This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
File:                     jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft (raw, json)
Hash identifier:          GtiycNDBtw3AFXVGRu2d0NSKr27JfJBsxtyU2arsfWE=
Subject key identifier:   29:8B:9F:BB:16:D1:A0:02:08:7C:A4:F0:6E:36:84:E0:53:04:4B:98
Authority key identifier: 8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
Certificate issuer:       /CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Certificate serial:       019AF540A43A30385C6CBA6D55C86564EA95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
Manifest number:          1765
Signing time:             Sat 06 Dec 2025 20:00:45 +0000
Manifest this update:     Sat 06 Dec 2025 20:00:45 +0000
Manifest next update:     Sun 07 Dec 2025 20:00:45 +0000
Files and hashes:         1: MeStYchfIIM21gIjTEqDbpySbzo.roa (hash: HjyEWI+y6IoPKwCyj+P1YglxdC4kh2ZH6Sa5Jx7lTg0=)
                          2: ifGa29cDfCtmHluYzDCGArXBHSE.roa (hash: SagmwRWK2BwuwUrS3xLYWQnMEp8bHt5W3ObsAvGOP+A=)
                          3: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl (hash: xwIeKKUwedCYD3m08FpAudHRGOIIsQJ6JfeB6YBHem8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 20:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:40:a4:3a:30:38:5c:6c:ba:6d:55:c8:65:64:ea:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
        Validity
            Not Before: Dec  6 20:00:45 2025 GMT
            Not After : Dec  7 20:00:45 2025 GMT
        Subject: CN=298b9fbb16d1a002087ca4f06e3684e053044b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9a:c9:73:85:b2:51:73:26:e8:f8:3c:cc:ba:
                    2b:cb:07:4f:0f:09:c5:5d:c2:18:9d:37:31:15:1c:
                    be:36:87:a4:87:7c:08:1e:ad:78:44:ba:0e:11:15:
                    44:d5:94:26:03:a1:b5:8c:96:64:98:81:41:1e:8c:
                    36:8a:b2:06:db:c2:f3:3e:f2:df:44:eb:02:87:96:
                    34:3b:86:df:07:ae:47:f1:cb:b6:d2:43:af:c3:c3:
                    28:99:51:a2:f6:04:e7:8e:bc:ee:f0:4d:06:94:c8:
                    83:f2:35:aa:ac:0e:37:89:71:7e:2a:a9:d3:17:de:
                    21:25:96:30:a2:05:d1:a9:a9:ad:84:80:20:ad:f6:
                    f3:a6:a0:3a:eb:ef:87:b2:a3:dd:60:03:20:ad:b5:
                    34:aa:b9:3c:97:e2:d7:0a:52:f4:71:86:7b:89:d8:
                    63:4f:38:85:d9:33:52:c5:06:b7:e9:68:d2:90:33:
                    68:0f:ca:96:bd:70:a9:8d:d9:94:28:09:32:25:d2:
                    20:dc:2c:64:d4:d8:8f:f4:5e:4d:14:18:79:72:67:
                    28:f9:95:74:d6:49:a5:db:3b:8a:f1:b6:76:27:49:
                    40:cd:c7:8e:65:1b:7d:b0:23:b0:d7:8c:75:6d:b6:
                    8b:4b:47:26:a0:9c:5e:7b:a8:76:b5:7f:02:a6:86:
                    70:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8B:9F:BB:16:D1:A0:02:08:7C:A4:F0:6E:36:84:E0:53:04:4B:98
            X509v3 Authority Key Identifier:
                keyid:8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:db:6e:ef:38:da:b6:0c:cf:f9:63:30:6c:6a:50:bd:e7:22:
         7a:59:a3:a9:4f:32:a9:b7:62:03:4f:a3:0f:1b:f2:b3:35:6a:
         02:49:31:24:45:7d:9b:2f:7c:29:a6:e9:70:7b:9c:23:9d:1a:
         e7:69:3a:57:e2:5a:c0:79:73:07:92:5e:c5:a6:75:3b:f5:1c:
         74:46:f3:ab:1a:fa:69:1c:c9:8a:41:39:42:be:41:b3:43:19:
         18:8a:9a:a1:db:ce:d6:6c:15:c7:4b:9d:7b:1c:05:b7:a0:11:
         9f:db:7e:b9:dc:bb:20:f2:59:f8:a8:f9:d6:e7:be:3d:6e:30:
         99:fc:04:52:68:f9:f7:8b:ad:3b:2b:66:61:46:bc:c3:6d:67:
         3d:bf:4d:cd:32:40:60:d9:d1:f9:4d:18:86:b1:13:ff:a1:e4:
         82:16:8a:24:6a:75:38:e6:3b:6a:63:63:3b:09:47:ca:fe:8f:
         b5:81:f8:5f:ce:2d:23:b0:09:b4:ad:ab:5d:b1:ca:36:81:13:
         2b:b3:ba:67:2b:c7:65:1d:10:a3:d3:1a:9a:9a:1d:ee:24:e4:
         33:d0:cd:b0:3d:2d:c4:2f:dc:5c:47:80:1a:9d:f4:3e:ed:5a:
         f3:b0:c3:b4:a6:84:bc:60:8c:45:61:22:52:24:1b:66:a6:97:
         6d:9f:8c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:50:26 2025 by rpki-client