This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
File:                     _2JWLK6HP0_EoyMr9J3VNDtwhPk.mft (raw, json)
Hash identifier:          kkFyz93wtJfC437nup1h7DkPU/qL3C6HBIMdEFG0IGw=
Subject key identifier:   CF:12:EE:47:FE:7D:58:7D:1C:D8:ED:FD:ED:A6:EE:95:49:4B:60:E2
Authority key identifier: FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9
Certificate issuer:       /CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
Certificate serial:       019AF12CFCDB6331DC3AC9AE6B03C5FFD3A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
Manifest number:          1694
Signing time:             Sat 06 Dec 2025 01:00:48 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:48 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:48 +0000
Files and hashes:         1: 9dm3RFT9BYoMAAVpyE60LHFzSlc.roa (hash: uwrhQ0q4VpiHZaTRgjsMBaRGiUAzHgpiv2VyGMcmfoA=)
                          2: _2JWLK6HP0_EoyMr9J3VNDtwhPk.crl (hash: Wf9qOFh1Tl11zKdyIVv5dFmyxyXXhWW/YXcH020C3H0=)
                          3: ppSxmjoWI0llsw_Y8ciw6i9Iexo.roa (hash: ephpJ4ipHMwrJD7Bz3rKfNSaDOgLcj3aX7bFbiCir/4=)
                          4: wUsbt-HTaTgAWsY_K2ZwhZempLg.roa (hash: OXuJmL2+egILFuJsJVzo1F0QRoATbyDTCvgbpKqhXMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2c:fc:db:63:31:dc:3a:c9:ae:6b:03:c5:ff:d3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
        Validity
            Not Before: Dec  6 01:00:48 2025 GMT
            Not After : Dec  7 01:00:48 2025 GMT
        Subject: CN=cf12ee47fe7d587d1cd8edfdeda6ee95494b60e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4b:3c:80:07:aa:36:3f:e1:47:25:85:21:6c:
                    a7:7c:f8:ea:d9:fd:64:13:e2:d8:cd:8e:1f:42:3e:
                    9c:e4:d7:ed:bc:06:5c:b1:d8:8d:f3:77:10:89:2d:
                    8d:85:4a:36:37:e4:63:fd:b8:e8:5a:1c:ce:b0:e2:
                    52:ba:2d:c2:f7:aa:72:62:23:8f:48:9e:bf:aa:7f:
                    a6:f4:8f:cf:e2:5d:a0:b8:ad:ff:b7:91:62:bf:14:
                    26:ed:9b:3c:85:af:f6:68:4b:0a:48:05:ed:cf:25:
                    a7:bf:5d:fd:25:80:54:87:94:e1:bf:b8:6e:d8:63:
                    7d:64:cd:47:07:db:09:e2:0b:94:ab:c4:db:3e:c5:
                    b1:6c:72:2a:2c:4c:b6:ef:50:3a:6e:c8:dc:4c:cc:
                    ad:6c:88:d4:b9:bf:a6:89:23:76:46:52:9a:18:6c:
                    ec:2b:2d:1f:97:00:54:b6:43:6e:34:fb:bb:56:df:
                    24:da:0f:e5:c1:65:27:fc:e6:78:5a:4f:12:43:c4:
                    f9:ce:33:2d:82:88:68:aa:20:fa:a8:ec:35:17:0e:
                    0c:02:5b:f6:a0:14:ec:14:2d:f6:3a:86:6a:f3:29:
                    a4:ec:c0:72:32:e4:0a:72:c2:18:f7:04:0a:6c:d6:
                    ba:f3:40:23:02:65:b4:ad:79:6f:c0:ac:a9:ed:f3:
                    05:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:12:EE:47:FE:7D:58:7D:1C:D8:ED:FD:ED:A6:EE:95:49:4B:60:E2
            X509v3 Authority Key Identifier:
                keyid:FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e1:d1:33:c0:bc:59:39:b7:26:2a:0c:d5:a6:45:e2:92:fc:
         e7:76:bd:bd:ca:fa:8d:15:2a:93:b2:24:22:a3:ef:b2:2f:d4:
         64:ff:88:92:e7:8b:17:c7:0f:69:df:44:e2:16:b8:f8:10:e4:
         63:8e:37:00:b8:27:a8:fc:ce:13:f2:2d:a5:83:5d:e2:2c:f9:
         d3:48:88:3c:a8:a4:1a:98:65:f6:42:93:39:76:65:69:6a:90:
         ae:04:76:92:25:d5:21:83:8c:90:6d:29:0d:65:d2:e8:d7:32:
         6f:e2:79:4f:1e:0f:ae:33:5d:61:a1:da:e7:9b:50:3a:67:09:
         c0:c3:a5:da:1f:3b:d8:2e:e8:24:69:be:93:40:68:c4:8d:e3:
         b6:12:06:82:88:40:51:c7:bc:a5:02:b1:b9:7b:22:eb:26:5b:
         ab:54:57:8d:6e:e3:7a:47:4c:c0:dc:4d:a0:dc:8b:2f:f2:1b:
         17:8c:4c:1f:99:11:2a:45:6d:32:09:89:a8:f6:12:98:3d:15:
         0c:82:64:5b:fa:e2:80:f1:e7:73:c3:43:57:58:eb:95:5f:f1:
         e5:3d:51:ae:6e:42:b3:67:fe:fa:8f:cf:24:94:cf:a6:1c:15:
         c8:9e:f5:b9:8b:77:ef:25:39:5c:20:dd:ad:f6:00:9a:45:de:
         9b:ad:eb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:00:08 2025 by rpki-client