This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
File:                     JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft (raw, json)
Hash identifier:          zmW1ty0DfhgcpmaBRtrXU6XOWxuuJyi6WXPO5tiAa/U=
Subject key identifier:   F9:82:20:C2:D8:F9:1A:26:5D:50:20:50:00:36:1D:7A:1F:19:31:C9
Authority key identifier: 26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
Certificate issuer:       /CN=26c672da72a34cc282adc40f282676de75117654
Certificate serial:       019AF50A072BD5DCAB3139A55B2D48430A7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
Manifest number:          03B1
Signing time:             Sat 06 Dec 2025 19:01:06 +0000
Manifest this update:     Sat 06 Dec 2025 19:01:06 +0000
Manifest next update:     Sun 07 Dec 2025 19:01:06 +0000
Files and hashes:         1: 3T-1XN6_cwuMNW22iL1_AA25sSU.roa (hash: zx2BF5CFYR8Sr363pI6NcjPdMBZx2ThD7Wo/N06Wwyo=)
                          2: JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl (hash: CrTfauQpsqfS7jN9dTKT4FLhpMxq902R084NyrOxw+8=)
                          3: kB78k7d7cNChEiOEdhutVluA5Eg.roa (hash: a/qillBjMak//HIfJthslOlVYybCavMHPJc8Tn/8qiM=)
                          4: wDk7LmI6cHqgPwoPiReork5n7TM.roa (hash: f4jrE7YABghrHsA4bobpIqsKuhp5LdVQIAwVcPaNdyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 19:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:0a:07:2b:d5:dc:ab:31:39:a5:5b:2d:48:43:0a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26c672da72a34cc282adc40f282676de75117654
        Validity
            Not Before: Dec  6 19:01:06 2025 GMT
            Not After : Dec  7 19:01:06 2025 GMT
        Subject: CN=f98220c2d8f91a265d50205000361d7a1f1931c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:06:a9:da:90:87:e4:07:2f:be:32:47:24:f3:
                    0f:5c:2a:79:c0:99:71:5b:84:56:1e:b7:8c:6c:56:
                    20:a8:7a:e3:2b:90:56:5e:f7:04:c6:c4:6e:dd:95:
                    3e:07:57:40:15:b0:1d:27:90:be:46:7d:25:de:ea:
                    ab:e9:8a:2a:97:09:27:41:17:94:63:b7:4a:30:72:
                    28:6e:35:fb:df:13:a8:56:bd:d3:6c:52:99:22:46:
                    e4:46:8b:91:73:d8:e4:12:16:87:0d:77:56:cc:64:
                    5a:35:c1:f8:bc:26:71:1b:8c:8a:10:b0:37:e4:ed:
                    e5:64:42:04:2c:58:94:85:d7:ba:64:d5:5d:ac:0a:
                    9f:a6:c6:2b:ee:73:bf:81:49:f4:f0:42:68:1c:16:
                    61:e2:56:d4:b4:46:aa:73:7f:a9:00:bb:68:85:4a:
                    7f:23:41:f5:a6:73:9a:e8:3f:12:06:50:9b:bf:17:
                    cf:1c:f5:86:eb:ac:df:50:b2:0d:61:b9:9e:b4:36:
                    5f:d7:18:8f:0c:7d:7d:c7:1b:1d:10:6f:17:de:15:
                    b0:c1:af:aa:49:b9:2f:b8:d4:38:13:da:76:96:e3:
                    87:e1:71:c3:31:d9:39:91:e8:a6:9c:03:6b:6e:30:
                    15:6e:d7:01:f7:2c:35:f0:01:df:90:f5:29:21:92:
                    98:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:82:20:C2:D8:F9:1A:26:5D:50:20:50:00:36:1D:7A:1F:19:31:C9
            X509v3 Authority Key Identifier:
                keyid:26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:a8:8b:42:24:95:7c:69:93:72:38:9a:bd:ba:46:ea:e2:e9:
         00:52:3f:9e:0b:85:bf:4a:36:fc:85:b3:51:d6:b0:96:c5:71:
         ef:d7:79:94:5a:7c:87:c1:59:1a:33:9f:47:33:ff:40:20:1f:
         f9:d8:e7:f1:0e:68:46:57:ef:ef:13:b3:2b:67:32:2a:a8:24:
         65:9c:10:90:1e:46:12:fa:e8:eb:11:93:83:e8:65:fa:e7:20:
         8d:a4:4d:04:28:57:52:08:4e:67:3c:f7:c4:68:55:3c:20:0f:
         fc:a9:c5:9c:62:ff:6c:f6:96:44:0a:50:cf:41:35:99:a6:0c:
         2a:76:68:a5:94:4d:b2:21:ee:f9:a4:0b:a4:db:53:55:39:71:
         96:aa:60:54:30:25:96:c5:a1:e2:f5:02:63:bb:78:6e:fb:4f:
         fb:08:81:31:39:e8:f2:13:5f:db:e6:a1:7e:72:ba:c1:d8:3e:
         83:f8:2c:c6:91:99:69:2c:7e:b4:31:af:a8:6c:2e:2a:e0:75:
         82:3d:4d:1c:fd:fc:de:98:61:05:7a:95:23:b8:4b:5d:88:1d:
         6f:83:c3:81:e0:c9:84:d9:09:c3:0b:a0:a6:b6:b4:47:ad:2c:
         13:0f:8a:b8:a9:c7:5c:36:1c:9b:d8:02:34:e5:4b:46:e3:e7:
         80:bc:7f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:49:02 2025 by rpki-client