This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
File:                     jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft (raw, json)
Hash identifier:          W1RBRYBd9FPkh+27T8kUTEa0BdEgL8rcPQpsMDuzVuQ=
Subject key identifier:   C9:D9:60:60:C4:63:C9:7C:85:71:09:32:43:C9:56:7E:87:03:E6:7F
Authority key identifier: 8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E
Certificate issuer:       /CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e
Certificate serial:       019AF0F5C5B23573791A2F717BFF8A87114B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
Manifest number:          2E
Signing time:             Sat 06 Dec 2025 00:00:30 +0000
Manifest this update:     Sat 06 Dec 2025 00:00:30 +0000
Manifest next update:     Sun 07 Dec 2025 00:00:30 +0000
Files and hashes:         1: FJssQUG-5WpajvHpyzR6SI1qsiY.roa (hash: 8p9Ojnq2EsfJr6DYc4W+gY6tO6sh3FzfrhiKvLdrJvw=)
                          2: hChaNSU7h8cdh-e93nEgJaejH8c.roa (hash: Gudwjiq/t5T7NuD7RxID02xwuiRTjEdOLzGaGDACPKc=)
                          3: jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl (hash: rJyCl4wAG6U+RieciWgMr1E1uQ45xqRpP6NVQHoWwXo=)
                          4: qTnj_y_Wd49wsAXE39s8dZ0CQvA.asa (hash: Pe+G1o42QcpD2g0wE/O5joEX35Ku4HHh+kf6CsJnEYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:f5:c5:b2:35:73:79:1a:2f:71:7b:ff:8a:87:11:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e
        Validity
            Not Before: Dec  6 00:00:30 2025 GMT
            Not After : Dec  7 00:00:30 2025 GMT
        Subject: CN=c9d96060c463c97c8571093243c9567e8703e67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d5:00:e0:b2:01:ad:14:ed:07:12:ff:99:c0:
                    1a:b4:e4:ee:d2:f1:ea:85:37:2b:b3:e1:c4:35:db:
                    0f:93:ab:9e:56:66:cf:b3:d3:6d:af:b0:89:c7:fc:
                    71:e3:4d:51:5d:e2:cb:e0:26:d1:2c:b6:f1:df:12:
                    94:e6:a3:43:e8:ad:07:cb:f1:7f:b0:f7:6f:ac:66:
                    a2:03:e3:4d:cf:e6:da:d1:d4:79:11:72:71:47:25:
                    f5:6d:27:ac:74:11:05:52:3d:f0:01:1a:29:5e:fe:
                    eb:d3:cf:33:bd:47:e0:80:18:26:45:f2:3b:b8:78:
                    09:69:15:cf:bc:69:49:8b:d6:84:3e:12:9d:de:8f:
                    64:5e:77:ed:aa:e0:1b:6a:57:c8:8d:77:44:12:d5:
                    96:cc:d0:cc:46:59:92:e8:6c:6a:7b:bc:5e:55:1e:
                    15:f6:87:04:e4:00:03:ae:89:07:4f:b6:52:c3:26:
                    63:dd:ee:d2:ad:54:73:42:34:f0:cf:6a:a7:69:d1:
                    63:a7:3c:17:10:ca:f0:a9:6c:69:ec:64:d4:5a:ee:
                    82:65:82:65:5f:40:1c:33:ef:01:23:a8:aa:cb:bf:
                    64:3c:69:b2:87:89:58:3e:06:09:d7:94:7f:78:d5:
                    01:99:3c:f1:18:3d:53:fc:82:a3:98:98:c9:11:10:
                    a3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D9:60:60:C4:63:C9:7C:85:71:09:32:43:C9:56:7E:87:03:E6:7F
            X509v3 Authority Key Identifier:
                keyid:8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:0c:77:ac:df:7f:a0:c9:0d:7c:36:8d:fa:90:ab:6b:0c:26:
         9c:e7:0e:30:b7:9e:d4:de:a8:07:43:6c:0c:72:64:7d:26:d2:
         ce:ee:db:c3:3a:f5:5c:16:7b:03:1c:3c:b6:a7:19:cc:b2:97:
         bc:c1:23:2f:f4:2d:ba:dd:96:16:77:3e:48:95:87:6d:ec:c0:
         81:78:92:ec:a5:b2:d5:e9:b0:c1:a0:d7:7b:38:15:ad:b4:1a:
         03:53:66:9d:16:af:b6:03:8d:81:de:63:44:d8:64:ab:df:f3:
         1d:e7:86:a2:77:23:dc:61:f2:4b:de:c5:0b:55:15:f4:d3:2a:
         63:36:34:73:7b:83:5b:05:e3:1d:a2:14:d3:17:9e:c4:96:93:
         a8:34:96:87:6d:e5:1f:f3:43:8c:47:44:dd:73:e1:0e:8d:9a:
         59:26:bd:12:e1:c6:40:57:8a:dd:a3:3a:3a:40:96:a7:bb:d5:
         37:e3:af:b2:23:c1:44:09:30:96:04:bc:30:d2:0f:a6:a3:d3:
         74:92:da:ea:e8:03:0f:74:39:a4:90:75:b1:bf:b3:48:c8:51:
         7a:00:3e:c0:d8:b0:4b:7f:82:6e:56:0c:64:2d:9b:d4:b8:9c:
         6a:23:a5:c5:21:31:52:e1:ba:37:81:4c:25:7f:53:96:07:0d:
         b5:33:0c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:42:11 2025 by rpki-client