This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
File:                     bjw2OogPxx8yLRcPdH7FKiqcwNU.mft (raw, json)
Hash identifier:          S9GmWsOtXBCK8WYX5M5uS6TAF3gqxorR1NQIu1aKxLs=
Subject key identifier:   D1:5E:E6:27:37:50:3B:AF:1D:66:B2:4C:5C:58:C1:FA:71:1F:36:4E
Authority key identifier: 6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
Certificate issuer:       /CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
Certificate serial:       019AF464BA9DF2EC82903B159E11F8178473
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
Manifest number:          0F77
Signing time:             Sat 06 Dec 2025 16:00:33 +0000
Manifest this update:     Sat 06 Dec 2025 16:00:33 +0000
Manifest next update:     Sun 07 Dec 2025 16:00:33 +0000
Files and hashes:         1: bPY9ahZxxt2lvVyVwzqBcjtryAE.roa (hash: gG0UZlZzIEWrBdANAlshbEpSDSiGqX3YZm/S5ZOuqaw=)
                          2: bjw2OogPxx8yLRcPdH7FKiqcwNU.crl (hash: Y5KZOTiPk5XA4StytCNLVYu/0V9jFtx15vToMP/gS6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:64:ba:9d:f2:ec:82:90:3b:15:9e:11:f8:17:84:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
        Validity
            Not Before: Dec  6 16:00:33 2025 GMT
            Not After : Dec  7 16:00:33 2025 GMT
        Subject: CN=d15ee62737503baf1d66b24c5c58c1fa711f364e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9e:d6:56:04:40:63:c5:c8:d5:22:22:c3:b6:
                    e9:ed:24:1f:5a:b5:32:9a:4a:1c:6b:9c:b0:19:58:
                    3c:56:59:bc:78:81:75:fe:c0:19:72:f4:a1:47:37:
                    b8:a5:26:6b:c1:3a:79:1e:9f:89:83:a5:be:bd:27:
                    d8:3e:43:a9:66:ee:c1:f1:2d:1c:e3:d7:71:04:cb:
                    e9:6a:00:76:40:88:b5:6a:37:05:1a:61:18:a3:6b:
                    d4:1e:0c:2f:94:e4:e9:5c:8c:22:74:c0:b7:ef:b0:
                    6f:de:29:3f:b7:2a:25:9b:1a:00:d5:e5:fd:16:fe:
                    4f:4e:fd:99:4e:b7:b2:26:7f:43:85:e1:cf:ea:af:
                    8b:33:97:57:86:42:4b:5b:34:5c:e2:f3:82:79:7e:
                    e0:42:1f:d9:79:dc:16:ab:26:d2:d5:8a:93:e8:8f:
                    76:5a:36:04:74:b6:a4:f7:09:b4:65:85:6f:61:37:
                    6b:3d:dc:cc:cd:f2:5b:40:46:95:d2:04:1c:dd:e4:
                    9a:de:69:6b:50:63:d1:23:4e:c1:51:b8:65:d5:72:
                    a1:11:06:68:31:5f:41:c0:31:ae:7a:4a:6b:d1:02:
                    5f:16:98:cf:aa:20:9f:f0:c6:8c:12:20:41:6a:56:
                    38:be:7c:fb:cf:4c:ba:4b:7f:a9:8b:13:2e:4c:9c:
                    ac:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5E:E6:27:37:50:3B:AF:1D:66:B2:4C:5C:58:C1:FA:71:1F:36:4E
            X509v3 Authority Key Identifier:
                keyid:6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:9f:aa:8b:20:08:81:c7:e4:31:b6:1f:18:b5:61:89:a5:1f:
         e8:42:00:00:15:a6:89:32:09:8f:1c:2b:61:f0:1a:b9:6f:ad:
         7b:9c:fb:4b:b5:28:8c:4b:7b:a5:79:cb:38:88:b9:fb:85:65:
         d4:d4:6d:d9:96:e6:77:73:c6:ee:d6:e1:43:26:ab:27:74:74:
         ac:dd:7f:46:9c:8f:14:87:9f:85:9f:5a:10:f3:dd:9f:fa:69:
         13:7d:cd:05:86:a6:e0:3f:c5:03:24:16:b0:55:80:ca:d9:63:
         e4:54:de:f6:52:6f:bd:80:5e:7c:4e:a9:a5:0d:18:a5:44:ce:
         be:e1:b5:78:49:a2:09:11:cb:fe:1c:67:ba:1b:97:07:c7:00:
         fc:30:24:1b:d4:7a:e9:f4:3a:7d:0a:4f:61:e0:31:04:91:9f:
         ff:98:26:d4:54:04:e8:10:02:b0:86:cf:bf:38:d0:8f:93:f0:
         c4:be:8a:61:95:21:f8:51:7f:6e:82:ee:cd:bd:2f:fe:73:9e:
         45:04:74:43:16:5f:97:60:10:54:3f:a6:07:5e:58:12:4e:b4:
         31:77:c5:19:40:22:4a:88:fd:78:c3:f5:99:0a:d7:cc:43:0c:
         68:45:cb:0a:4c:d9:f6:d3:ac:d3:fa:1c:2d:f4:6f:76:c1:b8:
         a2:0f:f8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:20:55 2025 by rpki-client