This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
File:                     jDath5xkWu6YrEqJ_IALmpdOlB8.mft (raw, json)
Hash identifier:          wvG36pHcNXsjKUga4s6Hgn5jGyIn+be+7LKWq9qAmq0=
Subject key identifier:   37:7A:3D:0C:8A:B2:CE:81:9D:D5:7F:15:A2:FD:49:26:C2:60:11:A7
Authority key identifier: 8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
Certificate issuer:       /CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Certificate serial:       019AF088434E87E67BEE53868B803BE08138
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
Manifest number:          1762
Signing time:             Fri 05 Dec 2025 22:00:53 +0000
Manifest this update:     Fri 05 Dec 2025 22:00:53 +0000
Manifest next update:     Sat 06 Dec 2025 22:00:53 +0000
Files and hashes:         1: JZtyqMbXS8tPNB0lzf2hzdvVBEU.roa (hash: RpDAo1vXO9TdJDmBZdj/bGq/o6oVBhV2VRLtIe7d52M=)
                          2: Zwk791BjXFiWW_GWZuipoheVevk.roa (hash: 98bTEWSKCgsr9ScLAh15mZ7s1p9cPoDYzZZ0PPizWyo=)
                          3: jDath5xkWu6YrEqJ_IALmpdOlB8.crl (hash: cIy/fG2zocFTR5cqlxtRo0CqMWrtZXLsEWlJWeHwACM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 22:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:88:43:4e:87:e6:7b:ee:53:86:8b:80:3b:e0:81:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
        Validity
            Not Before: Dec  5 22:00:53 2025 GMT
            Not After : Dec  6 22:00:53 2025 GMT
        Subject: CN=377a3d0c8ab2ce819dd57f15a2fd4926c26011a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3e:79:19:c4:6f:1a:4e:8a:aa:59:d6:b0:a6:
                    f5:87:97:8e:e4:3c:15:a5:40:8d:2d:8f:61:04:41:
                    dc:b6:bd:75:bb:1e:2f:20:d2:0f:5f:f8:cf:10:6d:
                    b1:15:8f:49:bc:f6:c9:37:ec:40:d8:d4:55:77:9f:
                    19:d3:50:d2:f3:e8:65:b0:a1:bd:26:c8:00:30:ce:
                    9b:90:77:4c:a4:ae:b7:2d:73:ef:c7:cd:c4:6f:b8:
                    a8:8d:61:c4:b2:f2:8f:32:f7:71:a9:14:74:52:c0:
                    6d:9d:dc:ac:b5:56:a3:68:2c:42:c6:1a:70:7b:2c:
                    55:45:c1:eb:d4:a0:06:88:2e:f1:1c:37:ec:c4:7b:
                    e5:10:ac:e0:4a:c8:9c:7e:18:f0:d5:68:98:93:62:
                    f5:11:10:a8:c5:4a:84:26:d1:08:d9:24:70:a3:51:
                    4c:d0:cd:f1:b0:68:4a:d8:3c:a4:03:98:fd:0a:16:
                    56:5f:34:88:b0:24:94:70:16:52:d4:e7:63:c0:30:
                    04:82:cc:9f:15:92:99:82:d5:b0:e3:bc:b1:67:1d:
                    a2:78:e3:f7:f4:7b:bf:14:38:28:b3:7b:1f:e4:d9:
                    9e:96:3f:11:93:ec:cd:5b:2d:87:f6:00:01:42:83:
                    87:f4:5a:f5:85:f6:68:05:ef:9b:4c:f3:d5:4e:79:
                    fb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7A:3D:0C:8A:B2:CE:81:9D:D5:7F:15:A2:FD:49:26:C2:60:11:A7
            X509v3 Authority Key Identifier:
                keyid:8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ca:15:3b:d5:89:b4:58:be:e4:0f:bb:66:39:d9:68:f5:a1:
         d2:00:ec:5d:ea:ba:5f:9e:d3:cb:b9:b3:cc:b2:1f:23:8e:a2:
         a4:7e:c8:22:c5:58:8b:94:07:1f:b3:10:3c:54:e6:78:6b:a0:
         94:b6:49:3f:e0:0c:9c:5a:8e:a9:fd:39:ce:86:11:66:d4:9d:
         4f:1e:e2:fe:0a:57:88:da:a8:6e:10:a2:37:54:ef:e0:b1:97:
         f3:58:34:ac:e3:cd:68:39:2f:55:78:96:31:00:cf:cf:4c:c1:
         d3:2f:f3:9b:f1:60:63:dd:b4:07:7c:b9:89:b6:bd:ae:41:59:
         68:f3:cb:3b:0a:7b:a5:7e:da:c3:87:bd:ad:9b:54:87:95:70:
         30:08:24:5c:07:29:b1:91:53:62:bb:17:b5:41:f8:a6:8c:12:
         d2:c3:f3:5d:7b:9f:1d:30:52:ce:11:e5:14:bc:19:5f:3c:99:
         77:8e:fc:b4:11:f2:ea:97:68:11:19:a1:8e:bc:97:aa:10:f8:
         6b:92:6c:16:35:b5:bb:3d:54:8e:21:a1:ae:2c:b1:ab:a7:f9:
         c1:d5:55:e7:e8:a3:6b:ee:e7:89:c1:0b:b4:99:4f:47:87:2e:
         d0:01:0a:77:13:23:17:7e:b0:c5:77:bf:db:b6:d5:3b:c5:17:
         e6:b3:26:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:08:46 2025 by rpki-client