                    29:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E8:E1:CC:69:B0:4C:AB:02:19:11:9A:D4:08:39:89:10:10:E8:84
            X509v3 Authority Key Identifier:
                keyid:B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:7a:08:a8:ff:ca:49:c2:22:35:e0:fe:18:96:0f:6a:34:64:
         08:f6:04:0d:5b:31:77:f6:4f:7f:51:cd:12:96:9d:9d:44:e2:
         4f:d3:5e:17:6e:e7:96:01:95:d2:e7:3e:84:80:80:e6:d0:06:
         19:f7:c7:7c:74:e3:18:c2:9f:f6:49:5c:06:99:ca:c8:92:43:
         0c:c6:71:b1:ea:65:93:ee:82:92:2c:1c:88:c4:6c:ed:c3:2b:
         98:bb:86:61:ba:4d:ae:df:41:18:ef:2b:5a:b7:39:b6:3e:ca:
         42:c0:57:ff:2e:12:84:07:1e:6f:d1:dd:23:31:50:8a:7d:4b:
         d8:e8:04:e5:89:c6:aa:c5:3a:50:86:29:22:51:57:54:53:33:
         1e:7e:fb:d9:76:f6:99:fb:8c:a4:fb:0f:24:4f:4a:0d:99:0b:
         97:7e:a6:37:d5:a4:60:e4:ee:46:76:5f:64:3f:99:e0:bc:dc:
         f4:e3:b1:dd:b6:da:ab:8a:6f:5d:c1:68:e9:a4:74:d7:60:7e:
         37:4f:2d:e9:75:d3:18:d8:4a:a6:62:57:82:06:ba:c5:8a:99:
         77:0e:59:de:ad:ac:eb:e1:af:88:1f:a4:94:b9:f6:4e:62:32:
         9a:c7:e3:5a:12:76:5b:bc:3e:7e:1e:e2:98:7c:41:c1:24:38:
         02:a5:91:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:27:43 2025 by rpki-client